Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/323830343a376561383a633030303a3a2f33342d3334203d3e20323731363338.roa
File:                     323830343a376561383a633030303a3a2f33342d3334203d3e20323731363338.roa (raw, json)
Hash identifier:          27bhfYAiCXqs1/Y6q2b6UTdydC+L53zsI1oxK//X7vY=
Subject key identifier:   5F:43:70:93:8B:40:DD:23:76:EF:95:C0:91:83:36:3A:0D:CF:92:A5
Certificate issuer:       /CN=0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62
Certificate serial:       39983661C8E25F74CB191611D5C9801902AD393E
Authority key identifier: 0F:63:54:D9:DD:1A:15:AF:5B:0D:DC:AF:83:FC:E9:B6:5D:1B:DC:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/323830343a376561383a633030303a3a2f33342d3334203d3e20323731363338.roa
Signing time:             Thu 08 Feb 2024 13:11:26 +0000
ROA not before:           Thu 08 Feb 2024 13:06:26 +0000
ROA not after:            Thu 06 Feb 2025 13:11:26 +0000
asID:                     271638
IP address blocks:        2804:7ea8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:98:36:61:c8:e2:5f:74:cb:19:16:11:d5:c9:80:19:02:ad:39:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62
        Validity
            Not Before: Feb  8 13:06:26 2024 GMT
            Not After : Feb  6 13:11:26 2025 GMT
        Subject: CN=5F4370938B40DD2376EF95C09183363A0DCF92A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:f6:a2:1c:d5:62:07:2f:c2:fb:14:ea:52:
                    8a:30:7f:e2:a8:e2:7b:70:33:28:71:cf:97:39:94:
                    86:07:ae:72:34:cf:d1:b1:f3:0f:17:f5:c6:ec:d6:
                    7a:3c:a0:b7:40:a7:fc:4e:97:99:00:e7:77:2a:41:
                    08:ac:ce:2e:61:2c:a1:63:95:c3:14:84:29:bc:e2:
                    8b:b5:7c:3b:64:44:cc:8c:56:2f:f5:38:1f:35:41:
                    9b:9f:ce:3a:cf:e8:cf:d3:8b:2f:17:33:ba:b0:94:
                    47:22:cc:99:a0:ff:03:35:f8:b4:fd:f2:cd:15:aa:
                    f0:b6:8c:44:3f:ca:02:ab:8b:ce:9a:d5:26:1f:12:
                    70:52:59:6c:29:0d:b8:fb:19:49:b3:51:d4:a9:a8:
                    22:77:9b:6e:4e:c5:a1:b6:89:25:65:09:81:d4:6d:
                    e1:95:f1:df:cf:74:97:08:6e:33:5e:11:f6:20:aa:
                    24:ac:7e:8b:39:57:7d:c6:bf:5e:d0:80:7c:77:26:
                    ae:3c:7a:57:6e:01:3a:99:64:a0:f3:d9:13:f8:af:
                    37:bb:d6:ad:47:22:c9:32:44:56:3a:ba:4b:64:b9:
                    15:ca:4d:b2:40:87:df:04:07:4d:af:28:d6:4a:7b:
                    63:76:9d:b5:d6:70:83:4c:4c:07:e5:52:37:f0:cb:
                    25:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:43:70:93:8B:40:DD:23:76:EF:95:C0:91:83:36:3A:0D:CF:92:A5
            X509v3 Authority Key Identifier:
                keyid:0F:63:54:D9:DD:1A:15:AF:5B:0D:DC:AF:83:FC:E9:B6:5D:1B:DC:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/323830343a376561383a633030303a3a2f33342d3334203d3e20323731363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ea8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:5a:35:da:74:6b:32:47:a7:dc:d1:4f:0d:9f:7b:a5:88:33:
         73:f9:82:75:96:65:1b:25:91:e9:bd:31:e1:27:e7:67:7b:75:
         9d:25:ca:80:e4:88:7c:23:e5:4e:43:19:d9:e8:06:00:e0:8b:
         12:82:23:94:26:8e:79:60:56:25:4f:b5:2d:a7:6b:06:02:84:
         51:f8:c0:9b:77:08:ed:de:11:13:57:f8:2d:c5:45:c9:f7:64:
         bc:ea:2f:29:80:03:5c:1b:9b:f3:d2:3d:45:7e:90:1c:83:3c:
         54:9a:28:a7:3b:c0:96:a5:2a:a4:43:1c:8a:80:10:42:44:1a:
         1b:50:30:0a:73:dc:e6:de:d4:d9:5c:73:1a:c3:e9:0a:ad:5f:
         b2:21:85:03:0a:cd:56:9d:8b:0e:3a:10:22:a5:fa:f4:51:52:
         c8:50:b1:8d:3e:af:8e:db:dd:88:09:07:a0:99:d6:2f:61:e0:
         05:5c:c0:78:23:3a:ff:f5:64:3d:34:c0:6b:b2:1a:cb:d3:80:
         48:40:8f:94:00:af:95:71:f0:6c:b5:28:7c:75:e2:03:6e:b9:
         b2:be:fe:29:50:30:a3:a4:25:d9:6a:1a:8f:79:0e:07:30:4c:
         45:1f:db:af:ec:b1:bd:1b:df:09:56:80:19:ae:da:eb:8d:1d:
         b8:d2:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org