Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/323830343a376466633a3a2f33322d3438203d3e20323731353935.roa
File:                     323830343a376466633a3a2f33322d3438203d3e20323731353935.roa (raw, json)
Hash identifier:          HiP+04e6QGP4w8grm/q90yaixm7dqWmSQNeLf029b20=
Subject key identifier:   D6:F3:63:B2:2F:74:9C:3B:89:3E:81:CD:9E:58:AC:25:4C:10:40:9E
Certificate issuer:       /CN=68E11CA51A49C7293330A057D51A83866DBC98E7
Certificate serial:       07A428970BD4BBDD43BAF1636A928AC006727F01
Authority key identifier: 68:E1:1C:A5:1A:49:C7:29:33:30:A0:57:D5:1A:83:86:6D:BC:98:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68E11CA51A49C7293330A057D51A83866DBC98E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/323830343a376466633a3a2f33322d3438203d3e20323731353935.roa
Signing time:             Mon 11 Dec 2023 21:24:00 +0000
ROA not before:           Mon 11 Dec 2023 21:19:00 +0000
ROA not after:            Mon 09 Dec 2024 21:24:00 +0000
asID:                     271595
IP address blocks:        2804:7dfc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a4:28:97:0b:d4:bb:dd:43:ba:f1:63:6a:92:8a:c0:06:72:7f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E11CA51A49C7293330A057D51A83866DBC98E7
        Validity
            Not Before: Dec 11 21:19:00 2023 GMT
            Not After : Dec  9 21:24:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6a:33:49:e3:62:37:80:ae:39:4a:f5:cb:7d:
                    b1:59:92:eb:d6:40:4a:87:27:42:ad:6b:f3:2a:3f:
                    f5:f8:3f:3f:5e:04:ff:a0:50:19:6a:90:f6:7d:b2:
                    bc:a7:98:7d:9b:52:ae:5d:c0:80:9d:26:7c:ac:7e:
                    57:4f:16:0e:04:ca:94:b3:11:c4:bc:22:68:35:61:
                    ec:f2:46:9a:d4:04:81:30:01:da:15:44:8d:8f:15:
                    f1:02:87:bf:c5:d6:26:ba:d3:88:38:1e:ef:e3:81:
                    4f:00:04:65:cf:13:53:bf:aa:a6:8a:91:1e:69:04:
                    e8:26:60:9e:b0:e8:80:31:a1:40:15:59:b9:79:f4:
                    56:41:4a:a5:b3:1c:50:00:cf:40:86:a2:5c:0d:7f:
                    c2:7c:cc:af:52:80:6f:ac:ab:ec:61:29:e3:c5:e1:
                    28:7e:dc:9f:48:b1:af:fb:f7:d9:e6:1e:74:d4:08:
                    5b:28:c1:7a:33:dd:62:51:89:96:c2:3c:e3:05:46:
                    91:eb:6f:cd:18:fe:4e:72:7a:e9:e4:ff:e5:a4:f6:
                    75:69:a6:39:3a:a9:83:92:d8:3a:74:3c:e1:bd:19:
                    70:87:87:f5:95:bc:d2:fc:89:37:3b:7a:13:0e:16:
                    92:2d:6e:39:96:b8:e8:cf:20:74:58:f3:f1:cf:57:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F3:63:B2:2F:74:9C:3B:89:3E:81:CD:9E:58:AC:25:4C:10:40:9E
            X509v3 Authority Key Identifier:
                keyid:68:E1:1C:A5:1A:49:C7:29:33:30:A0:57:D5:1A:83:86:6D:BC:98:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/68E11CA51A49C7293330A057D51A83866DBC98E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68E11CA51A49C7293330A057D51A83866DBC98E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/323830343a376466633a3a2f33322d3438203d3e20323731353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7dfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:04:b2:6d:ce:08:48:d1:d4:49:82:63:16:db:e3:48:7b:08:
         3d:84:7f:bb:55:73:c5:83:4c:8f:ed:1b:6f:e8:19:f7:0b:4f:
         d4:56:2c:b3:ce:ea:d9:92:6c:8e:cb:a5:c1:13:c7:6f:44:bf:
         fe:9b:1a:fc:9a:ad:ad:b8:fe:85:69:ad:a9:e4:9b:e7:f9:05:
         35:29:47:b7:35:ce:63:09:e9:ab:97:16:f3:30:ce:0d:73:85:
         3d:03:cf:f6:81:1e:2a:c3:19:c8:ef:a4:b2:69:72:ca:a9:b4:
         f0:0c:a0:3b:46:50:5f:96:14:95:12:2a:9c:e3:5b:c9:e7:4c:
         0e:16:41:51:7b:a0:15:79:e5:de:a6:08:e7:4a:73:45:c1:3e:
         51:37:c0:1c:bf:d2:54:ec:55:94:32:fb:d9:f5:93:0f:eb:77:
         94:2a:38:e9:62:18:20:93:91:b8:1c:57:e2:d3:b8:d1:5e:6b:
         fc:17:11:62:6d:79:eb:09:ff:d8:0c:57:6a:13:84:21:9d:e0:
         4d:39:2e:03:bd:ab:e2:ad:1a:dc:58:6d:75:25:9b:93:f6:f6:
         a2:64:13:dc:4c:10:9b:84:63:2d:77:41:fb:4e:45:c8:55:ef:
         79:62:e3:79:e3:11:ec:06:4d:84:77:35:b1:24:c7:47:e4:75:
         2d:58:0b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org