Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a393030303a3a2f34302d3430203d3e20323633313434.roa
File:                     323830343a313736383a393030303a3a2f34302d3430203d3e20323633313434.roa (raw, json)
Hash identifier:          nQ63sVE/s7jeZhV67X8e5XdAVpG/j64w2kQvIKr8dPs=
Subject key identifier:   47:E0:97:7B:72:87:9D:73:96:D1:19:29:7C:67:E9:BD:04:21:AD:5C
Certificate issuer:       /CN=6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E
Certificate serial:       4F22800826036D7E7DDDCBB527866A59634A7ACD
Authority key identifier: 6A:DE:CC:DC:E1:47:1A:CF:CD:4F:48:E0:D8:9E:5C:D3:FA:79:8D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a393030303a3a2f34302d3430203d3e20323633313434.roa
Signing time:             Sat 22 Jan 2022 23:31:38 +0000
ROA not before:           Sat 22 Jan 2022 23:26:38 +0000
ROA not after:            Sat 21 Jan 2023 23:31:38 +0000
asID:                     263144
IP address blocks:        2804:1768:9000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:22:80:08:26:03:6d:7e:7d:dd:cb:b5:27:86:6a:59:63:4a:7a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E
        Validity
            Not Before: Jan 22 23:26:38 2022 GMT
            Not After : Jan 21 23:31:38 2023 GMT
        Subject: CN=47E0977B72879D7396D119297C67E9BD0421AD5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:99:4e:f0:73:e9:8e:6b:e1:c2:5d:de:0d:
                    15:1d:f8:c5:3a:33:0a:5c:ac:b2:de:24:a0:f9:72:
                    5b:85:ea:a7:c9:59:84:ae:42:8d:d3:12:75:7b:fb:
                    81:13:7f:c1:34:66:40:aa:57:23:ac:a0:72:3a:95:
                    9f:52:9d:d4:c0:42:28:24:fe:09:5f:42:9b:2b:f2:
                    0b:34:b2:49:82:f6:31:1a:4b:82:ee:ff:e3:f8:da:
                    15:00:eb:30:da:2a:12:2f:c5:88:de:3b:2e:c1:b1:
                    53:4e:af:5e:d5:f3:91:76:a4:4c:56:cc:b1:4e:8a:
                    be:9f:8d:6d:66:02:1b:88:fc:0e:94:32:35:ac:29:
                    49:ae:be:b4:e7:36:2e:14:1f:ed:63:7c:75:d6:2c:
                    58:2c:40:a6:e4:d3:e0:f2:0b:15:e2:90:58:4d:fb:
                    59:24:77:d2:9d:d0:ed:af:d1:df:a8:17:63:36:89:
                    de:3e:60:27:3c:14:19:c9:e1:81:93:1b:90:9e:88:
                    5c:c9:73:ed:36:f0:06:5f:55:f7:c2:5a:1e:97:41:
                    db:95:de:43:27:74:b8:49:f1:94:85:8e:ce:89:b1:
                    90:ae:cc:07:37:a4:73:39:23:28:c1:69:7f:38:be:
                    95:7e:6e:82:60:0d:38:dc:c3:ba:45:f1:71:6a:a1:
                    21:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E0:97:7B:72:87:9D:73:96:D1:19:29:7C:67:E9:BD:04:21:AD:5C
            X509v3 Authority Key Identifier:
                keyid:6A:DE:CC:DC:E1:47:1A:CF:CD:4F:48:E0:D8:9E:5C:D3:FA:79:8D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a393030303a3a2f34302d3430203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:29:10:38:48:62:2c:89:cc:22:79:fd:50:8e:6f:92:5b:28:
         26:43:5d:6f:cd:48:6f:5a:c5:b9:d3:7f:a0:2a:6c:50:35:b4:
         d7:3b:90:71:45:1d:47:6e:33:d2:f6:43:51:91:bd:fc:70:8d:
         58:b2:e4:37:32:b0:81:db:91:27:6e:0c:0e:70:f4:5b:f6:e8:
         18:26:cc:22:fe:90:50:6a:12:de:8d:f8:b5:5d:67:1a:a1:d2:
         20:d7:ef:ee:9f:47:37:34:06:20:9f:7b:fc:b9:da:55:a7:b4:
         d6:a0:3a:9e:43:37:53:aa:1b:bb:6e:20:ad:04:78:71:1e:90:
         90:72:55:93:ca:b5:8f:6e:8d:8d:30:3c:b1:ac:5a:ff:eb:df:
         29:f5:52:44:72:9c:39:cf:db:73:53:91:14:60:08:95:47:02:
         6f:f4:39:c5:57:43:93:4c:fb:42:93:16:7c:eb:45:f8:d4:d8:
         80:4b:af:c4:50:d9:f2:96:0e:1a:33:71:c9:4c:7d:5d:c3:6e:
         24:b1:0e:b6:1d:aa:93:f6:f0:f8:63:2e:da:93:77:33:a6:70:
         1d:ba:58:ae:59:f8:48:b4:7f:2f:da:e6:cc:0a:c6:ff:87:61:
         dc:e2:83:b1:55:a2:4b:44:96:20:f5:6b:cd:c6:47:d7:4a:c0:
         53:8c:6d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org