Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/323830343a346534633a3a2f33322d3438203d3e20323638323532.roa
File:                     323830343a346534633a3a2f33322d3438203d3e20323638323532.roa (raw, json)
Hash identifier:          eQQJmpLaXl4dc58Id1stQcYbthxD8T3eNGn3yhmkXVw=
Subject key identifier:   0F:02:0E:FA:4D:30:3B:66:ED:D7:C5:55:FA:6E:2F:52:80:34:17:36
Certificate issuer:       /CN=0A65FD0BF5741C9112B59189DDF93358FB1FC662
Certificate serial:       1787EBDD36A684403E9B26882DC287E43A089B8D
Authority key identifier: 0A:65:FD:0B:F5:74:1C:91:12:B5:91:89:DD:F9:33:58:FB:1F:C6:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A65FD0BF5741C9112B59189DDF93358FB1FC662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/323830343a346534633a3a2f33322d3438203d3e20323638323532.roa
Signing time:             Sat 15 Apr 2023 02:47:54 +0000
ROA not before:           Sat 15 Apr 2023 02:42:54 +0000
ROA not after:            Sat 13 Apr 2024 02:47:54 +0000
asID:                     268252
IP address blocks:        2804:4e4c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:87:eb:dd:36:a6:84:40:3e:9b:26:88:2d:c2:87:e4:3a:08:9b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A65FD0BF5741C9112B59189DDF93358FB1FC662
        Validity
            Not Before: Apr 15 02:42:54 2023 GMT
            Not After : Apr 13 02:47:54 2024 GMT
        Subject: CN=0F020EFA4D303B66EDD7C555FA6E2F5280341736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bc:17:60:5d:91:15:3d:24:2d:53:2b:c5:0e:
                    09:e2:0b:1b:d8:26:31:a1:3e:3d:5d:f6:07:66:fc:
                    1c:0d:49:18:d4:20:67:f7:a0:33:92:a6:ee:a2:6f:
                    8e:2a:bc:7d:a4:fd:36:20:67:ef:59:ab:e6:f0:5d:
                    e7:b1:0b:e1:eb:27:c1:aa:ac:a9:fd:48:eb:8f:17:
                    df:8a:24:ba:dd:ab:8d:bf:6d:9a:e1:f1:29:82:15:
                    72:33:30:23:62:f7:eb:90:11:a7:a9:0a:4f:bf:65:
                    97:f3:e5:c6:89:5e:cb:ba:c9:6d:10:94:52:d2:f4:
                    8b:3d:0a:85:33:9f:04:be:99:51:10:4b:19:d5:03:
                    67:89:7d:27:6e:f6:ab:40:5e:df:04:50:2e:fb:d6:
                    22:16:2c:e7:45:7a:ae:53:5b:d5:61:4b:8c:37:92:
                    c5:4d:c5:a5:05:13:cb:e9:f9:67:cb:11:d1:91:61:
                    4a:91:ac:ae:fb:00:28:56:cf:ff:93:2b:77:42:2d:
                    d1:ad:33:23:d7:4a:57:89:c4:a3:1d:fd:3c:14:07:
                    7d:cf:e0:3d:f4:c6:cb:b8:9b:dc:d9:8e:52:53:63:
                    21:e9:51:1d:78:0e:44:85:b3:14:bb:55:4a:85:05:
                    b9:58:da:d7:fd:2f:bd:ed:4c:e7:4b:46:e9:df:86:
                    70:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:02:0E:FA:4D:30:3B:66:ED:D7:C5:55:FA:6E:2F:52:80:34:17:36
            X509v3 Authority Key Identifier:
                keyid:0A:65:FD:0B:F5:74:1C:91:12:B5:91:89:DD:F9:33:58:FB:1F:C6:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/0A65FD0BF5741C9112B59189DDF93358FB1FC662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A65FD0BF5741C9112B59189DDF93358FB1FC662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/323830343a346534633a3a2f33322d3438203d3e20323638323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:b6:8c:fc:b8:e3:cb:d5:dd:fb:23:ca:58:e4:88:f7:85:50:
         cd:99:e3:2c:ce:70:d9:db:07:6f:f3:00:d4:3f:c5:d8:be:f5:
         24:84:40:50:c0:dd:d4:fc:af:30:ac:60:65:16:56:c7:5d:16:
         0a:98:7a:40:0b:cb:ce:11:1a:b3:f6:85:47:20:7f:91:0a:8c:
         a9:35:11:9a:65:05:d9:8c:63:e4:b9:cb:de:b8:4d:23:f0:4f:
         bf:92:f4:bc:7d:93:ab:77:d0:e4:62:52:50:f6:f5:4a:ef:8f:
         b0:36:c2:0e:49:a5:dc:b5:6f:dc:c6:7b:ae:a2:49:74:21:55:
         7c:06:41:6e:01:90:a3:8c:c1:a0:8d:3c:e2:40:bf:34:42:53:
         1a:d6:75:35:02:c2:2a:42:61:6a:22:1b:93:f3:d1:63:0a:6c:
         17:a7:5a:50:1d:62:2b:73:c8:c6:b4:33:20:96:00:a7:ba:80:
         8c:cb:46:d5:bd:83:6f:86:e5:8b:bc:d2:78:98:bb:63:c0:d3:
         67:0c:8b:d3:39:33:d0:2e:89:da:f6:ee:70:d8:29:4c:83:27:
         cf:50:c2:7c:50:bd:7c:ca:60:1a:f8:ea:8c:ac:e2:f4:34:a1:
         d8:27:24:f6:2d:71:f1:9f:78:2f:1e:e1:01:f4:c9:10:a7:bd:
         93:71:dd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org