Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a363a3a2f34382d3438203d3e203631363038.roa
File:                     323830343a383237303a363a3a2f34382d3438203d3e203631363038.roa (raw, json)
Hash identifier:          e2s4v6Hnk3c4wFZy+O8Azq345tVRBs2aLQSd11A+q5M=
Subject key identifier:   26:89:78:03:80:15:D1:DB:1F:30:90:9B:2A:04:BC:53:AD:A7:AD:BB
Certificate issuer:       /CN=4400296416BB5FE1B6E540C3273ADBF56ACD2119
Certificate serial:       7E0025C180D76A7C0AF4D2755CD81DC9A879F17D
Authority key identifier: 44:00:29:64:16:BB:5F:E1:B6:E5:40:C3:27:3A:DB:F5:6A:CD:21:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4400296416BB5FE1B6E540C3273ADBF56ACD2119.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a363a3a2f34382d3438203d3e203631363038.roa
Signing time:             Thu 16 Mar 2023 21:07:37 +0000
ROA not before:           Thu 16 Mar 2023 21:02:37 +0000
ROA not after:            Thu 14 Mar 2024 21:07:37 +0000
asID:                     61608
IP address blocks:        2804:8270:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:00:25:c1:80:d7:6a:7c:0a:f4:d2:75:5c:d8:1d:c9:a8:79:f1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4400296416BB5FE1B6E540C3273ADBF56ACD2119
        Validity
            Not Before: Mar 16 21:02:37 2023 GMT
            Not After : Mar 14 21:07:37 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f5:ce:50:8a:07:04:c7:fd:25:1b:18:ef:d3:
                    00:63:b5:4a:27:26:7e:82:38:89:27:70:01:f3:a1:
                    15:1d:c6:24:21:6b:30:82:19:11:6b:e4:82:4e:83:
                    db:a8:75:ba:d5:99:6e:ed:0a:69:fd:06:5f:ed:c8:
                    61:93:31:08:90:5c:b0:92:87:4b:70:f5:70:11:de:
                    4d:71:b9:49:06:53:b5:5f:21:23:32:53:13:e2:5f:
                    76:22:75:3d:58:9b:52:00:d2:84:96:f6:55:92:34:
                    db:0e:a0:59:e9:b6:9b:41:99:c3:b7:b5:61:2f:40:
                    03:0e:81:09:47:50:b5:eb:25:f4:dd:0e:44:4d:5b:
                    7f:77:b0:2b:78:ab:2c:06:a6:61:ca:36:da:d3:2c:
                    29:34:9d:f8:d7:78:f1:62:72:77:9c:f2:89:19:b9:
                    64:54:ac:78:90:cf:7c:74:58:ea:83:54:e3:c6:6d:
                    bb:ac:2d:da:ee:36:f1:bb:22:8f:bc:a8:31:fe:e7:
                    01:3e:8e:59:fe:31:03:86:2a:3e:46:22:b2:f2:34:
                    7d:dd:53:33:80:23:c1:15:1c:93:b9:bb:1c:65:c0:
                    a6:d4:ce:3f:6a:2a:f7:b8:dc:7f:d6:37:97:cc:b2:
                    81:d0:6a:8c:65:1f:73:2d:f9:a0:c1:fc:06:db:dc:
                    55:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:89:78:03:80:15:D1:DB:1F:30:90:9B:2A:04:BC:53:AD:A7:AD:BB
            X509v3 Authority Key Identifier:
                keyid:44:00:29:64:16:BB:5F:E1:B6:E5:40:C3:27:3A:DB:F5:6A:CD:21:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/4400296416BB5FE1B6E540C3273ADBF56ACD2119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4400296416BB5FE1B6E540C3273ADBF56ACD2119.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a363a3a2f34382d3438203d3e203631363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8270:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:08:fb:a9:f8:88:0f:c8:a4:62:da:1e:49:1a:b3:dd:01:54:
         19:97:22:c4:1d:9c:a7:d1:92:76:77:de:9c:5c:ff:b5:0b:88:
         95:ca:db:26:fd:33:3e:d4:51:0f:e4:f4:2a:7a:6c:55:0b:81:
         53:fa:c7:ce:2a:95:bb:39:07:70:26:63:27:35:41:99:f0:56:
         0e:81:fe:55:41:14:15:88:03:99:d3:93:63:1e:63:09:23:a9:
         74:fd:f0:55:37:79:50:1e:88:d1:50:db:8d:40:a2:88:12:3d:
         a5:88:32:f3:0e:e0:86:38:da:fd:d6:ff:75:b4:ea:5a:ae:0c:
         ae:9a:58:46:7b:8f:03:c2:65:ab:b1:52:81:92:d1:b7:3d:14:
         7d:62:0a:54:e0:91:29:7c:c6:42:55:f2:c2:9c:46:eb:57:f3:
         b0:05:ca:92:1f:d3:8b:a1:30:59:76:01:75:57:ba:45:3d:ee:
         0d:cf:92:62:13:ac:7d:a3:e9:94:1a:f2:92:c6:a7:17:4b:b4:
         3b:05:4d:d0:8d:5b:d0:dc:b1:1f:e9:90:06:ae:40:9a:63:b0:
         1a:39:50:01:1b:ac:a3:c0:25:60:e3:1b:3a:ab:89:3e:7f:c7:
         ce:91:6f:67:e2:7c:99:c9:f5:ea:9c:e0:6d:ca:c3:f5:97:a4:
         1e:c8:43:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org