Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a333a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a333a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          xgFFYYTubqxCPd0DmQSLQBVzlDrnxFVI/XdTroY1woo=
Subject key identifier:   31:CE:59:5F:22:8B:4D:C0:73:62:58:DC:8F:3F:33:E2:64:DF:95:E5
Certificate issuer:       /CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
Certificate serial:       778693413EDA67624E0B3D74033BF48F989BB9D3
Authority key identifier: 64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a333a3a2f34382d3438203d3e203238323630.roa
Signing time:             Wed 09 Jun 2021 18:09:24 +0000
ROA not before:           Wed 09 Jun 2021 18:04:24 +0000
ROA not after:            Wed 08 Jun 2022 18:09:24 +0000
asID:                     28260
IP address blocks:        2804:28e4:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:86:93:41:3e:da:67:62:4e:0b:3d:74:03:3b:f4:8f:98:9b:b9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
        Validity
            Not Before: Jun  9 18:04:24 2021 GMT
            Not After : Jun  8 18:09:24 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:42:e3:14:fc:7b:39:c9:19:69:39:fc:f4:
                    29:35:de:e7:fe:7a:26:4f:a2:f4:a6:56:27:19:58:
                    85:ac:d6:e9:96:3e:ce:1b:f8:54:e7:33:b1:11:e4:
                    f6:66:d0:48:32:b4:1d:12:2e:ab:21:11:e6:50:84:
                    ab:5d:66:fd:21:6a:0b:fc:b9:08:a3:a0:5e:1f:4f:
                    30:de:c7:f8:e6:73:49:87:cb:77:5b:69:6e:b5:46:
                    43:7f:88:13:f1:d6:2a:0d:9c:6d:33:0d:61:d6:0e:
                    ea:c1:8d:3e:1e:e1:3b:26:74:0b:fb:53:66:70:27:
                    6a:10:d4:9c:13:a8:4b:5f:58:59:ed:7d:91:f6:19:
                    6f:c1:e2:01:db:42:7e:af:5c:3e:46:c7:e3:50:87:
                    dc:6d:87:59:76:51:df:96:7a:91:28:07:79:47:7d:
                    f1:fe:f2:4d:c6:8a:68:7b:e8:11:f4:55:92:da:e1:
                    29:51:90:ca:f9:6d:e1:c3:20:0c:63:0c:1d:03:28:
                    08:1a:05:c8:b0:ac:e2:22:ad:95:09:1a:0a:8e:ac:
                    f1:0f:29:a6:1d:d7:86:18:99:05:a4:cc:74:5d:28:
                    bc:16:48:05:6f:f5:1e:b1:e6:da:31:e3:d2:fe:00:
                    5f:8b:55:22:99:58:95:6a:1d:5e:f7:83:5d:89:cc:
                    3d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CE:59:5F:22:8B:4D:C0:73:62:58:DC:8F:3F:33:E2:64:DF:95:E5
            X509v3 Authority Key Identifier:
                keyid:64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a333a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:40:26:22:24:06:37:a3:dd:24:9a:ca:86:91:d8:3f:49:19:
         6b:2f:0a:5b:86:0e:e8:1b:02:2d:8d:1a:c3:f7:f0:c0:3a:7b:
         fb:70:96:63:58:9c:7e:ce:56:43:13:60:27:cf:69:a3:a8:83:
         96:00:b5:15:ff:69:8e:3f:8e:31:3f:c8:c5:8c:3b:d8:0d:e9:
         67:76:22:53:61:81:b1:5d:92:19:8a:77:a3:8a:8c:05:45:89:
         9c:06:fe:b0:b3:68:7a:46:75:18:72:d4:b5:ee:0e:4b:42:d3:
         68:54:c0:2d:a0:18:e7:b0:ef:a6:0f:c7:9d:7b:fc:22:09:bb:
         fc:33:ba:ea:ac:46:e8:30:f1:95:aa:86:f7:52:be:c6:83:98:
         9c:99:1c:24:e6:df:f7:77:7f:f6:7e:81:9a:5d:a5:2e:11:34:
         dc:ff:16:4d:55:d8:67:fd:63:53:a2:04:aa:d6:18:d6:73:c2:
         3c:a8:dc:31:dd:78:15:e9:0a:ea:2d:a2:41:f2:9b:27:b9:cb:
         29:6a:1b:e4:c2:d3:36:a9:61:25:86:31:99:1d:8a:34:0e:a5:
         eb:4c:e1:b8:a4:59:0e:23:3a:59:5f:b4:44:86:d1:51:a7:2f:
         15:96:c1:49:a3:34:b2:37:95:9c:6e:48:ae:90:57:d7:ed:8e:
         43:c1:1b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org