Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a623030303a3a2f34332d3433203d3e20323633313434.roa
File:                     323830343a313736383a623030303a3a2f34332d3433203d3e20323633313434.roa (raw, json)
Hash identifier:          9PHf3t2JKlYuRMQufpICdGbT9bRuNJfVKnnCKVGLQIM=
Subject key identifier:   0A:B2:C0:0C:41:E4:5E:A2:76:C1:D6:F0:E0:70:6E:F7:4F:FB:F3:8D
Certificate issuer:       /CN=6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E
Certificate serial:       14A6C78309757927D4295644E0B12465035D2385
Authority key identifier: 6A:DE:CC:DC:E1:47:1A:CF:CD:4F:48:E0:D8:9E:5C:D3:FA:79:8D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a623030303a3a2f34332d3433203d3e20323633313434.roa
Signing time:             Sat 22 Jan 2022 23:31:37 +0000
ROA not before:           Sat 22 Jan 2022 23:26:37 +0000
ROA not after:            Sat 21 Jan 2023 23:31:37 +0000
asID:                     263144
IP address blocks:        2804:1768:b000::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a6:c7:83:09:75:79:27:d4:29:56:44:e0:b1:24:65:03:5d:23:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E
        Validity
            Not Before: Jan 22 23:26:37 2022 GMT
            Not After : Jan 21 23:31:37 2023 GMT
        Subject: CN=0AB2C00C41E45EA276C1D6F0E0706EF74FFBF38D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:a1:04:31:97:e6:81:96:1a:b9:f0:53:0f:
                    00:56:0c:fd:e7:7f:d0:bf:96:15:11:55:90:e3:5e:
                    eb:63:3c:29:3a:da:8f:dc:2c:4b:c2:fe:d4:80:e8:
                    0f:1e:2e:d9:1d:b6:b5:f0:b4:65:90:5b:f3:e9:e1:
                    b8:da:53:cb:07:fa:d5:d5:93:c7:24:a9:26:91:8e:
                    05:6f:52:04:13:eb:4f:d5:c0:af:7d:ac:66:08:9d:
                    34:cb:32:36:9f:2c:04:ac:ff:ba:48:09:6b:23:4c:
                    0a:e3:1b:2b:a1:29:10:cb:2f:3a:5f:53:e5:84:9d:
                    80:1d:7f:bb:18:82:e6:0f:89:e6:f0:eb:a4:91:a6:
                    a6:2f:6f:04:b2:42:f3:86:fb:7a:1a:36:09:64:4c:
                    38:bd:e2:93:0d:a3:78:b9:cc:f1:54:20:85:55:99:
                    c5:2e:6a:0b:97:a8:77:be:be:f9:df:ad:f6:5f:73:
                    46:98:ac:1a:11:5e:9a:99:c9:04:8c:d9:9b:31:d3:
                    de:67:4e:c8:3f:95:e8:d1:a6:b9:fa:1f:85:af:a7:
                    65:63:cb:d3:e8:71:4e:f3:e1:fc:27:30:25:47:8d:
                    fb:f0:fa:16:50:99:2f:a2:54:95:47:fa:1c:30:ca:
                    3b:f2:5b:f7:1c:f9:1e:38:60:53:2a:b4:c7:1f:be:
                    8e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B2:C0:0C:41:E4:5E:A2:76:C1:D6:F0:E0:70:6E:F7:4F:FB:F3:8D
            X509v3 Authority Key Identifier:
                keyid:6A:DE:CC:DC:E1:47:1A:CF:CD:4F:48:E0:D8:9E:5C:D3:FA:79:8D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a623030303a3a2f34332d3433203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768:b000::/43

    Signature Algorithm: sha256WithRSAEncryption
         39:df:6c:a7:43:81:6f:40:7d:cd:cf:20:27:8a:b2:21:30:fc:
         2d:a6:70:17:2e:35:ba:e2:12:c7:6b:1c:c9:e1:75:7e:10:48:
         14:90:99:9e:23:24:29:0e:d1:4e:f2:53:f3:d5:07:61:6f:36:
         f5:9e:6a:fc:d5:80:b4:eb:b9:35:91:39:de:cb:46:d3:65:dc:
         ef:32:54:17:3f:fc:93:57:6d:b9:0f:46:77:d9:31:3a:a6:7e:
         8c:82:72:84:73:5a:ba:9f:72:2d:68:d1:68:cf:be:60:f9:10:
         cc:ed:71:bd:64:0d:00:1b:d9:89:1e:75:9f:20:f7:10:a5:99:
         00:5b:d0:11:da:1d:8f:b3:4e:7c:5e:98:35:8c:4d:fe:2e:4c:
         f8:ae:f6:e1:af:3b:9a:d9:60:4d:a9:b4:84:e7:ab:be:ae:1f:
         28:cd:6a:ca:05:ad:1f:77:1f:57:75:29:c5:8c:6b:5e:ba:d3:
         7e:70:57:e8:8c:da:58:ec:24:01:c1:c8:bf:ca:fe:96:61:6b:
         b1:6e:3d:14:a2:60:89:48:c1:6a:cb:e0:a4:45:6e:0c:1f:3b:
         c8:30:66:3d:56:d7:f8:d8:32:dd:a5:08:73:63:2f:93:8c:19:
         41:93:06:c0:c2:96:84:b8:2c:60:a2:15:2d:4c:07:0b:d5:46:
         58:1b:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org