Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a3a2f33322d3332203d3e20323730343036.roa
File:                     323830343a366238383a3a2f33322d3332203d3e20323730343036.roa (raw, json)
Hash identifier:          5luml+8sazaZABP2ELED0JF9rIsjpmqShZjr2yfOHvE=
Subject key identifier:   7C:34:0A:03:AA:E1:E1:FB:53:65:30:76:8E:66:E2:96:6D:97:D0:EC
Certificate issuer:       /CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
Certificate serial:       578F0AAE30AC423C5DDACBBC3F09BDB095CA548D
Authority key identifier: 5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a3a2f33322d3332203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:33:45 +0000
ROA not before:           Wed 03 Apr 2024 20:28:45 +0000
ROA not after:            Wed 02 Apr 2025 20:33:45 +0000
asID:                     270406
IP address blocks:        2804:6b88::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8f:0a:ae:30:ac:42:3c:5d:da:cb:bc:3f:09:bd:b0:95:ca:54:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
        Validity
            Not Before: Apr  3 20:28:45 2024 GMT
            Not After : Apr  2 20:33:45 2025 GMT
        Subject: CN=7C340A03AAE1E1FB536530768E66E2966D97D0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:da:fa:ce:2d:6c:3e:db:3f:dc:89:8f:01:
                    33:4d:d7:78:8e:ad:a2:ee:a2:c7:2a:f4:04:72:54:
                    e1:ab:f2:37:09:e6:5c:2f:10:bc:1b:be:c1:34:f1:
                    b5:20:45:29:57:e0:c9:95:06:a8:2b:b9:3b:17:87:
                    90:43:66:2d:07:64:8e:c9:9b:2c:c4:99:90:fb:66:
                    1a:20:2c:26:ae:a9:b5:f3:50:b2:25:0b:10:33:bc:
                    35:3f:3f:45:b0:9d:51:8a:ef:99:1a:4e:91:1a:02:
                    68:68:98:d5:37:6a:a4:16:41:44:f8:ec:b7:ed:14:
                    69:fb:91:45:90:55:7f:48:81:34:40:7c:f5:21:56:
                    27:06:76:1b:b9:53:a3:80:82:e9:ab:a6:d3:2d:48:
                    ff:57:33:06:bd:7b:bb:77:d1:46:20:e9:d8:5e:0b:
                    f3:2e:59:b5:69:69:d1:ae:73:77:81:28:20:fe:40:
                    21:ec:e9:60:e1:24:ba:9d:da:f9:a0:5a:2d:6d:c7:
                    5a:e0:bd:49:63:23:ce:29:ab:91:fd:54:ad:c4:bc:
                    8f:e0:7e:0c:c7:ef:2b:99:22:2e:c8:6b:e1:96:af:
                    05:1a:f9:23:e1:c9:e1:eb:86:c0:3f:88:cd:2e:2c:
                    d2:ba:f9:ab:66:12:f9:c9:c1:54:33:18:d7:70:1c:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:34:0A:03:AA:E1:E1:FB:53:65:30:76:8E:66:E2:96:6D:97:D0:EC
            X509v3 Authority Key Identifier:
                keyid:5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/5FF0AF706C62B5250221CAAA58C63419A81F3472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a3a2f33322d3332203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b88::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:8b:11:05:fc:18:8d:99:67:07:07:b8:45:36:2c:fc:38:cf:
         55:49:6e:05:5b:7f:0a:e1:4e:e9:b8:16:3a:3f:12:31:e7:7c:
         79:02:f5:48:5c:5a:c5:d8:56:c7:66:07:11:0f:d5:27:f5:39:
         d3:cd:90:fe:be:c9:e3:ca:a3:b7:03:ed:a4:81:4e:3f:79:4b:
         dc:6d:2c:f7:1d:d4:10:23:5b:f7:5b:95:d7:4e:d9:48:1b:f5:
         02:7e:cf:f0:ef:81:e3:55:d2:6d:9a:62:29:b9:b3:6f:50:de:
         71:9f:97:85:2b:e1:f8:d3:1b:8e:aa:a6:a7:a6:57:78:53:08:
         66:7a:af:8a:51:07:cf:74:4c:f7:4e:7c:30:24:50:11:07:ac:
         91:19:7b:03:74:5f:9f:df:12:72:ef:d7:9d:2a:5f:e3:39:d7:
         21:df:50:7a:d1:d0:ea:70:e5:aa:8e:64:a0:08:73:4c:ba:20:
         4d:86:40:c1:38:ab:bb:6e:5d:77:66:23:7d:63:3b:c6:89:cf:
         2e:9b:47:5a:3b:09:c6:37:3a:26:f8:ec:16:a7:6a:73:2c:12:
         33:05:0e:24:71:50:32:49:1b:b9:73:37:ca:1f:bd:18:3a:f3:
         27:5b:50:19:41:e8:57:ac:76:21:cb:fb:62:3a:16:58:59:6e:
         6b:b2:a2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org