Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          43lWbgsbNMYV0tdJIro8KHAIrkW+KhOcUUKqhW//E3I=
Subject key identifier:   15:3E:46:16:54:71:73:E8:B1:B9:3B:91:AB:F2:95:D8:CE:95:60:3D
Certificate issuer:       /CN=B3FF99116A544117F00133530DA29FB28967FFBD
Certificate serial:       146A8DBCD8F3A3778606D0DF80FF1D1C165E51A6
Authority key identifier: B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Fri 02 Sep 2022 12:04:42 +0000
ROA not before:           Fri 02 Sep 2022 11:59:42 +0000
ROA not after:            Fri 01 Sep 2023 12:04:42 +0000
asID:                     264425
IP address blocks:        2804:1e60:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6a:8d:bc:d8:f3:a3:77:86:06:d0:df:80:ff:1d:1c:16:5e:51:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3FF99116A544117F00133530DA29FB28967FFBD
        Validity
            Not Before: Sep  2 11:59:42 2022 GMT
            Not After : Sep  1 12:04:42 2023 GMT
        Subject: CN=153E4616547173E8B1B93B91ABF295D8CE95603D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5c:76:a3:35:ee:5a:89:1f:94:45:19:83:ba:
                    c8:1e:32:21:b4:9f:f4:df:1f:4f:4d:ab:ab:e6:ab:
                    72:98:cf:f6:4e:3c:c1:fa:14:bd:1f:8e:9b:92:f3:
                    bb:4f:c3:25:8e:4e:5b:4f:cd:03:25:5d:72:98:be:
                    77:2d:2a:b7:ca:c8:b9:50:43:94:db:80:93:73:33:
                    4e:93:6b:25:2c:4e:0f:7b:58:64:a8:f3:d9:dd:94:
                    d0:71:b9:cb:85:b5:d1:fb:c9:fb:bf:48:28:8e:49:
                    52:33:55:10:82:22:09:9a:10:ca:e2:21:22:c8:d9:
                    0a:2b:30:c0:8e:ec:3b:e0:38:23:31:9f:dc:29:79:
                    f9:c1:b4:c6:be:24:0f:95:2e:db:e4:ff:12:25:89:
                    87:70:55:fe:12:f5:c6:c4:1b:1b:06:d5:59:9e:ef:
                    3b:52:90:10:8b:94:be:f0:fe:8e:28:1a:bb:3f:f6:
                    9d:5b:f3:5b:6e:c9:0c:e5:d0:c3:41:b9:70:4b:7f:
                    6d:5c:d0:ed:8d:10:e6:9c:71:96:01:33:4c:cd:bb:
                    14:2f:e3:22:30:70:b6:83:c6:c0:73:0b:aa:7f:dc:
                    71:67:33:ac:7a:ea:03:8d:90:6d:8d:91:85:ee:8d:
                    9b:63:2a:12:ac:b4:4c:e3:a6:a6:cd:d2:cf:45:52:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3E:46:16:54:71:73:E8:B1:B9:3B:91:AB:F2:95:D8:CE:95:60:3D
            X509v3 Authority Key Identifier:
                keyid:B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/B3FF99116A544117F00133530DA29FB28967FFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         43:66:89:66:dc:24:57:08:a1:5d:a4:cc:dd:70:00:6b:50:48:
         05:6c:41:46:78:1c:86:ad:a0:67:ab:48:a0:d0:8a:4a:d5:e9:
         e8:52:b9:5e:a3:a2:18:8e:de:2d:2d:3e:eb:a0:35:e4:33:f3:
         85:b2:d7:89:d3:b6:ce:5c:66:c4:3b:31:2b:ee:c0:e9:9e:41:
         dc:4d:58:30:65:e9:02:c3:98:cd:85:c2:cd:12:49:d2:de:2f:
         b5:41:3a:83:33:a4:02:8b:d0:a7:ec:3a:55:82:e8:9a:8b:71:
         40:4e:9a:f6:e1:97:a0:a4:86:f0:2d:08:c6:07:2e:9e:23:46:
         65:cd:9f:22:a3:ca:6d:80:a9:9a:ed:40:5d:2c:bb:28:b0:54:
         fa:f6:03:fa:94:2d:2e:89:c6:36:fe:da:6d:08:59:86:68:2e:
         ac:f9:96:24:b2:2e:1a:99:ab:b7:c0:b3:0d:ba:6e:9f:ed:0f:
         46:d5:97:0e:de:3b:4f:b3:25:59:ae:d6:23:7d:b4:95:dc:7b:
         b8:5c:24:fe:d5:0c:d5:6b:cb:08:0f:03:fc:49:b7:cd:3d:57:
         1f:d7:1d:be:1e:d3:1f:07:a8:4e:cd:53:28:19:29:fa:5c:6c:
         ac:cf:3e:ea:c9:b0:ea:f0:af:83:9b:53:43:d1:5f:48:5e:f0:
         ae:d4:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org