Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a393030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a393030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          LLWHE/eC3tpoEZK1sn2vwk7wDGj0p4QT7g44X8umtEk=
Subject key identifier:   E5:E2:A6:89:D4:75:05:AB:2C:54:05:8B:28:FB:E0:E2:12:B3:94:6B
Certificate issuer:       /CN=B3FF99116A544117F00133530DA29FB28967FFBD
Certificate serial:       7B62E94EA567C8EDC8E39082A1C06AC40E9317E3
Authority key identifier: B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a393030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Fri 02 Sep 2022 12:05:29 +0000
ROA not before:           Fri 02 Sep 2022 12:00:29 +0000
ROA not after:            Fri 01 Sep 2023 12:05:29 +0000
asID:                     264425
IP address blocks:        2804:1e60:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:62:e9:4e:a5:67:c8:ed:c8:e3:90:82:a1:c0:6a:c4:0e:93:17:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3FF99116A544117F00133530DA29FB28967FFBD
        Validity
            Not Before: Sep  2 12:00:29 2022 GMT
            Not After : Sep  1 12:05:29 2023 GMT
        Subject: CN=E5E2A689D47505AB2C54058B28FBE0E212B3946B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ac:7a:64:b7:bb:0f:c8:95:6b:57:0d:ca:09:
                    21:53:8c:22:a7:35:77:1d:40:08:81:11:d2:8f:b8:
                    15:a7:01:d8:a2:9b:28:2d:63:81:e3:f5:b6:65:43:
                    7c:b7:80:99:ef:81:60:71:49:91:28:81:99:3c:ce:
                    7c:d8:20:02:23:75:a8:c3:bb:fd:79:7c:e7:b9:31:
                    32:78:c3:1c:65:3a:e9:94:73:ec:54:18:61:85:0b:
                    fa:92:e5:d1:c1:c0:9a:56:08:e1:e2:56:90:52:b2:
                    6f:f3:0e:2f:bb:c7:02:16:dc:3f:1d:7f:b7:1f:f3:
                    24:4d:89:80:55:2c:36:87:81:81:ef:d5:2d:a2:22:
                    8d:c6:ab:9f:81:c3:08:13:d5:90:af:c7:7b:8c:a6:
                    9f:5d:5d:8c:0d:b6:a7:87:8b:6d:14:14:f5:f8:f4:
                    df:68:22:a9:6f:70:98:85:f4:a6:06:65:c3:da:05:
                    f6:dd:06:1b:d5:c7:71:f7:e2:a9:93:5d:ce:d4:cb:
                    25:cf:dc:72:2b:f8:75:0f:7b:dd:ef:bf:74:99:33:
                    0e:9d:f8:8b:51:7c:4c:a1:9b:63:75:75:85:5c:8e:
                    1b:4c:b1:34:ad:ba:77:67:e3:bc:eb:7e:0e:42:a3:
                    e2:8e:6b:8e:2b:69:f5:20:f2:96:19:6e:bb:23:58:
                    61:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E2:A6:89:D4:75:05:AB:2C:54:05:8B:28:FB:E0:E2:12:B3:94:6B
            X509v3 Authority Key Identifier:
                keyid:B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/B3FF99116A544117F00133530DA29FB28967FFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a393030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         41:cd:aa:68:70:c0:44:ff:39:e3:b4:f8:84:8c:11:c8:54:31:
         7d:ba:43:2d:f9:eb:7e:ea:f5:73:be:c2:ef:ba:33:2b:8a:aa:
         ab:d7:cb:84:b2:4d:7b:3f:8a:e4:1b:5d:36:45:89:2a:c7:64:
         06:9b:0b:85:03:c4:56:17:9c:59:f3:47:bc:79:cf:dd:15:00:
         f6:cb:30:de:e1:ab:7a:71:da:96:cd:a7:8c:21:76:c4:ee:8a:
         f6:fa:45:d2:42:6c:f1:da:4f:a4:fa:98:e6:46:49:98:a9:ea:
         0b:f7:47:c3:20:f7:f5:41:0a:9c:c3:a4:47:1c:5c:ab:5e:d0:
         94:0b:b7:4a:b3:ec:e4:64:da:ff:92:7d:a8:47:54:e2:b3:68:
         cc:c2:bb:97:5f:df:a8:04:69:ee:24:c9:b6:29:cc:14:ff:1e:
         df:a4:7b:64:ad:5e:e7:06:84:ad:07:c9:ec:1f:5d:7c:55:5d:
         4b:8a:92:b6:d4:f1:bb:cd:dd:90:1a:78:92:98:16:a1:44:1d:
         72:00:34:78:77:42:32:bb:10:5a:01:46:3b:24:17:ee:88:e2:
         2a:10:af:42:eb:13:fd:9b:53:d3:4d:56:f0:4b:43:4d:43:eb:
         6a:8f:f4:89:0d:44:bb:1a:0c:5a:a4:3d:05:14:42:fb:5d:cf:
         78:f2:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org