Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/323830343a3639303a3a2f33322d3430203d3e20323632353935.roa
File:                     323830343a3639303a3a2f33322d3430203d3e20323632353935.roa (raw, json)
Hash identifier:          CUOXk2FsgkDIdyAr6bSG1uJlDv9LU47YLOzYMKscdFw=
Subject key identifier:   11:63:69:96:03:2B:A3:75:EE:94:3B:50:33:39:3E:DE:55:58:14:8A
Certificate issuer:       /CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
Certificate serial:       274DDB9C9A605DFE878AC2D9BABF514D0F47C81A
Authority key identifier: 42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/323830343a3639303a3a2f33322d3430203d3e20323632353935.roa
Signing time:             Thu 30 Nov 2023 20:00:00 +0000
ROA not before:           Thu 30 Nov 2023 19:55:00 +0000
ROA not after:            Thu 28 Nov 2024 20:00:00 +0000
asID:                     262595
IP address blocks:        2804:690::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4d:db:9c:9a:60:5d:fe:87:8a:c2:d9:ba:bf:51:4d:0f:47:c8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
        Validity
            Not Before: Nov 30 19:55:00 2023 GMT
            Not After : Nov 28 20:00:00 2024 GMT
        Subject: CN=11636996032BA375EE943B5033393EDE5558148A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:3e:38:fa:1d:e4:42:f0:02:21:9a:0d:74:
                    90:82:2a:68:d4:0e:bd:47:c2:89:23:78:c5:94:5b:
                    6d:14:4b:f1:11:fc:5f:0f:f8:48:17:d8:39:17:29:
                    fd:4c:3c:03:68:05:ca:e1:cb:dc:6a:a6:62:02:41:
                    25:69:b0:5c:eb:35:93:11:33:77:0d:28:3a:54:f0:
                    8b:b7:57:e6:1d:60:9b:51:72:3c:6e:c1:04:8a:b5:
                    6f:e8:31:b9:ed:78:71:61:ca:0c:91:89:e6:8e:6f:
                    86:ef:db:0f:f3:fc:14:3e:01:4f:d8:4f:8b:10:df:
                    36:42:59:89:b5:be:97:2e:e6:fb:d6:a8:87:ea:80:
                    d2:95:ad:e9:18:3b:49:5d:17:7e:01:78:24:d4:a7:
                    9d:ae:42:a3:15:f0:5a:4e:1c:88:2e:c8:5e:76:7d:
                    7a:c8:dc:21:d6:6c:d1:79:9d:2e:1a:1d:7d:72:db:
                    0e:e4:2d:45:f0:b7:63:60:9a:e4:3f:1f:fd:28:a7:
                    5a:36:ca:32:93:93:8d:7d:a6:5a:25:6a:ae:94:44:
                    5a:60:da:64:e8:fd:26:c0:b8:9d:52:92:39:28:75:
                    ab:46:4d:30:4d:c6:d7:ab:34:2b:21:12:ef:c8:46:
                    e1:5d:3e:9c:12:a2:dc:33:79:f7:fa:ce:bd:0f:d2:
                    7b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:63:69:96:03:2B:A3:75:EE:94:3B:50:33:39:3E:DE:55:58:14:8A
            X509v3 Authority Key Identifier:
                keyid:42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/323830343a3639303a3a2f33322d3430203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:690::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:70:13:71:72:b9:11:91:35:6f:f9:e8:90:8a:6e:42:f0:5b:
         b8:b2:e8:8f:bc:3d:06:8e:23:06:a2:c3:99:4d:0d:30:5c:e3:
         4d:6f:a0:ac:5b:b9:26:43:36:a1:be:33:12:24:93:e0:5c:9e:
         3c:b1:02:16:9d:68:6c:e7:48:4d:7c:8c:55:ed:45:ad:05:8f:
         57:90:e3:0b:39:30:29:44:59:ae:07:b8:e8:30:1b:c7:26:75:
         fc:ea:d0:33:ec:14:f7:34:8b:13:28:fb:b9:d6:9c:f9:4b:2e:
         91:89:97:ee:46:84:46:83:63:27:c3:d7:84:96:6a:fc:4e:99:
         3d:ae:e1:0b:bd:36:c8:4e:c1:36:c6:bc:6b:c8:c9:d6:cc:50:
         4b:6f:30:9f:9f:8e:11:86:72:20:10:ff:14:58:e0:37:2e:7c:
         c2:5f:bb:24:0e:0f:f1:47:14:c1:1f:14:6f:3a:f5:73:8a:6b:
         fe:f9:3c:aa:4f:85:ba:c4:e9:ad:45:e5:cb:82:af:a5:ef:4c:
         c3:d9:d7:6e:6b:03:7b:08:dd:87:1a:80:96:4c:91:15:1d:e8:
         ab:3a:69:46:5a:a6:b2:59:bd:89:21:32:c1:07:5b:4e:7d:49:
         fa:e4:44:d5:36:b7:99:4b:43:0d:64:de:14:cf:be:b0:bc:bc:
         d0:56:34:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org