Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa
File:                     323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa (raw, json)
Hash identifier:          OvaL1UiYiQIFi6foC4li9UDlQtk2gzsLUPb8tz+jcKI=
Subject key identifier:   02:53:92:3C:55:2B:CE:4B:BF:F9:0B:0B:D9:4F:7D:B6:BD:06:4F:4F
Certificate issuer:       /CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
Certificate serial:       1C4637C0CE2FEF9F15A334B037790DC4FE3CFD01
Authority key identifier: C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa
Signing time:             Wed 03 Apr 2024 13:30:51 +0000
ROA not before:           Wed 03 Apr 2024 13:25:51 +0000
ROA not after:            Wed 02 Apr 2025 13:30:51 +0000
asID:                     268726
IP address blocks:        2804:59cc:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:46:37:c0:ce:2f:ef:9f:15:a3:34:b0:37:79:0d:c4:fe:3c:fd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
        Validity
            Not Before: Apr  3 13:25:51 2024 GMT
            Not After : Apr  2 13:30:51 2025 GMT
        Subject: CN=0253923C552BCE4BBFF90B0BD94F7DB6BD064F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:fd:18:35:1b:6e:5a:32:2d:cf:b6:16:5f:
                    ad:72:d0:a7:f2:b9:9c:26:60:94:44:31:1c:89:ac:
                    56:7f:d2:9c:2f:be:98:40:c0:1a:ea:3e:1e:50:fe:
                    62:a7:38:3f:ae:c1:25:c4:ca:20:4c:8f:f4:17:42:
                    a6:61:c7:9d:e5:85:42:4e:eb:84:6b:3c:c5:5b:27:
                    01:49:21:aa:67:99:75:1f:af:6a:23:aa:f1:12:47:
                    46:d9:2b:49:ff:32:ec:68:21:fd:2b:81:ef:48:4a:
                    20:59:db:e2:5b:51:d5:db:4b:aa:7d:08:2c:c7:8a:
                    cc:b1:cc:f1:8c:9e:9d:80:b7:75:c9:bf:26:6a:10:
                    05:77:0c:85:36:7f:05:79:7d:cc:cd:96:ce:a3:ea:
                    0a:05:4e:76:b5:bb:a8:d4:26:89:fb:29:5a:3d:ef:
                    44:df:a6:1d:4a:88:6a:46:94:72:b3:6b:d2:5e:e2:
                    62:4b:0f:18:34:a4:42:e6:7d:87:b6:22:0d:fb:b9:
                    4f:1f:dc:6c:0c:69:4a:29:fc:1a:99:30:3f:d7:f4:
                    14:c4:8f:14:3f:e9:ae:3a:d1:2a:af:64:94:9a:1c:
                    74:af:4a:05:8f:8e:79:69:5e:83:ff:97:b6:4c:91:
                    a8:0e:aa:0c:04:2f:49:8d:e9:fb:02:19:f0:03:ae:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:53:92:3C:55:2B:CE:4B:BF:F9:0B:0B:D9:4F:7D:B6:BD:06:4F:4F
            X509v3 Authority Key Identifier:
                keyid:C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a6:69:c3:9e:6c:7e:57:47:2c:5b:15:5a:2a:3d:b4:44:a4:70:
         50:cf:c6:c7:97:da:60:2c:a1:35:26:41:81:78:0c:9e:ff:f7:
         a5:c9:92:59:aa:95:f5:5c:60:e1:ef:5f:1d:27:d1:a8:97:e6:
         80:bb:df:66:0e:49:f4:07:e3:ad:e5:4a:09:33:c9:d9:61:54:
         76:eb:4a:4e:50:18:6d:91:58:50:a3:75:8d:ca:ac:64:14:23:
         2b:81:ee:cf:2d:ff:8d:a8:1c:81:1b:76:71:e1:2b:0b:35:f7:
         3c:6c:c5:c4:fd:6f:8d:e4:48:71:98:9b:24:20:10:95:c9:a7:
         dc:6a:71:f9:b0:4a:77:6f:03:6e:bb:cf:6e:28:cb:2b:df:85:
         bf:c0:70:d1:a3:63:45:a9:92:bc:36:22:e3:fc:64:0f:a1:d4:
         ee:ce:ac:e4:a3:d6:3a:f1:ba:42:3a:7a:0c:65:63:c5:f3:aa:
         c8:eb:93:ba:11:b1:a5:f0:d4:79:7b:70:40:a7:71:36:9f:bc:
         92:a6:08:7b:e8:b4:96:e1:a0:0b:80:98:e8:9b:6d:58:ec:e7:
         c7:f7:d5:76:96:66:57:14:2c:36:56:cf:ba:90:13:64:3d:b0:
         13:cb:53:20:83:c8:c4:5a:f4:14:a5:33:6b:16:2a:48:59:cc:
         24:4f:92:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org