Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33322d3334203d3e20323638373236.roa
File:                     323830343a353963633a3a2f33322d3334203d3e20323638373236.roa (raw, json)
Hash identifier:          BzUfLRI/UejKOcBOY2TrIWv9+OnE2mENIr5IY4HZZe0=
Subject key identifier:   0C:C2:C9:87:7E:E8:E7:77:1A:08:B7:04:1B:C2:37:A6:7B:A9:15:67
Certificate issuer:       /CN=F12330437029319CF92F0C3BFC9280B143870D6D
Certificate serial:       3AB551669C21588C30DFC10A5A414712E6B24F2D
Authority key identifier: F1:23:30:43:70:29:31:9C:F9:2F:0C:3B:FC:92:80:B1:43:87:0D:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F12330437029319CF92F0C3BFC9280B143870D6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33322d3334203d3e20323638373236.roa
Signing time:             Tue 23 Jan 2024 15:00:00 +0000
ROA not before:           Tue 23 Jan 2024 14:55:00 +0000
ROA not after:            Tue 21 Jan 2025 15:00:00 +0000
asID:                     268726
IP address blocks:        2804:59cc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b5:51:66:9c:21:58:8c:30:df:c1:0a:5a:41:47:12:e6:b2:4f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12330437029319CF92F0C3BFC9280B143870D6D
        Validity
            Not Before: Jan 23 14:55:00 2024 GMT
            Not After : Jan 21 15:00:00 2025 GMT
        Subject: CN=0CC2C9877EE8E7771A08B7041BC237A67BA91567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:cb:af:9d:23:c1:ca:28:59:12:18:e6:2d:
                    96:f0:7e:e6:75:b8:b6:ee:e9:37:db:e6:f3:68:bf:
                    b3:f8:2e:16:5e:4b:5b:ca:17:67:68:38:7f:2e:c0:
                    47:33:56:3f:28:25:aa:04:af:d6:b6:d7:81:56:50:
                    51:dd:80:c7:c3:b2:42:94:92:38:9a:52:a7:4f:79:
                    d4:5a:8d:84:ab:db:20:c8:cc:e2:41:d2:f9:fd:3f:
                    47:84:be:51:72:d4:0f:62:c9:fa:35:bc:3a:75:68:
                    30:4c:15:13:b0:3e:80:37:18:d1:75:35:7f:1c:94:
                    96:10:64:1b:75:77:aa:57:50:74:20:86:c9:92:47:
                    4a:17:28:f0:c3:ae:50:a8:1f:7c:e4:9b:a2:97:55:
                    e5:1d:89:58:33:8a:88:1d:2a:bd:a1:52:c5:eb:c6:
                    3d:5c:5a:29:5b:fe:b7:9d:ab:27:a9:3a:de:80:6c:
                    77:b3:8c:66:c8:1a:22:9d:16:b3:c9:62:44:a3:ed:
                    e9:fd:eb:2b:76:76:02:82:53:04:cc:79:1b:ed:8f:
                    9b:02:6f:52:8a:97:ca:78:3e:d6:9e:41:ca:a6:37:
                    d0:0f:50:95:15:ca:90:dc:ae:8e:24:7b:e4:57:b8:
                    1c:59:0c:4f:29:25:0d:e0:cc:28:de:a9:98:25:05:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C2:C9:87:7E:E8:E7:77:1A:08:B7:04:1B:C2:37:A6:7B:A9:15:67
            X509v3 Authority Key Identifier:
                keyid:F1:23:30:43:70:29:31:9C:F9:2F:0C:3B:FC:92:80:B1:43:87:0D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/F12330437029319CF92F0C3BFC9280B143870D6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F12330437029319CF92F0C3BFC9280B143870D6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33322d3334203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:af:cd:c9:c9:f4:f6:3f:ab:3d:26:c1:5c:34:c0:b4:aa:26:
         1e:ee:a9:60:09:65:13:21:a2:a5:9e:8e:fe:88:fb:32:41:aa:
         0e:ee:53:a7:87:50:5a:c4:93:70:33:7b:ef:61:34:b7:f8:fe:
         c9:e2:50:2d:2c:02:a1:2c:b2:84:d5:e1:ae:b3:16:8e:60:bc:
         e2:55:63:0c:72:03:e3:3c:19:eb:85:51:79:5c:6a:fb:ac:08:
         12:12:46:bd:f5:f7:44:cd:1d:d5:81:d1:ec:26:3d:75:95:be:
         46:78:44:bf:b7:38:7d:08:28:7f:76:12:9a:bb:87:35:58:f8:
         7f:05:30:7c:07:a9:b1:0f:95:48:76:45:f6:07:5d:2f:f8:d1:
         52:69:19:36:91:e8:0e:fe:52:2f:7d:84:5c:52:88:df:f4:b3:
         50:e9:7e:a1:a3:99:9c:01:6b:0d:d3:2a:a0:81:33:78:a8:70:
         5a:46:42:b2:0f:17:25:f2:86:bb:92:5b:20:ab:36:7c:c4:29:
         fc:b1:f2:30:3e:46:da:59:e0:30:5a:fc:01:da:d1:94:56:ea:
         48:c6:23:fd:8e:c2:f0:83:2d:cf:4c:81:bd:7b:a1:05:59:82:
         b9:d4:a4:24:32:a8:dd:ef:cd:ad:34:80:79:27:dc:ec:9f:74:
         d7:78:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org