Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/1/323830343a353936343a3a2f33322d3336203d3e203631363133.roa
File:                     323830343a353936343a3a2f33322d3336203d3e203631363133.roa (raw, json)
Hash identifier:          1GcgEEPK7HgyH7CM90tTABlV1Ys0tcRISnfaIzgOIn4=
Subject key identifier:   64:82:84:44:FE:D3:C6:07:AD:69:68:D1:D6:64:B0:20:E8:D9:1A:CA
Certificate issuer:       /CN=CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C
Certificate serial:       48C4EE998A074D647709D0B5D8E14500D27A7A69
Authority key identifier: CD:A0:E2:D3:46:DE:DE:75:DC:8D:40:92:CF:5D:A9:4F:A2:44:C0:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/1/323830343a353936343a3a2f33322d3336203d3e203631363133.roa
Signing time:             Thu 04 Apr 2024 02:24:43 +0000
ROA not before:           Thu 04 Apr 2024 02:19:43 +0000
ROA not after:            Thu 03 Apr 2025 02:24:43 +0000
asID:                     61613
IP address blocks:        2804:5964::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c4:ee:99:8a:07:4d:64:77:09:d0:b5:d8:e1:45:00:d2:7a:7a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C
        Validity
            Not Before: Apr  4 02:19:43 2024 GMT
            Not After : Apr  3 02:24:43 2025 GMT
        Subject: CN=64828444FED3C607AD6968D1D664B020E8D91ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:79:e7:43:cd:99:77:d1:30:b3:9f:66:d7:
                    4a:06:34:91:e2:98:70:38:81:96:55:0d:34:36:e1:
                    98:61:fe:cf:93:08:a4:cb:29:3b:23:0b:1b:03:d8:
                    29:ee:61:09:e2:1c:23:07:e3:8a:c7:bb:fb:9e:d7:
                    49:ae:a8:c9:8f:c7:84:f7:e3:de:fc:44:98:d8:a4:
                    4b:13:67:ba:51:75:19:53:13:fa:49:da:b4:b9:f4:
                    09:d7:f4:0c:07:7b:4a:fb:bf:35:fa:90:65:0c:a2:
                    7e:3f:b9:48:6e:6d:c5:e3:7f:18:94:4d:78:92:4a:
                    f4:a7:32:6f:ef:91:69:ea:6a:fd:a1:40:fe:50:de:
                    a6:54:1a:dc:81:b7:37:2d:f1:7e:cc:02:7d:2b:96:
                    94:2a:98:23:41:32:25:2b:61:71:10:fd:ab:d3:ed:
                    c5:6e:13:e7:4f:09:d6:25:c6:4a:c9:44:55:93:d5:
                    a4:e5:98:63:a3:9f:cd:89:83:8e:0a:48:77:a0:5c:
                    e4:46:ac:d4:03:32:63:3a:7a:35:46:dc:96:98:0d:
                    6b:f9:1e:92:6d:90:55:ee:98:56:67:f1:84:94:67:
                    25:e9:30:a3:b7:cb:2c:c5:f2:ae:f0:89:2e:fd:85:
                    4b:57:17:8c:d5:25:99:8d:42:84:98:96:49:43:da:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:82:84:44:FE:D3:C6:07:AD:69:68:D1:D6:64:B0:20:E8:D9:1A:CA
            X509v3 Authority Key Identifier:
                keyid:CD:A0:E2:D3:46:DE:DE:75:DC:8D:40:92:CF:5D:A9:4F:A2:44:C0:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/1/CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/1/323830343a353936343a3a2f33322d3336203d3e203631363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5964::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:8d:1c:7a:00:0f:4e:27:56:5b:62:09:2e:4c:7a:6d:40:50:
         d2:ef:40:73:27:bf:6c:b0:16:56:57:38:35:51:a8:f5:5b:55:
         1d:00:0c:1d:48:d4:4b:7e:d3:0c:2e:a2:a9:a9:94:6f:7a:c4:
         10:d1:70:8f:96:ab:21:3d:22:bd:c5:fb:5a:29:55:4d:6a:db:
         eb:b1:18:d4:73:1c:2f:0c:5c:9e:ee:1b:1f:af:02:41:0b:5d:
         ff:44:a0:63:19:33:59:2f:dd:17:96:f6:c2:a8:43:75:25:e1:
         df:53:36:29:48:aa:a0:ef:1b:50:52:80:39:72:94:25:f7:d4:
         5a:2b:c0:3b:df:e4:d6:5a:9c:b9:04:2a:4f:b5:a6:ea:1b:17:
         a8:77:bc:19:c7:dd:31:cd:d1:74:0a:68:e8:bf:8d:c2:bc:78:
         f2:4f:50:ad:a2:dc:09:80:49:38:f1:d2:7f:6a:9f:55:a7:ab:
         86:c5:85:5c:71:be:b8:8e:bf:10:d6:53:d3:57:9e:a9:47:28:
         6f:fd:f1:82:f9:c4:04:3c:46:b4:22:9a:ac:f7:9e:34:85:72:
         f4:55:cf:93:65:54:3b:9c:81:3b:a0:98:9f:ed:9d:89:8b:de:
         77:5b:19:96:e6:e6:4d:8f:64:75:53:1b:46:79:fe:1b:6c:b6:
         3e:d7:45:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org