Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/323830343a316432303a323530303a3a2f34302d3430203d3e20323634333439.roa
File:                     323830343a316432303a323530303a3a2f34302d3430203d3e20323634333439.roa (raw, json)
Hash identifier:          3qCCg9lkvCFYt4wfyrpPSkpebAPUi0dwPstJLzFEQJo=
Subject key identifier:   D7:82:70:1E:16:31:66:1B:07:9C:E6:64:69:5A:32:4D:18:9D:6F:A0
Certificate issuer:       /CN=6D4B6DB3E809FEF682676786BBDD422E949AA068
Certificate serial:       2885AF282AEE6989EF9816A2E7207C1825054D67
Authority key identifier: 6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/323830343a316432303a323530303a3a2f34302d3430203d3e20323634333439.roa
Signing time:             Tue 07 Nov 2023 15:19:10 +0000
ROA not before:           Tue 07 Nov 2023 15:14:10 +0000
ROA not after:            Tue 05 Nov 2024 15:19:10 +0000
asID:                     264349
IP address blocks:        2804:1d20:2500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:85:af:28:2a:ee:69:89:ef:98:16:a2:e7:20:7c:18:25:05:4d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4B6DB3E809FEF682676786BBDD422E949AA068
        Validity
            Not Before: Nov  7 15:14:10 2023 GMT
            Not After : Nov  5 15:19:10 2024 GMT
        Subject: CN=D782701E1631661B079CE664695A324D189D6FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:6c:e2:9b:2a:9d:5b:55:1d:9d:6d:ee:3e:
                    83:0f:3a:72:30:be:52:bf:59:dd:48:02:69:04:85:
                    bd:8c:31:ed:56:3c:db:92:04:b6:28:03:9a:c4:9e:
                    e0:ea:a5:ee:05:96:8b:54:11:03:96:1f:2b:18:f3:
                    e9:f9:db:db:f8:79:e4:9e:25:af:94:3d:86:99:3b:
                    c7:58:58:ab:eb:0b:83:ed:a9:de:9e:aa:ef:19:c5:
                    2e:16:fd:aa:82:09:57:6b:b0:f9:46:96:fc:2b:74:
                    4f:1b:72:c3:c1:e6:6e:9f:0d:40:dd:aa:95:57:a3:
                    62:97:d5:ce:bb:db:32:ee:c5:1f:5c:80:7b:52:80:
                    aa:e6:23:e9:d9:d4:a1:dc:60:1b:8a:c4:8b:02:4d:
                    a8:9e:58:ac:7d:24:9d:64:e9:07:7e:c2:ca:9f:0f:
                    5c:ca:4e:40:5a:7b:74:83:4f:73:f9:18:86:9c:7d:
                    b2:c3:9e:33:61:3b:98:19:d8:af:48:dd:7e:a4:f6:
                    72:5b:d8:5b:69:72:c5:d3:f2:7f:42:42:80:27:4e:
                    78:12:f6:20:29:73:9a:63:a1:65:69:22:75:32:c2:
                    42:53:70:b4:f9:7b:85:8b:30:d0:f1:36:7d:de:31:
                    cd:36:11:b5:77:31:77:df:4e:7e:b9:97:4d:ee:8f:
                    5f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:82:70:1E:16:31:66:1B:07:9C:E6:64:69:5A:32:4D:18:9D:6F:A0
            X509v3 Authority Key Identifier:
                keyid:6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/323830343a316432303a323530303a3a2f34302d3430203d3e20323634333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d20:2500::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:73:1a:88:8c:2e:19:86:92:42:c9:5a:ca:63:c5:2b:2c:4f:
         5d:86:c5:82:8e:60:3c:d5:8e:fa:3e:9f:f6:1b:72:4c:c2:12:
         99:77:7d:f9:69:aa:5c:4d:19:9c:9f:a7:f6:b6:aa:20:c8:08:
         ec:81:cb:12:df:47:3a:be:51:7e:63:d3:79:b3:9f:33:29:97:
         e8:3f:e1:49:25:39:aa:66:2c:94:c9:5d:50:bd:58:e5:f0:0a:
         24:0b:61:32:2d:dd:dd:8b:21:d5:61:8b:f0:4c:9e:7a:40:fc:
         8f:68:f2:aa:0d:b9:fa:13:11:da:24:8b:6c:69:6f:46:6e:8e:
         7b:12:70:47:71:7d:4b:34:79:0f:a1:0e:0d:67:be:24:09:2d:
         2c:83:67:e2:05:b0:78:bf:a2:be:b9:dd:2e:1b:29:6f:49:90:
         ef:2c:05:51:f3:33:93:5a:53:7a:78:19:54:3a:96:89:62:52:
         61:7d:71:82:41:eb:2e:a3:8e:4a:36:eb:69:96:05:3f:23:e3:
         72:d7:92:9f:7f:4b:a6:0a:df:75:ce:f0:2a:30:af:80:6e:46:
         18:1d:e0:d7:46:42:33:1f:b3:c1:d1:e2:ca:6b:af:aa:70:c2:
         f9:bb:4d:f2:45:e6:87:ee:8e:82:32:f6:ff:79:48:8e:b2:7e:
         a0:db:72:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org