Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a343030303a3a2f33342d3334203d3e20323730343036.roa
File:                     323830343a366238383a343030303a3a2f33342d3334203d3e20323730343036.roa (raw, json)
Hash identifier:          fq4Aakvdeq/cb5WrTgvTwjhhQ1mqQeAhfDJzABl7pUI=
Subject key identifier:   F7:C0:6B:A6:81:A0:5C:B4:84:5F:DF:4B:CB:89:02:38:8B:7C:17:51
Certificate issuer:       /CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
Certificate serial:       674A3557825E9524C7D12DE7F0B51FE63FC7BBF9
Authority key identifier: 55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a343030303a3a2f33342d3334203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:33:50 +0000
ROA not before:           Wed 03 Apr 2024 20:28:50 +0000
ROA not after:            Wed 02 Apr 2025 20:33:50 +0000
asID:                     270406
IP address blocks:        2804:6b88:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4a:35:57:82:5e:95:24:c7:d1:2d:e7:f0:b5:1f:e6:3f:c7:bb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
        Validity
            Not Before: Apr  3 20:28:50 2024 GMT
            Not After : Apr  2 20:33:50 2025 GMT
        Subject: CN=F7C06BA681A05CB4845FDF4BCB8902388B7C1751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:1c:27:1d:01:ea:83:a7:68:a3:9c:3b:73:
                    9c:79:09:cb:e3:0e:b5:a6:60:c5:26:6e:bf:82:ae:
                    d2:f2:45:5e:11:b9:97:ac:47:79:1a:2f:62:3c:0f:
                    a8:10:77:1b:fe:bf:c2:ca:eb:9f:6a:0b:fc:cb:0e:
                    2d:9e:98:14:f3:62:74:2a:df:36:e9:33:39:4c:19:
                    5a:f8:dc:e7:af:b7:2d:de:ca:5e:ec:a6:76:cd:e5:
                    c9:61:3b:f3:27:b5:0d:61:70:67:bb:f6:0d:fd:e4:
                    f6:7a:e3:f3:89:0f:d4:16:21:c0:94:39:6e:e9:5e:
                    6a:e4:4f:40:38:7f:22:9e:89:a8:fc:09:32:36:68:
                    4c:13:da:be:b0:65:62:6c:bc:81:6e:65:be:58:6e:
                    e1:db:d5:3b:76:74:bb:13:ce:fa:91:a1:7b:72:73:
                    eb:dd:dd:f5:c7:07:da:81:36:3c:d2:c5:0c:78:c7:
                    b9:ba:f2:e4:62:a9:97:1a:6c:2d:15:0e:30:0e:18:
                    f6:ac:93:14:26:2f:e7:0b:f3:e8:37:06:00:44:09:
                    f0:82:e5:1f:4c:56:97:c1:26:79:aa:dc:aa:6f:a1:
                    fa:44:0c:6d:14:b3:2c:39:33:2b:3f:82:92:c4:39:
                    50:1c:03:9d:95:9c:b4:da:08:31:4b:84:91:74:23:
                    b2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C0:6B:A6:81:A0:5C:B4:84:5F:DF:4B:CB:89:02:38:8B:7C:17:51
            X509v3 Authority Key Identifier:
                keyid:55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a343030303a3a2f33342d3334203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b88:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:ab:7f:fb:00:96:82:03:19:1b:97:06:b5:c7:d4:62:b7:13:
         66:f1:6d:81:42:93:64:b8:70:d2:ed:1c:34:6d:30:47:78:45:
         06:60:16:4f:03:ac:3b:29:c5:cb:9c:31:d3:41:f6:31:be:d2:
         b8:1e:39:a7:91:62:a4:83:74:b4:cf:a6:81:b4:4b:42:94:ab:
         b1:30:ec:e1:fc:e2:32:24:bf:ae:95:34:03:94:23:52:34:29:
         c5:b5:92:29:a2:5d:7f:f2:e7:a3:41:e2:9a:3a:cb:d4:72:31:
         44:33:d4:39:5d:0e:59:29:91:19:2f:1c:46:f7:5d:35:d1:2b:
         c1:cc:9e:97:10:77:5c:a7:26:be:c0:e7:0d:ee:d6:0e:04:3e:
         97:45:d2:d8:0b:63:06:39:90:e8:c3:f0:1c:2a:c9:83:32:0d:
         e4:2b:43:7c:be:72:50:ba:b4:d1:5d:f1:be:e2:7e:5d:ca:fa:
         5a:4b:39:b7:35:b7:85:26:07:4d:19:eb:2c:62:89:29:a5:06:
         a6:de:5e:5b:4c:54:54:9a:3b:8e:7e:63:7a:68:03:75:97:7f:
         3f:26:a8:e8:36:46:87:e2:2d:3a:27:04:83:1b:92:6e:9e:24:
         9e:91:98:24:e2:96:d9:a9:1f:cd:e1:03:24:fc:f9:99:34:8d:
         a8:db:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org