Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/323830343a363537303a3a2f33322d3336203d3e20323639343930.roa
File:                     323830343a363537303a3a2f33322d3336203d3e20323639343930.roa (raw, json)
Hash identifier:          B9kdj6Am0ntl0Oq+iwhwcchZl45tF+iV3qz5O22wTxg=
Subject key identifier:   D4:39:01:EC:DD:B2:F3:09:B6:AD:ED:88:9B:5A:89:D5:48:1B:50:38
Certificate issuer:       /CN=C0501490D0E5E31AEE0C8BBD76C2719A183C500C
Certificate serial:       6DE0CE053554960458280E58ED9DC1A37E3F1970
Authority key identifier: C0:50:14:90:D0:E5:E3:1A:EE:0C:8B:BD:76:C2:71:9A:18:3C:50:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0501490D0E5E31AEE0C8BBD76C2719A183C500C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/323830343a363537303a3a2f33322d3336203d3e20323639343930.roa
Signing time:             Fri 29 Mar 2024 14:47:31 +0000
ROA not before:           Fri 29 Mar 2024 14:42:31 +0000
ROA not after:            Fri 28 Mar 2025 14:47:31 +0000
asID:                     269490
IP address blocks:        2804:6570::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e0:ce:05:35:54:96:04:58:28:0e:58:ed:9d:c1:a3:7e:3f:19:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0501490D0E5E31AEE0C8BBD76C2719A183C500C
        Validity
            Not Before: Mar 29 14:42:31 2024 GMT
            Not After : Mar 28 14:47:31 2025 GMT
        Subject: CN=D43901ECDDB2F309B6ADED889B5A89D5481B5038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:5f:03:67:db:34:af:30:b6:46:72:0d:da:
                    79:ba:8d:d4:81:a8:33:fc:a9:2e:af:4b:ed:3c:4a:
                    51:d7:aa:a7:49:19:eb:2b:40:60:91:eb:0c:80:ae:
                    4e:76:f1:0e:58:58:d5:e8:5c:a8:03:c0:c2:e9:06:
                    9c:10:58:86:2e:49:2b:79:10:d7:d4:a7:20:89:5f:
                    55:79:df:64:dd:63:2a:01:5e:f4:84:c7:86:fa:7f:
                    68:2a:26:98:63:04:5a:90:ad:dd:25:09:4b:0f:b7:
                    fb:f8:8d:da:c2:4d:24:4d:47:08:30:a6:0d:e5:63:
                    38:03:23:2a:cc:36:5d:45:e5:38:4d:a9:ce:71:00:
                    7a:f6:18:ba:ab:bd:b3:1b:d9:2a:b4:f1:23:73:99:
                    23:2a:32:a3:ff:6c:ef:82:8e:8b:40:80:31:e9:4a:
                    23:84:45:62:28:ef:f0:fe:f3:16:89:79:bd:ae:30:
                    03:d8:5e:6f:36:2d:fd:54:18:ba:c5:da:22:88:12:
                    95:2c:81:c6:4f:f6:c0:ee:25:6b:7c:93:30:24:a1:
                    1e:d0:78:31:b4:0a:c5:f7:c2:66:66:15:54:9f:61:
                    8f:e2:d1:f4:4f:d4:a1:fc:3b:6e:c2:48:52:b3:73:
                    db:da:27:3f:37:f1:fe:a9:4b:0e:85:3e:55:13:46:
                    aa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:39:01:EC:DD:B2:F3:09:B6:AD:ED:88:9B:5A:89:D5:48:1B:50:38
            X509v3 Authority Key Identifier:
                keyid:C0:50:14:90:D0:E5:E3:1A:EE:0C:8B:BD:76:C2:71:9A:18:3C:50:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/C0501490D0E5E31AEE0C8BBD76C2719A183C500C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0501490D0E5E31AEE0C8BBD76C2719A183C500C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/323830343a363537303a3a2f33322d3336203d3e20323639343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6570::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:04:14:a6:92:f4:ff:26:6b:46:81:be:76:ea:54:ae:04:d0:
         19:af:a8:44:90:de:e4:c6:c5:03:e0:15:c6:9d:a0:e4:c4:34:
         4c:81:a7:c0:a5:f1:cc:19:5e:1e:57:4f:f7:89:b1:1c:0a:8b:
         7b:87:7d:6f:05:7f:80:16:e6:75:26:ab:cf:1d:f3:b6:9f:28:
         60:18:78:32:12:fb:75:b7:37:6d:75:85:08:22:48:98:8a:fd:
         b6:2b:d4:06:12:c9:f5:65:f1:b2:b9:72:b7:17:83:dd:c8:6b:
         35:ad:68:04:e9:3a:09:58:a9:56:96:0b:9d:7b:ad:43:9c:ed:
         85:18:d6:82:2e:18:be:23:69:5f:f6:84:96:53:bc:81:88:19:
         82:76:d2:a3:1f:55:1e:0a:ac:12:ab:9a:eb:4d:19:20:ee:9e:
         50:37:9c:34:76:36:75:41:3f:1e:a0:c2:d8:0a:b6:0b:a5:cb:
         05:54:50:e2:60:ae:9b:9c:45:56:46:af:45:52:12:9e:7e:e2:
         7f:cf:cc:0f:74:39:a5:b2:5c:c8:21:eb:ca:70:98:62:97:6b:
         3a:4b:31:0f:f1:78:08:34:01:f4:cd:a7:bc:65:27:f4:65:57:
         68:0a:56:68:7a:b5:00:d1:9f:11:98:07:3d:61:ef:3a:a7:9f:
         41:e6:33:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org