Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a3a2f33322d313238203d3e20323638363539.roa
File:                     323830343a353439343a3a2f33322d313238203d3e20323638363539.roa (raw, json)
Hash identifier:          ktuL9yjM/unjldX+XNM5NfQHySOLzhRqa/GRuIv2lfM=
Subject key identifier:   64:C9:9A:E0:61:54:D2:24:21:A1:6B:30:59:DA:88:5C:EF:AE:37:63
Certificate issuer:       /CN=1A632196A1D98B659C297C371E332C45C1B12A21
Certificate serial:       7AAA7AED628D25A0094F190B18AE814BF6FBA4FC
Authority key identifier: 1A:63:21:96:A1:D9:8B:65:9C:29:7C:37:1E:33:2C:45:C1:B1:2A:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A632196A1D98B659C297C371E332C45C1B12A21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a3a2f33322d313238203d3e20323638363539.roa
Signing time:             Thu 23 Nov 2023 08:35:31 +0000
ROA not before:           Thu 23 Nov 2023 08:30:31 +0000
ROA not after:            Thu 21 Nov 2024 08:35:31 +0000
asID:                     268659
IP address blocks:        2804:5494::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:aa:7a:ed:62:8d:25:a0:09:4f:19:0b:18:ae:81:4b:f6:fb:a4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A632196A1D98B659C297C371E332C45C1B12A21
        Validity
            Not Before: Nov 23 08:30:31 2023 GMT
            Not After : Nov 21 08:35:31 2024 GMT
        Subject: CN=64C99AE06154D22421A16B3059DA885CEFAE3763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:9f:b7:19:56:36:57:50:85:09:e1:6b:3b:
                    df:a3:bb:89:24:c7:4c:d3:8b:8d:fc:95:5c:0f:4d:
                    0a:2d:ad:80:4d:1d:8f:79:18:6b:70:d8:f9:f3:cd:
                    dd:c1:bb:ed:53:11:49:24:bd:86:2b:ae:ca:80:49:
                    d2:ab:ab:19:54:90:ec:8f:d8:ed:23:27:88:80:d0:
                    5e:f5:23:79:d2:e5:49:7f:57:ba:9f:3b:1a:66:ef:
                    da:73:24:ef:34:a4:d2:f5:a5:a2:20:ca:63:bf:c9:
                    a9:23:3f:cf:a0:6f:66:54:c0:b7:2f:f1:3c:b1:b4:
                    51:bb:90:b1:9b:e3:1c:06:fb:34:f2:66:93:4d:df:
                    cc:c9:53:2d:eb:2e:07:b6:c2:75:38:38:68:63:f4:
                    d6:bd:80:06:a4:cf:47:d1:d3:a6:a2:b8:06:a6:73:
                    cb:12:1c:48:5e:9b:a8:06:8e:42:9f:2e:87:e9:e6:
                    2f:60:04:2a:aa:d1:7c:df:3a:fa:1f:3b:ff:05:2c:
                    2b:fc:46:06:46:06:3a:30:a0:e3:23:99:5e:90:b5:
                    ff:08:b5:87:c8:d1:9e:8a:a9:9a:1c:b9:c0:10:95:
                    d6:3f:4a:a0:97:03:c4:10:1c:9d:9b:62:3b:a9:56:
                    86:05:ac:ca:d1:11:f3:bf:92:ca:9a:4f:44:2f:f2:
                    6e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C9:9A:E0:61:54:D2:24:21:A1:6B:30:59:DA:88:5C:EF:AE:37:63
            X509v3 Authority Key Identifier:
                keyid:1A:63:21:96:A1:D9:8B:65:9C:29:7C:37:1E:33:2C:45:C1:B1:2A:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/1A632196A1D98B659C297C371E332C45C1B12A21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A632196A1D98B659C297C371E332C45C1B12A21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a3a2f33322d313238203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5494::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:45:36:67:c1:e2:bb:ec:4d:e0:61:a5:96:da:a8:9e:44:36:
         28:af:46:44:b8:53:61:ce:63:50:c9:4f:55:88:8a:89:e3:43:
         44:bd:2d:f2:28:57:39:f0:7a:ca:0d:e4:b0:d4:96:7d:4e:88:
         27:37:aa:51:33:11:68:e5:aa:9a:8f:9a:c5:ba:6e:24:01:6a:
         14:cb:0f:87:57:7d:a9:cd:8a:8a:84:97:48:cf:43:c8:2c:00:
         d6:52:c5:fe:c9:1f:2e:b7:4d:64:e7:89:f9:45:89:4f:e6:54:
         22:95:d2:7e:31:0b:ac:65:61:d6:06:82:1d:e6:6b:35:f8:62:
         91:f5:f1:95:f3:a1:01:3c:a6:d6:89:e1:86:f4:1e:56:e6:31:
         02:a3:c6:3f:33:eb:7f:6e:d3:fc:3f:c9:72:ae:2c:19:ef:ad:
         e9:37:07:f8:7e:e6:d8:f2:10:36:13:3b:ad:ee:20:a1:b0:a0:
         b6:03:a7:bc:2c:6f:e2:30:92:53:d6:20:fa:25:86:58:f8:eb:
         97:5d:c3:9a:9c:21:c1:09:2e:ef:76:23:67:a6:70:8a:ff:d6:
         cc:f5:96:f5:fd:a3:50:64:1c:6d:ec:e0:ac:8c:a2:ff:45:b5:
         04:0d:d5:90:a7:4f:4a:18:14:16:2a:76:11:31:88:87:11:95:
         f4:1e:af:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org