Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa
File:                     323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa (raw, json)
Hash identifier:          QQ6cWG1OxvD3rmm3cm+hSC6igQS3LeKXnjs/zCc9gbw=
Subject key identifier:   7C:49:4D:84:B1:9B:B0:2D:81:1E:8A:0F:E7:A5:4F:2C:F0:FA:9F:D6
Certificate issuer:       /CN=5A96080087CD6DEA60732C4BB764DEF86100C18B
Certificate serial:       68301606079442F6D7617DF20FD2FBCE0D663B1E
Authority key identifier: 5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa
Signing time:             Thu 04 Apr 2024 09:25:24 +0000
ROA not before:           Thu 04 Apr 2024 09:20:24 +0000
ROA not after:            Thu 03 Apr 2025 09:25:24 +0000
asID:                     270544
IP address blocks:        2804:6d9c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:30:16:06:07:94:42:f6:d7:61:7d:f2:0f:d2:fb:ce:0d:66:3b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A96080087CD6DEA60732C4BB764DEF86100C18B
        Validity
            Not Before: Apr  4 09:20:24 2024 GMT
            Not After : Apr  3 09:25:24 2025 GMT
        Subject: CN=7C494D84B19BB02D811E8A0FE7A54F2CF0FA9FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1a:35:57:4b:cb:93:78:94:ad:fa:5a:68:2e:
                    f7:af:72:f2:8f:66:70:29:7c:5d:c7:aa:46:d8:ba:
                    10:9e:28:5c:74:49:22:ff:67:6f:46:f8:4e:2b:d5:
                    26:10:39:6a:8e:89:f2:53:34:58:7e:ba:7d:4f:e3:
                    3c:3d:29:71:f5:c6:b9:b1:02:e2:03:95:af:d9:42:
                    41:a7:b5:18:8a:e0:35:8a:33:3a:67:70:0a:72:5d:
                    72:87:57:3d:95:fd:ce:4d:19:dc:7b:59:29:a5:fd:
                    4f:de:b2:82:5c:fc:3b:f6:8a:f2:7a:d2:d9:20:ae:
                    37:ef:65:3e:1f:67:f5:e6:e7:cb:47:d2:62:fb:38:
                    22:ed:ba:a8:03:7e:8b:9f:8a:b8:73:f2:53:0c:eb:
                    dd:fa:d9:77:50:e1:2e:1b:bc:24:38:a2:87:3a:2c:
                    c5:94:d7:8d:f1:15:b7:a3:cc:5d:29:7b:a7:0f:a1:
                    cf:81:02:46:07:44:eb:0e:85:2a:6e:bc:fe:96:86:
                    88:32:8f:69:77:92:fe:d3:1d:92:70:37:a6:b5:a2:
                    8e:11:63:89:df:3b:d0:a9:26:97:61:42:8b:af:52:
                    46:d3:c3:3e:e6:57:24:6b:28:81:c7:8e:cd:9b:62:
                    1d:6e:45:a6:4a:22:f0:16:92:71:32:8d:f6:c6:84:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:49:4D:84:B1:9B:B0:2D:81:1E:8A:0F:E7:A5:4F:2C:F0:FA:9F:D6
            X509v3 Authority Key Identifier:
                keyid:5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6f:ce:57:ed:b1:0b:8b:39:b3:9d:56:8e:9c:5c:f8:ce:39:fc:
         ec:4d:dd:11:44:78:18:5f:f2:85:03:d4:c7:91:ed:94:7c:52:
         a1:cf:ab:a6:a8:44:a0:84:2d:e1:52:f1:0f:81:e7:d8:c9:92:
         e3:4b:14:2d:18:c5:4c:7a:a6:6a:d3:55:8d:af:96:53:8d:51:
         5d:9d:c8:c4:bd:ab:dc:f6:6c:6e:f6:55:69:a7:36:f4:b3:79:
         3c:13:d5:1b:21:67:cc:a8:24:50:97:0d:e3:82:db:8e:7e:9b:
         79:26:79:e8:84:4d:82:ad:1e:26:2b:70:38:45:20:a4:ce:87:
         ea:53:48:e9:8a:c2:25:bd:f6:1a:c0:2b:81:3a:78:4b:bd:16:
         91:0f:c2:37:30:5c:c6:38:cd:f7:5c:96:3d:92:9c:16:3d:38:
         e9:36:34:fe:66:d3:3e:c5:b1:11:90:52:d5:e3:81:6f:1d:fc:
         f8:0b:7c:46:7c:9d:51:1c:40:e2:86:46:6e:df:b9:a4:05:b1:
         80:ba:f1:fa:53:c7:2b:a0:c4:1f:0b:9c:3a:3a:a2:bb:36:3b:
         e8:20:95:27:46:09:49:5c:3f:8c:49:4f:2c:cf:b1:7f:45:19:
         06:c1:37:f4:d6:28:d0:ca:f3:fe:50:8e:6e:ed:51:85:96:46:
         66:e2:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org