Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a3a2f33342d3334203d3e20323730343036.roa
File:                     323830343a366238383a3a2f33342d3334203d3e20323730343036.roa (raw, json)
Hash identifier:          bBmyrVTVhcbx/2hSdIkrznVKGRpMCSINfmqOZk5xi4E=
Subject key identifier:   35:A1:C1:8E:00:5E:1F:E2:6F:97:76:21:58:49:86:BA:CD:40:67:C1
Certificate issuer:       /CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
Certificate serial:       616AE8DB4713B62CC0B228827015FEED8D05AD7B
Authority key identifier: 5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a3a2f33342d3334203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:33:42 +0000
ROA not before:           Wed 03 Apr 2024 20:28:42 +0000
ROA not after:            Wed 02 Apr 2025 20:33:42 +0000
asID:                     270406
IP address blocks:        2804:6b88::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6a:e8:db:47:13:b6:2c:c0:b2:28:82:70:15:fe:ed:8d:05:ad:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
        Validity
            Not Before: Apr  3 20:28:42 2024 GMT
            Not After : Apr  2 20:33:42 2025 GMT
        Subject: CN=35A1C18E005E1FE26F977621584986BACD4067C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:d0:49:3e:0f:ff:38:63:9d:60:76:10:b8:
                    1e:fe:3a:04:b7:b5:d4:db:d2:5e:26:a2:22:9d:85:
                    dd:53:d8:8d:98:16:9d:f0:c0:8b:2f:16:f6:3c:33:
                    67:25:80:4f:d3:03:a3:e9:db:c7:41:8c:ce:3a:59:
                    23:9b:84:29:c7:66:d4:08:37:e0:e1:7c:1a:44:06:
                    ce:50:f8:0a:7c:0a:6b:d8:54:7d:c8:65:f0:7b:10:
                    fe:0d:16:9c:c6:26:3b:a6:39:21:40:92:60:3e:36:
                    16:3d:f8:dc:b7:9d:fe:4a:90:2f:aa:e8:b1:53:e0:
                    37:43:ad:a9:7c:cc:d5:e0:45:02:fe:11:e3:99:44:
                    2d:ab:16:6c:92:7f:5c:b4:f8:ed:cb:ab:dc:3a:3a:
                    b9:1c:2e:26:95:63:42:7a:1e:54:1e:96:9f:68:9a:
                    3d:5f:06:ba:52:a0:fd:ba:35:1f:7f:61:6c:32:ad:
                    48:be:6f:1b:0f:a3:4f:17:75:4f:4a:01:ad:17:40:
                    8e:a7:4c:e0:0d:35:ad:43:ac:0e:2f:67:34:2d:c9:
                    93:e6:75:a6:46:07:73:45:50:1a:b6:ef:4d:9a:5b:
                    16:c1:f6:75:54:f4:b3:07:46:f7:96:6d:82:d0:04:
                    69:ad:3c:4d:68:b3:a1:a3:1a:51:bd:a1:45:5f:7c:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A1:C1:8E:00:5E:1F:E2:6F:97:76:21:58:49:86:BA:CD:40:67:C1
            X509v3 Authority Key Identifier:
                keyid:5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/5FF0AF706C62B5250221CAAA58C63419A81F3472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a3a2f33342d3334203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b88::/34

    Signature Algorithm: sha256WithRSAEncryption
         12:38:b6:d1:01:fd:45:42:4f:64:82:04:6a:26:4b:46:8b:7e:
         e7:d0:11:1a:a5:b8:70:a8:b9:7a:bc:b9:47:51:2b:9d:9f:b9:
         67:db:58:22:8c:27:1d:a5:8e:da:f7:ec:0f:3c:54:69:81:76:
         ec:de:e2:d3:36:c5:bf:de:6c:aa:30:b4:b7:1b:82:89:3a:d2:
         63:08:d8:99:ff:91:01:6c:21:a0:18:66:3b:86:d3:99:cb:44:
         78:27:19:93:bf:17:a9:80:ff:78:f8:57:28:b6:a2:52:45:f5:
         d9:86:f0:ef:84:15:58:0d:fc:26:0a:7c:7c:fb:24:e3:d0:33:
         e0:63:28:68:99:b2:2c:75:93:46:53:d4:0c:4e:70:ff:f2:c9:
         3b:cf:3c:f9:77:ec:c7:b9:37:56:47:db:d6:f2:91:7f:a1:1c:
         7d:bc:47:c8:c1:60:6c:9f:cb:f9:af:2e:5b:61:88:ee:c6:11:
         76:06:d9:aa:6d:b1:16:2a:26:61:6b:93:bf:35:0f:d8:d1:d3:
         28:95:e2:9b:fc:74:1a:d5:5b:97:b2:0a:82:64:5f:a1:9a:0e:
         f1:63:0e:e0:66:a4:1c:a0:b3:89:35:2c:b6:f1:e6:51:46:e1:
         41:4f:70:03:90:ba:7f:1f:36:b0:63:46:f3:46:08:07:a6:95:
         66:66:ab:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org