Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a633030303a3a2f33342d3334203d3e20323639353032.roa
File:                     323830343a363539383a633030303a3a2f33342d3334203d3e20323639353032.roa (raw, json)
Hash identifier:          T4vmbjFbR1bWeYow0VnNKJhET7Smys4ljARlk8+IZ6E=
Subject key identifier:   F4:34:EB:2F:A4:55:0F:EB:36:EF:D2:0A:4A:98:40:29:E7:12:12:26
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       6F743D8716ED2B793CD101C6825AD624A2425535
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a633030303a3a2f33342d3334203d3e20323639353032.roa
Signing time:             Tue 26 Jul 2022 16:00:00 +0000
ROA not before:           Tue 26 Jul 2022 15:55:00 +0000
ROA not after:            Tue 25 Jul 2023 16:00:00 +0000
asID:                     269502
IP address blocks:        2804:6598:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:74:3d:87:16:ed:2b:79:3c:d1:01:c6:82:5a:d6:24:a2:42:55:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Jul 26 15:55:00 2022 GMT
            Not After : Jul 25 16:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fe:eb:9d:d6:b1:55:f4:78:0c:22:af:e0:09:
                    fd:f6:fe:95:a5:e1:72:21:42:6e:38:66:71:b3:1b:
                    c6:ff:1e:b6:0d:39:02:be:94:36:e8:43:c7:d9:81:
                    59:c5:17:de:aa:44:f5:4f:8f:c6:96:bc:54:eb:91:
                    2d:f5:45:46:25:df:2c:b2:fc:f4:1e:87:2e:cc:c2:
                    76:17:b8:1c:f3:e7:12:7a:d9:ad:25:a6:3c:bf:bd:
                    39:d6:39:69:80:19:72:44:d0:f1:e0:7f:11:93:b2:
                    88:0d:75:3a:0d:2b:4c:e6:93:cb:94:da:f0:82:02:
                    4c:0b:9f:8e:3a:41:69:8d:1c:97:1c:e3:8b:52:ed:
                    69:6a:81:5e:45:12:28:12:dd:70:29:f9:ee:ee:ef:
                    0a:2f:92:88:00:2a:42:ad:8c:56:68:e3:54:a0:6a:
                    32:c4:aa:12:f9:63:32:51:00:ba:dd:8b:14:8f:b3:
                    97:b2:0c:54:29:8f:8a:d7:df:1e:57:82:3e:42:96:
                    f2:6f:3d:ac:6d:50:b2:79:91:62:90:ef:eb:a5:9b:
                    9a:fb:48:21:f6:4e:32:82:97:5f:2f:0e:82:93:e1:
                    db:57:5c:4c:5f:34:39:8a:e3:9e:fd:44:a2:94:bf:
                    a2:5a:ef:90:c8:1e:98:ed:f3:54:86:5c:0c:a2:1a:
                    66:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:34:EB:2F:A4:55:0F:EB:36:EF:D2:0A:4A:98:40:29:E7:12:12:26
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a633030303a3a2f33342d3334203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:ca:38:d0:c8:99:b1:d7:be:51:12:70:03:1d:9f:b0:58:ec:
         6f:ac:f4:49:e6:13:e0:05:fe:90:b7:ce:ae:dd:4d:1e:9c:b9:
         e2:53:28:ae:73:55:1a:bb:92:0a:41:ff:1c:10:41:2f:c4:9c:
         fb:56:1f:ef:fd:d5:e2:07:82:af:0d:84:ce:d6:c9:9f:4e:16:
         9e:9d:4c:f0:3f:89:b2:fc:0f:d6:e2:ba:35:c2:33:28:88:62:
         ae:46:37:46:65:60:e9:40:a7:b2:d5:03:02:49:a7:04:19:86:
         40:bf:14:ce:da:ca:d2:1c:48:61:96:74:a6:21:c4:c6:df:e9:
         5a:68:0f:a2:6f:74:43:d7:70:83:12:25:ef:03:34:c2:75:88:
         a3:e7:89:8b:64:df:76:57:5a:aa:4d:c9:15:e8:c8:08:2f:56:
         59:e8:3f:10:67:b1:33:63:de:79:79:30:c6:c4:15:91:a7:00:
         c6:da:bf:0a:ba:52:8f:84:65:10:69:6f:16:6d:b8:3a:ea:1b:
         29:08:58:f1:37:65:15:96:83:03:ff:a6:26:d4:e1:e1:2e:ab:
         6a:86:82:dc:d9:70:96:c3:0d:5b:ee:25:c9:a5:6f:a0:67:1b:
         eb:73:d9:ee:79:c9:ec:3e:48:ff:1f:89:6e:1d:42:bc:50:6b:
         e7:f9:cb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org