Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjvqBPCqDwGJ6D8J6i7DjofsvxkCed3TDBFWZBCi154h/0/323830343a363238343a3a2f33322d3438203d3e203533303930.roa
File:                     323830343a363238343a3a2f33322d3438203d3e203533303930.roa (raw, json)
Hash identifier:          susDzEY0KpPaKwVcOVd0kfv7oQ2NtgGUzgYbKLoqrCE=
Subject key identifier:   F7:19:AB:CD:DD:31:50:54:E3:85:3F:45:C3:34:6E:04:3A:4D:B5:17
Certificate issuer:       /CN=81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1
Certificate serial:       70E423CC26DADDC9F9DC3B508981B64BAB3E8C07
Authority key identifier: 81:C1:E2:BA:A0:DC:82:F9:ED:22:47:D4:E5:D0:6F:2B:E3:1B:F7:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjvqBPCqDwGJ6D8J6i7DjofsvxkCed3TDBFWZBCi154h/0/323830343a363238343a3a2f33322d3438203d3e203533303930.roa
Signing time:             Tue 22 Nov 2022 17:16:00 +0000
ROA not before:           Tue 22 Nov 2022 17:11:00 +0000
ROA not after:            Tue 21 Nov 2023 17:16:00 +0000
asID:                     53090
IP address blocks:        2804:6284::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e4:23:cc:26:da:dd:c9:f9:dc:3b:50:89:81:b6:4b:ab:3e:8c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1
        Validity
            Not Before: Nov 22 17:11:00 2022 GMT
            Not After : Nov 21 17:16:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:ef:89:df:5a:ba:81:e1:c5:74:ff:05:a3:
                    18:44:94:ec:1f:69:81:ab:d6:1a:a8:df:18:23:6c:
                    85:b6:52:4b:70:7f:ca:2d:4d:c6:0e:fd:be:a4:07:
                    4e:67:82:a9:9b:ed:66:de:27:c0:22:a0:b0:3e:c8:
                    ed:f2:da:f5:ac:cb:82:91:81:e7:a5:43:30:62:7f:
                    8c:ba:88:df:4b:06:e6:71:05:f9:4a:ba:bc:40:46:
                    9d:28:ae:6f:c7:e2:91:56:5b:23:64:7a:f4:13:1a:
                    13:74:89:83:cd:a0:6a:30:4c:e2:25:2a:2d:b8:d5:
                    47:a5:40:7b:70:ff:68:50:85:64:83:49:97:a7:c0:
                    00:18:f5:c6:33:db:c1:79:c4:12:64:fa:d8:97:66:
                    bd:7c:57:98:2a:06:82:59:a6:03:cb:ac:58:41:c6:
                    d4:6c:88:e1:59:a3:e1:bb:de:d4:cd:59:14:aa:f7:
                    01:90:8f:4a:fa:c7:87:88:b6:48:2c:ae:fa:08:f0:
                    56:79:44:62:3a:46:a0:25:8c:1a:c8:e4:94:84:5b:
                    65:d1:cb:7f:6a:e9:98:cb:d8:b3:a9:b0:63:e2:04:
                    cd:eb:97:cb:42:40:95:93:d5:08:db:9c:36:22:4d:
                    58:a3:1c:fb:92:22:09:5b:86:7f:36:87:81:fd:25:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:19:AB:CD:DD:31:50:54:E3:85:3F:45:C3:34:6E:04:3A:4D:B5:17
            X509v3 Authority Key Identifier:
                keyid:81:C1:E2:BA:A0:DC:82:F9:ED:22:47:D4:E5:D0:6F:2B:E3:1B:F7:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjvqBPCqDwGJ6D8J6i7DjofsvxkCed3TDBFWZBCi154h/0/81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjvqBPCqDwGJ6D8J6i7DjofsvxkCed3TDBFWZBCi154h/0/323830343a363238343a3a2f33322d3438203d3e203533303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6284::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:05:58:1b:00:c5:51:8f:a6:7e:3a:1f:62:c5:05:95:8b:96:
         13:c4:2f:1d:f3:0c:14:3f:95:ac:b6:7a:c0:28:fc:50:60:19:
         52:6b:84:ca:aa:12:9b:e3:2d:8a:d8:7d:5e:8f:ad:57:83:86:
         e1:a3:6a:9f:5a:07:92:14:99:a6:5a:16:37:c2:d0:d4:d1:d5:
         fb:54:76:ef:87:f7:83:3b:f7:53:0e:da:26:ba:c7:cd:93:77:
         32:fb:0d:3d:92:2a:6e:95:1f:51:29:e7:3a:46:89:ea:cd:5f:
         a4:b3:f8:f7:2b:e8:91:91:58:8a:d9:90:06:5a:09:63:57:40:
         36:65:fd:dc:3b:8b:5a:bf:03:d3:53:c7:39:85:b7:c1:02:c4:
         3e:88:c7:35:d6:1e:32:7f:ec:e0:c4:ee:b8:60:92:b5:b5:56:
         4a:26:bc:5f:38:49:89:b6:19:2a:a8:d4:00:ea:a7:b0:bb:5c:
         19:27:53:67:d8:30:23:e7:24:b9:ed:a2:05:63:52:88:48:25:
         56:7b:fa:1c:14:f1:14:64:d1:7a:4f:83:dc:93:2f:1d:70:ce:
         74:54:2c:63:4d:ef:de:50:5b:3e:47:86:73:5f:c7:7a:a2:b8:
         8d:e0:ed:bf:c0:21:ba:5b:75:0c:f9:44:ad:b7:b9:40:b7:90:
         63:ff:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org