Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/323830343a6437633a3a2f33322d3438203d3e203532363334.roa
File:                     323830343a6437633a3a2f33322d3438203d3e203532363334.roa (raw, json)
Hash identifier:          1YEmMe3LzWvvZQcbtJmOH3qVEgMF3qRXKleq3ftPrCE=
Subject key identifier:   0A:A3:91:7F:1F:A2:B1:FC:8A:C5:76:C3:E2:2B:C0:E5:D3:8A:F4:A4
Certificate issuer:       /CN=B56F61CABD36A7D97FF8B7B2918E005EB040CA8A
Certificate serial:       306235275C9A9E7EF2DA9D4DB36EB78612412A8E
Authority key identifier: B5:6F:61:CA:BD:36:A7:D9:7F:F8:B7:B2:91:8E:00:5E:B0:40:CA:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B56F61CABD36A7D97FF8B7B2918E005EB040CA8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/323830343a6437633a3a2f33322d3438203d3e203532363334.roa
Signing time:             Mon 12 Jun 2023 17:49:40 +0000
ROA not before:           Mon 12 Jun 2023 17:44:40 +0000
ROA not after:            Mon 10 Jun 2024 17:49:40 +0000
asID:                     52634
IP address blocks:        2804:d7c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:62:35:27:5c:9a:9e:7e:f2:da:9d:4d:b3:6e:b7:86:12:41:2a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56F61CABD36A7D97FF8B7B2918E005EB040CA8A
        Validity
            Not Before: Jun 12 17:44:40 2023 GMT
            Not After : Jun 10 17:49:40 2024 GMT
        Subject: CN=0AA3917F1FA2B1FC8AC576C3E22BC0E5D38AF4A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:1d:92:2c:07:ec:14:bf:e5:59:26:60:41:
                    a9:12:3a:c1:c1:35:09:de:12:a6:17:da:2e:b4:cd:
                    83:01:d4:74:15:3a:8e:2a:47:26:80:2f:2a:62:c8:
                    2b:e0:d8:af:0c:a6:b1:bd:dd:43:6a:02:13:83:66:
                    f0:98:21:2c:90:87:f1:5c:55:1f:4b:27:85:1f:e6:
                    31:6c:cf:92:fa:a2:77:94:09:b7:70:d9:9b:63:c3:
                    6d:fc:ef:18:6d:c4:45:c2:2b:33:93:8c:1c:a1:b6:
                    d2:4d:6c:10:a3:1c:a6:39:10:9f:de:3a:74:73:b2:
                    2b:e8:a8:d1:88:b2:1e:f9:14:b1:e3:da:bf:2c:99:
                    f6:82:88:f4:84:ed:5d:92:e5:98:ed:ca:31:9e:15:
                    cb:5b:18:0b:f1:db:34:a4:d7:fe:5c:d0:60:9e:1e:
                    e8:8d:a1:8b:51:ef:ec:64:06:49:a9:e7:05:08:50:
                    e4:da:f8:52:fb:55:8a:42:5f:89:79:0e:a3:d6:06:
                    f2:7f:b3:37:4d:5a:50:bb:11:ee:84:a8:ac:07:85:
                    54:5a:be:44:cb:82:fe:43:56:de:88:2c:c4:e0:55:
                    3b:d6:ed:2d:da:71:99:cf:cc:ce:e9:1a:0f:b5:49:
                    c6:3e:0f:f0:12:b3:df:8b:e4:1a:63:83:15:f1:d8:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A3:91:7F:1F:A2:B1:FC:8A:C5:76:C3:E2:2B:C0:E5:D3:8A:F4:A4
            X509v3 Authority Key Identifier:
                keyid:B5:6F:61:CA:BD:36:A7:D9:7F:F8:B7:B2:91:8E:00:5E:B0:40:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/B56F61CABD36A7D97FF8B7B2918E005EB040CA8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B56F61CABD36A7D97FF8B7B2918E005EB040CA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/323830343a6437633a3a2f33322d3438203d3e203532363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:b4:2c:34:32:2c:14:7d:b9:86:97:6f:37:81:37:53:34:91:
         75:1f:42:a5:17:2f:5e:9a:b2:45:48:99:ce:6d:5d:82:de:9d:
         88:ff:e8:26:5b:11:47:68:42:54:ac:09:7d:ed:54:68:d7:00:
         18:c8:1d:f8:40:eb:ac:f6:e7:3c:51:a8:1c:00:e0:b8:09:af:
         b7:e0:14:f7:13:87:e1:52:f3:a9:c9:cc:f0:cb:2f:c0:1a:ba:
         94:41:08:9f:ed:1e:04:ca:6d:e6:93:7b:77:b4:c7:24:1c:0d:
         b9:82:20:eb:14:26:30:ff:40:b4:6f:8a:10:85:67:e8:9d:25:
         66:ab:cf:31:d2:81:10:a5:ec:ab:23:db:a4:e4:b7:7a:df:2f:
         1a:19:65:3e:90:f4:e4:38:04:56:09:cc:b4:d8:76:4a:0c:be:
         bb:de:ad:f3:4a:40:b5:d7:83:77:d6:c0:41:03:46:6d:b1:02:
         a1:8e:2e:de:47:c1:8c:6e:95:df:cd:a1:11:02:dd:aa:0d:56:
         23:74:f6:a1:58:a1:0b:1b:83:6f:8f:e8:ae:e6:96:83:7f:43:
         70:a4:78:d8:24:dd:4d:9d:a0:82:7f:b0:aa:eb:6e:95:11:88:
         38:e3:e3:12:dd:81:01:fa:17:41:c6:8c:c4:02:d7:5d:c5:47:
         b0:6a:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org