Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/323830343a376561383a343030303a3a2f33342d3334203d3e20323731363338.roa
File:                     323830343a376561383a343030303a3a2f33342d3334203d3e20323731363338.roa (raw, json)
Hash identifier:          FIulp0mlfOT+2rokk4qVR13og0PDVo2xF8j111jNXSo=
Subject key identifier:   6B:90:8F:EA:35:95:FD:F1:46:D7:EF:E2:88:6F:B1:40:FD:84:12:3C
Certificate issuer:       /CN=0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62
Certificate serial:       6DC825399702E6F72637505B2D6A60CE8ABEBD0A
Authority key identifier: 0F:63:54:D9:DD:1A:15:AF:5B:0D:DC:AF:83:FC:E9:B6:5D:1B:DC:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/323830343a376561383a343030303a3a2f33342d3334203d3e20323731363338.roa
Signing time:             Thu 08 Feb 2024 13:11:27 +0000
ROA not before:           Thu 08 Feb 2024 13:06:27 +0000
ROA not after:            Thu 06 Feb 2025 13:11:27 +0000
asID:                     271638
IP address blocks:        2804:7ea8:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c8:25:39:97:02:e6:f7:26:37:50:5b:2d:6a:60:ce:8a:be:bd:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62
        Validity
            Not Before: Feb  8 13:06:27 2024 GMT
            Not After : Feb  6 13:11:27 2025 GMT
        Subject: CN=6B908FEA3595FDF146D7EFE2886FB140FD84123C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:37:11:91:a1:00:6a:08:ad:20:87:43:65:
                    21:17:b8:97:35:12:f9:35:e9:a8:13:59:3a:9d:dd:
                    63:23:a4:8e:ba:17:71:78:78:07:46:b9:20:12:76:
                    a6:10:86:53:de:3d:db:16:25:3d:a4:32:36:f4:09:
                    b3:0d:dd:18:1e:08:1e:01:8c:d8:12:3f:e6:ca:73:
                    4a:fd:0b:e2:96:25:82:6e:60:0f:c9:ac:5e:c4:1b:
                    c9:fe:a8:77:f2:8c:18:59:42:65:a3:fe:2a:ad:40:
                    03:2d:3c:5d:51:1c:7a:54:10:4c:22:d0:88:8f:be:
                    60:a1:bc:e1:dc:39:49:43:07:c0:97:24:98:44:2c:
                    0e:84:b2:1a:9e:7f:12:eb:00:aa:04:bf:b0:2f:68:
                    fe:ee:e0:85:23:ee:ac:47:27:12:4a:1a:56:9a:f8:
                    37:61:86:40:12:6d:34:c4:77:fd:43:14:aa:55:e6:
                    6a:84:b2:16:09:54:2a:f3:71:80:39:1b:60:71:35:
                    b8:f2:73:81:c6:5c:d2:29:3b:46:86:0b:f5:af:cd:
                    fb:e0:aa:e8:0d:25:80:2a:da:5c:b5:d1:f8:12:25:
                    e7:81:1a:d5:e3:c2:3b:35:78:4c:ae:9d:08:cb:b7:
                    43:1c:89:d6:c8:6a:f8:e7:03:8f:ea:7e:7b:f0:13:
                    53:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:90:8F:EA:35:95:FD:F1:46:D7:EF:E2:88:6F:B1:40:FD:84:12:3C
            X509v3 Authority Key Identifier:
                keyid:0F:63:54:D9:DD:1A:15:AF:5B:0D:DC:AF:83:FC:E9:B6:5D:1B:DC:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/323830343a376561383a343030303a3a2f33342d3334203d3e20323731363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ea8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         52:6b:12:ae:6e:67:6f:16:d9:9c:c7:69:f6:88:81:aa:a4:56:
         b2:1a:2c:72:08:df:86:cb:b3:08:65:dd:44:f5:46:29:e5:69:
         88:24:e2:c4:1b:f4:fe:c0:7e:65:e9:d5:fe:33:31:85:f6:02:
         b6:56:62:25:c0:5b:8f:b6:8d:6c:1d:d3:01:ca:ea:f6:05:bc:
         8c:85:81:8f:93:e0:9c:4c:3f:3a:92:c2:99:69:ef:60:65:55:
         e1:fb:d9:58:0d:85:b8:6a:3d:b5:a6:28:4a:ad:cc:59:84:13:
         04:91:ad:9e:91:e0:f6:27:07:a3:7f:d1:94:ab:4b:28:6d:a8:
         31:43:08:15:81:8a:27:1f:39:b2:1d:76:b7:e0:8b:34:c1:63:
         99:6d:46:86:05:e9:f5:8b:e0:00:30:2b:8f:86:28:e7:13:4a:
         89:29:b5:88:db:2c:26:7a:1f:30:ff:82:ae:73:10:63:3c:7f:
         df:4d:0f:00:3d:ca:fb:4f:34:cf:94:7c:ba:28:9a:52:a9:26:
         01:01:5e:a4:a1:6d:36:c5:d7:5f:0d:75:87:16:54:12:23:1b:
         6b:46:cc:31:44:92:15:0d:72:92:f0:4f:e7:90:35:65:81:70:
         f7:66:cf:d7:0a:98:9d:a2:b8:c6:f8:28:3d:0f:8c:f4:b1:1a:
         47:64:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org