Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqEGse2jvjbT5rsMLRXBD32FFAzzby8rrizPpgUBadUD/0/323830343a343961303a3a2f33322d3332203d3e20323632343938.roa
File:                     323830343a343961303a3a2f33322d3332203d3e20323632343938.roa (raw, json)
Hash identifier:          VXGl3AkF6sAaT7VUryARFBleRlEnpmVTO4ClzSpDxeQ=
Subject key identifier:   EC:24:67:71:B6:46:DB:37:1B:6E:0E:25:72:D5:32:9C:1D:DC:E2:D5
Certificate issuer:       /CN=B064906756E5BA94E27845B25754296D66D7BDD7
Certificate serial:       037D85F354A6AFE755D2F3D6250CBC8C173E4D06
Authority key identifier: B0:64:90:67:56:E5:BA:94:E2:78:45:B2:57:54:29:6D:66:D7:BD:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B064906756E5BA94E27845B25754296D66D7BDD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqEGse2jvjbT5rsMLRXBD32FFAzzby8rrizPpgUBadUD/0/323830343a343961303a3a2f33322d3332203d3e20323632343938.roa
Signing time:             Sat 02 Dec 2023 13:32:29 +0000
ROA not before:           Sat 02 Dec 2023 13:27:29 +0000
ROA not after:            Sat 30 Nov 2024 13:32:29 +0000
asID:                     262498
IP address blocks:        2804:49a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7d:85:f3:54:a6:af:e7:55:d2:f3:d6:25:0c:bc:8c:17:3e:4d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B064906756E5BA94E27845B25754296D66D7BDD7
        Validity
            Not Before: Dec  2 13:27:29 2023 GMT
            Not After : Nov 30 13:32:29 2024 GMT
        Subject: CN=EC246771B646DB371B6E0E2572D5329C1DDCE2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:11:32:c7:70:0d:51:ae:1c:7b:be:c0:1f:ac:
                    d2:e9:77:ce:da:59:60:09:6a:60:b5:22:10:03:87:
                    aa:77:9e:6b:f8:83:30:3e:e8:1a:59:d6:85:bd:6d:
                    4f:0e:9c:2b:26:13:4b:c6:be:75:8e:78:30:f9:c2:
                    6d:a0:13:82:5a:fa:e3:d4:0c:9a:5c:a3:a1:8e:28:
                    c5:c3:3d:40:9b:26:c4:2e:07:b9:a0:fd:27:a4:ad:
                    93:b7:12:30:9d:e2:1f:ac:80:1f:15:01:48:23:33:
                    e3:1d:8e:a3:fe:c6:b3:d6:9e:2e:31:86:e7:ed:d4:
                    9c:18:70:c2:43:3c:d1:4e:a1:91:66:8b:18:02:98:
                    bc:75:6e:5a:33:9a:8d:ae:83:bf:4b:dd:2b:0f:bb:
                    92:67:ce:8c:d5:fe:7c:ca:20:1b:51:45:1c:a8:a7:
                    12:12:f9:86:f4:ff:ca:86:74:f4:72:73:1b:ea:cf:
                    a2:7c:1b:fc:da:ac:41:16:31:ae:bc:a1:d7:64:07:
                    13:6c:29:87:5f:73:e9:d2:ca:cf:86:af:60:8e:d2:
                    38:6d:3e:74:b2:41:85:3b:e6:d9:01:43:e6:9e:91:
                    f9:03:36:52:af:bc:88:86:82:1f:1e:b8:da:36:e1:
                    f6:45:74:56:86:60:44:01:44:a4:96:4b:1e:d9:cd:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:24:67:71:B6:46:DB:37:1B:6E:0E:25:72:D5:32:9C:1D:DC:E2:D5
            X509v3 Authority Key Identifier:
                keyid:B0:64:90:67:56:E5:BA:94:E2:78:45:B2:57:54:29:6D:66:D7:BD:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqEGse2jvjbT5rsMLRXBD32FFAzzby8rrizPpgUBadUD/0/B064906756E5BA94E27845B25754296D66D7BDD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B064906756E5BA94E27845B25754296D66D7BDD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqEGse2jvjbT5rsMLRXBD32FFAzzby8rrizPpgUBadUD/0/323830343a343961303a3a2f33322d3332203d3e20323632343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:46:ed:b3:b4:e0:8a:40:3d:a1:52:c6:71:92:f9:5f:03:94:
         5b:ec:ea:e7:76:33:23:2b:12:db:c9:e8:13:10:a8:88:cb:2b:
         a9:d7:77:ae:0a:94:48:59:be:79:95:68:bb:e2:d8:db:d4:ae:
         11:9d:42:3b:2e:2f:de:6e:da:b1:9f:b0:dc:05:64:2a:9a:0c:
         69:43:45:74:3d:cc:b7:ea:97:a7:bf:ac:31:d0:eb:68:9d:2d:
         81:eb:fb:c2:21:ab:5a:5b:fc:78:6b:4b:85:0a:86:cb:f4:98:
         a8:8a:26:d3:ad:00:08:5f:50:f9:15:e2:19:74:ed:0b:d6:c0:
         c0:58:6c:96:02:e7:32:40:af:36:53:60:a8:a7:73:fb:a0:71:
         8e:b5:f9:ed:dc:a5:d2:4d:1d:3a:1b:e8:c7:0a:d7:0b:2d:5e:
         df:e2:25:e0:67:38:39:8a:ba:27:6e:61:8b:b7:15:db:29:0e:
         33:07:7d:12:74:0f:de:c9:02:ee:fc:55:a4:16:f6:54:75:f8:
         8b:65:33:4a:8d:e9:5c:fb:2c:8f:04:cc:56:82:4a:c9:da:0b:
         14:af:13:73:b8:c5:02:13:c8:d0:ff:9b:ad:31:76:79:0e:1a:
         de:58:0a:93:9d:52:22:1a:d7:a5:d4:12:8f:30:db:7b:2a:e8:
         0d:2a:bb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org