Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a313a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a313a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          w615pgb8327T7f+dxsTw/yXlZX8T/1/WBwv7UfqTJq8=
Subject key identifier:   99:FD:7F:54:38:90:50:BF:B0:3E:D4:6F:36:D0:4B:D1:97:2E:29:D6
Certificate issuer:       /CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
Certificate serial:       74A76A5264FB179AF3336EA634922368F1B84D75
Authority key identifier: 64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a313a3a2f34382d3438203d3e203238323630.roa
Signing time:             Tue 10 Aug 2021 17:33:14 +0000
ROA not before:           Tue 10 Aug 2021 17:28:14 +0000
ROA not after:            Tue 09 Aug 2022 17:33:14 +0000
asID:                     28260
IP address blocks:        2804:28e4:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a7:6a:52:64:fb:17:9a:f3:33:6e:a6:34:92:23:68:f1:b8:4d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
        Validity
            Not Before: Aug 10 17:28:14 2021 GMT
            Not After : Aug  9 17:33:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:3c:a2:d4:2c:a4:2a:5e:a6:72:53:1f:83:
                    70:f6:25:35:fc:dc:0f:e9:03:78:11:e4:d2:a8:fb:
                    fe:53:01:8a:e8:a6:09:4a:6b:9f:c3:41:9b:a6:4c:
                    1d:44:32:c2:81:58:8a:93:eb:e6:e4:cc:50:5d:7e:
                    97:af:ff:bb:c8:76:d2:8a:fc:2e:d0:86:a9:7e:80:
                    9a:aa:f2:86:b5:6d:cf:57:cc:72:7b:bc:23:b5:e9:
                    e0:fe:5d:43:5c:02:ee:f2:86:b9:da:04:b7:c3:10:
                    60:7c:b2:e7:eb:81:28:bc:ed:be:5d:b6:20:68:b0:
                    dc:7f:70:25:a2:99:db:99:6a:33:08:8f:4d:a9:92:
                    e8:52:21:f2:9a:c2:b3:1c:70:35:82:70:d8:91:ef:
                    04:66:cd:93:e6:9c:ad:bf:09:82:7a:b0:b2:57:f5:
                    8b:20:1f:8d:89:ea:55:94:94:e4:f2:bc:85:1b:b0:
                    46:f9:30:fd:e0:69:b2:c2:66:c7:5f:d9:30:6c:7b:
                    12:fc:61:d3:7e:98:73:47:58:ac:87:6c:2f:a8:60:
                    ff:b5:53:7d:82:89:dd:43:e8:9d:d0:2d:df:16:d1:
                    a0:6a:0c:d5:62:82:cf:3f:0f:ad:2a:68:74:50:30:
                    79:6d:2c:54:62:e6:9c:e4:be:54:40:b1:de:e3:93:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FD:7F:54:38:90:50:BF:B0:3E:D4:6F:36:D0:4B:D1:97:2E:29:D6
            X509v3 Authority Key Identifier:
                keyid:64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a313a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:87:b3:b4:0f:3a:f8:42:10:a6:39:45:f6:0c:d9:df:f7:52:
         a3:ca:ef:c6:24:79:69:c7:5a:7c:40:00:21:99:24:84:f2:31:
         2a:77:25:c9:b4:f8:d0:b0:47:e1:d3:b5:d2:2c:f7:3a:17:36:
         9a:33:50:06:30:58:c4:16:ae:79:b0:b7:ee:b4:ac:8c:4f:46:
         7e:34:a4:f0:eb:72:d4:c9:cb:b6:c0:bc:9b:bd:de:d0:23:3a:
         e7:d6:c6:10:06:d8:04:b9:0a:f7:9e:92:2e:3e:dc:96:38:76:
         07:82:65:c7:09:d3:33:14:10:78:0f:e7:51:fe:90:bf:93:36:
         63:46:6a:94:7c:b6:24:48:f1:f2:fe:33:75:10:4b:00:c1:f7:
         76:fa:60:37:f3:80:2b:14:60:7b:53:f5:00:c5:5f:5f:66:e7:
         55:cf:83:af:36:03:76:d0:b7:53:26:c3:91:20:5e:c6:52:a8:
         80:dc:0f:49:28:20:48:f0:27:a0:fb:5c:ab:6d:b9:ff:c7:92:
         11:9e:71:d7:b8:ca:15:de:7c:26:6d:89:5b:3a:c4:c4:d7:d4:
         c1:a7:04:34:08:41:cf:ac:1a:14:91:75:6d:79:a7:19:25:55:
         1f:11:c9:e6:8d:a7:d5:9e:5d:07:bf:da:0d:41:27:73:8b:fc:
         47:e1:9d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org