Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/323830343a3136633a3a2f33322d3332203d3e203238333039.roa
File:                     323830343a3136633a3a2f33322d3332203d3e203238333039.roa (raw, json)
Hash identifier:          Rvw84YistY95CmGve7PsW6mka2w++tYIhv0e9K5smPo=
Subject key identifier:   A1:FC:8A:0D:96:F1:B7:AF:79:31:CC:24:7B:21:AC:DA:23:5E:A3:60
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       79DFEF62D725842A2F8D2119595917BC3020EBE4
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/323830343a3136633a3a2f33322d3332203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:43 +0000
ROA not before:           Thu 14 Sep 2023 18:42:43 +0000
ROA not after:            Thu 12 Sep 2024 18:47:43 +0000
asID:                     28309
IP address blocks:        2804:16c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:df:ef:62:d7:25:84:2a:2f:8d:21:19:59:59:17:bc:30:20:eb:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:43 2023 GMT
            Not After : Sep 12 18:47:43 2024 GMT
        Subject: CN=A1FC8A0D96F1B7AF7931CC247B21ACDA235EA360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:5e:f9:14:8c:b7:01:2f:da:19:c3:80:93:37:
                    31:3e:98:99:08:2d:32:33:05:e1:f4:7a:c8:aa:a4:
                    a7:de:32:da:38:52:40:1e:20:a0:9b:a8:61:4e:85:
                    ab:e8:d3:13:c9:12:ec:8c:b8:4f:3a:af:6e:63:ca:
                    d8:7b:45:5c:b3:7c:a5:60:6e:9a:7b:2d:08:87:28:
                    8c:9f:73:7b:86:ae:1c:40:0c:bb:0c:6b:24:e3:74:
                    78:2c:33:a8:f6:a2:73:c8:7f:7b:d6:ef:c7:5a:5a:
                    10:27:20:f3:40:bb:03:23:ac:86:9f:c9:a4:c8:44:
                    5b:e8:9d:92:94:21:8a:1d:dc:be:7c:91:54:0e:6f:
                    67:fa:ff:38:59:d7:03:ca:62:4e:54:38:40:24:e2:
                    1d:a4:71:ef:93:01:a1:0b:1e:67:f6:aa:8b:61:cb:
                    cc:ba:be:e2:d3:eb:3e:ab:93:e1:fc:e6:07:02:74:
                    35:22:37:2d:57:3e:0a:fe:b3:96:ea:49:8d:3d:df:
                    8b:5c:6d:df:d3:c7:a8:e1:3c:34:13:6f:8e:6d:09:
                    16:30:8f:dc:20:d9:7e:d5:4e:be:9c:09:d7:52:de:
                    f4:40:cb:9c:32:f6:f8:20:44:66:c2:89:57:8b:2d:
                    c5:0f:23:0d:9c:b9:9f:e3:6e:bf:1f:d9:97:31:6f:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FC:8A:0D:96:F1:B7:AF:79:31:CC:24:7B:21:AC:DA:23:5E:A3:60
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/323830343a3136633a3a2f33322d3332203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16c::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:42:b6:9c:7e:14:52:cb:f5:58:fe:a0:42:2d:97:47:6e:03:
         88:b1:7c:58:3a:d8:c9:0e:61:d8:87:79:aa:b8:60:07:d9:da:
         81:80:7a:54:38:11:84:4a:a7:22:5b:9c:af:05:d0:8d:e7:f5:
         2e:97:11:c4:2d:82:40:02:20:6f:5e:ed:72:a6:68:1e:98:99:
         4c:a4:84:6f:1d:16:e7:3d:f5:04:2e:37:03:5b:72:84:87:4d:
         91:e3:0c:cb:a2:c3:9c:c2:94:92:c6:62:2e:5d:21:a0:1c:ec:
         33:7a:cb:de:52:8d:fe:71:b0:1e:b9:06:b4:d6:57:8d:4a:8b:
         07:1c:ca:4e:be:ba:78:46:16:78:84:54:0f:78:96:2b:10:27:
         6e:95:84:49:77:d3:46:10:ff:2b:f1:04:97:ba:1a:a1:2f:cb:
         4c:7c:84:b3:4b:13:1e:fa:41:b4:00:c5:a9:d4:19:1f:40:60:
         6c:16:eb:1c:c9:3f:7c:b6:5b:ee:9c:81:a5:79:ce:4f:f9:32:
         a6:9b:cf:39:38:63:fb:49:35:c8:55:83:c8:b3:4a:d9:d4:a5:
         f8:db:ee:04:55:8b:83:3b:34:0b:5c:bb:6e:b7:68:81:8e:2f:
         54:ca:2c:63:96:88:f3:67:3b:fb:5b:7e:42:85:12:a0:c0:24:
         50:e4:ca:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org