Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a393032303a3a2f34342d3434203d3e20323633313434.roa
File:                     323830343a313736383a393032303a3a2f34342d3434203d3e20323633313434.roa (raw, json)
Hash identifier:          nT5w2WZJEx+aSmhXp17CGsS2FGo8zmKwHnzfjNQltR8=
Subject key identifier:   E1:7A:AE:D7:7B:3A:B0:AC:C9:5E:37:41:2A:CD:81:9C:D7:61:35:A7
Certificate issuer:       /CN=6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E
Certificate serial:       7AF92933AA1072C6659040BF959C9CD7353E9B72
Authority key identifier: 6A:DE:CC:DC:E1:47:1A:CF:CD:4F:48:E0:D8:9E:5C:D3:FA:79:8D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a393032303a3a2f34342d3434203d3e20323633313434.roa
Signing time:             Sat 22 Jan 2022 23:31:37 +0000
ROA not before:           Sat 22 Jan 2022 23:26:37 +0000
ROA not after:            Sat 21 Jan 2023 23:31:37 +0000
asID:                     263144
IP address blocks:        2804:1768:9020::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f9:29:33:aa:10:72:c6:65:90:40:bf:95:9c:9c:d7:35:3e:9b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E
        Validity
            Not Before: Jan 22 23:26:37 2022 GMT
            Not After : Jan 21 23:31:37 2023 GMT
        Subject: CN=E17AAED77B3AB0ACC95E37412ACD819CD76135A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:59:4b:f1:27:ec:a6:1b:00:98:38:8b:dc:06:
                    88:c8:ff:84:1c:96:7b:dd:e9:ed:e6:e4:2e:6b:2a:
                    fc:d7:fc:c4:f3:26:da:84:6c:76:1d:6d:47:84:ec:
                    49:90:08:b8:48:03:0c:01:84:b7:89:e5:e7:9d:63:
                    00:88:13:17:0c:2e:41:4f:61:77:4a:1b:97:2c:8f:
                    48:06:13:df:c9:c7:d0:4d:5e:be:55:0e:ae:ff:67:
                    e7:45:f9:31:d9:fa:ce:19:f8:d7:83:bc:f3:e3:e5:
                    76:0a:67:ee:88:60:8b:bf:30:81:17:89:3e:39:21:
                    c3:e2:e8:a6:f2:cd:6b:59:64:3f:c9:0b:b7:cc:c6:
                    25:e2:14:61:18:da:b1:be:6f:7e:ec:62:02:b9:04:
                    b0:13:6c:14:8c:76:88:0e:24:70:f1:c0:29:6e:64:
                    e0:8a:65:da:a9:9b:64:39:4d:52:11:52:e9:57:7b:
                    61:a5:85:04:f3:8e:fd:03:b5:01:7f:54:9c:2f:de:
                    a1:af:99:52:36:2f:40:e0:dd:e5:2a:43:b8:b0:70:
                    b2:e0:f9:ad:bb:3a:0d:b3:d4:35:0d:6c:22:5d:0a:
                    d2:40:94:03:23:3c:13:71:25:2b:ff:7f:c1:47:cb:
                    c0:b7:d8:a0:87:62:ef:b7:b8:f9:3e:0d:90:69:a1:
                    c9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7A:AE:D7:7B:3A:B0:AC:C9:5E:37:41:2A:CD:81:9C:D7:61:35:A7
            X509v3 Authority Key Identifier:
                keyid:6A:DE:CC:DC:E1:47:1A:CF:CD:4F:48:E0:D8:9E:5C:D3:FA:79:8D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a393032303a3a2f34342d3434203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768:9020::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:b1:7a:d5:fd:cf:53:4c:89:84:fc:a2:e0:8b:77:e3:06:
         dc:4f:61:0c:62:d9:cc:8d:cf:05:64:44:c3:b0:ba:a7:86:2f:
         07:54:df:df:95:3b:e2:65:28:1a:fe:24:39:1d:81:a1:f1:09:
         84:6e:73:c3:76:3e:56:6f:bf:92:d1:64:31:3f:a9:c8:a4:95:
         00:55:9c:13:d0:98:9b:8b:67:51:fc:49:f5:1c:2b:d7:16:b1:
         ca:82:25:d1:4c:cb:64:65:0e:7c:dd:e5:06:68:b9:5c:a2:16:
         65:a7:df:2c:8a:5f:f7:71:09:8a:af:7b:71:c0:e8:d3:cd:9a:
         e8:9a:c6:d0:fc:71:a2:20:91:75:da:31:59:8d:fa:c0:e7:fa:
         73:e4:23:e7:4a:09:37:aa:98:3d:c2:42:c5:4f:8d:ab:c8:e6:
         db:09:c2:ec:af:47:ee:af:95:36:65:a1:5f:cb:0d:ce:be:17:
         e7:08:cf:63:7d:32:3a:f0:aa:67:c9:e1:7d:69:4a:ef:0d:b4:
         0d:07:93:ef:71:46:39:19:75:fc:57:72:34:1e:32:be:b1:4d:
         1c:2d:c1:da:e3:22:db:07:e7:0b:d0:d3:45:b2:b8:a7:9b:b8:
         20:8b:7c:7e:42:fa:d8:4c:63:24:ca:51:2c:0b:47:33:41:1d:
         55:a3:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org