Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3130303a3a2f34302d3432203d3e20323637343538.roa
File:                     323830343a343164303a3130303a3a2f34302d3432203d3e20323637343538.roa (raw, json)
Hash identifier:          OKrbfV6uYYpKf6zRqbWfj62t1nJYvhX3xALKwEGLSyo=
Subject key identifier:   67:2C:20:65:29:6D:D1:73:12:E5:65:06:04:3B:ED:1A:66:F3:B8:D8
Certificate issuer:       /CN=0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3
Certificate serial:       5856C87E1C002B490E7933BBC65AE5B49000EC48
Authority key identifier: 0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3130303a3a2f34302d3432203d3e20323637343538.roa
Signing time:             Wed 14 Jun 2023 17:56:23 +0000
ROA not before:           Wed 14 Jun 2023 17:51:23 +0000
ROA not after:            Wed 12 Jun 2024 17:56:23 +0000
asID:                     267458
IP address blocks:        2804:41d0:100::/40 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:56:c8:7e:1c:00:2b:49:0e:79:33:bb:c6:5a:e5:b4:90:00:ec:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3
        Validity
            Not Before: Jun 14 17:51:23 2023 GMT
            Not After : Jun 12 17:56:23 2024 GMT
        Subject: CN=672C2065296DD17312E56506043BED1A66F3B8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2b:90:4e:e4:39:a5:28:3a:be:e8:41:bc:cd:
                    56:e1:ec:87:c5:de:38:54:49:93:e6:8f:52:7c:7a:
                    ad:86:4d:39:9d:d2:96:34:4c:91:ee:ef:d7:a2:0a:
                    9d:4c:e8:d1:22:f4:66:6c:7a:79:c0:12:01:7a:05:
                    03:d4:41:04:34:2d:fa:38:04:1c:51:ef:57:6b:a9:
                    2f:e4:33:b7:3d:d1:4b:72:a4:96:2b:23:53:ff:bf:
                    e0:b3:26:a7:60:f2:fc:d1:08:11:e8:8e:a0:1c:10:
                    c6:e1:4d:83:7d:49:77:07:5a:ae:7f:15:fb:ab:83:
                    ef:bc:e6:83:a0:f6:58:f5:0d:17:b0:89:16:46:d1:
                    47:12:68:6c:09:8f:ac:07:4e:ec:9a:45:1b:b4:f8:
                    a7:a7:62:1b:29:90:de:91:24:6f:ec:f1:17:88:97:
                    e4:a2:d9:54:b1:e9:a1:f1:e8:77:f8:a9:8c:71:fb:
                    df:f3:c6:c7:ed:e0:85:29:09:6c:1f:30:37:a1:6f:
                    2b:43:66:0c:6f:22:1f:8e:80:03:2e:1d:f4:25:b6:
                    7d:ec:62:ff:47:a4:29:73:a7:97:ea:fc:b8:dc:3f:
                    84:1f:92:c4:a4:ef:08:4e:c0:c9:66:4a:8c:06:f3:
                    47:df:64:c1:42:bd:3b:90:e1:ad:49:a4:b6:b8:a5:
                    4a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2C:20:65:29:6D:D1:73:12:E5:65:06:04:3B:ED:1A:66:F3:B8:D8
            X509v3 Authority Key Identifier:
                keyid:0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3130303a3a2f34302d3432203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:e8:c9:ef:a6:cc:e7:03:28:a8:34:63:73:6f:1e:b4:ee:35:
         4b:0c:a6:50:01:54:cf:9a:a1:65:8d:78:1e:d4:09:bc:fe:f5:
         53:2a:08:36:87:87:c9:41:7a:8c:01:c5:1e:89:e2:ba:46:f1:
         40:b3:8a:ac:13:23:4e:35:23:1c:7c:b0:88:9e:69:82:e8:df:
         37:a6:b8:23:2c:31:cf:b5:d3:42:f5:37:7d:2b:a1:d3:e4:3a:
         fb:a9:ab:8b:94:44:02:c0:18:21:30:2a:96:0e:a4:7f:b0:08:
         2b:c2:7e:a1:c4:35:31:81:47:a2:87:e8:b2:45:28:14:47:ff:
         af:8e:56:b8:8a:cf:b4:3e:f0:6b:61:6a:34:c7:da:c7:3c:5b:
         3c:c2:4a:c8:7d:4b:be:4b:50:b5:d8:c3:57:00:05:73:0c:dc:
         33:71:69:b5:03:93:be:b1:ed:0f:8b:e4:68:48:f5:b2:a8:76:
         be:40:61:a1:a4:da:f6:d9:01:e2:a2:4f:ea:f5:c9:f4:b2:cd:
         00:1f:c8:b0:3e:a5:6d:e9:8d:ab:01:1c:e1:76:98:68:c3:9c:
         04:9c:36:ba:d2:7e:17:11:f4:0b:7c:ca:fc:81:f2:21:a9:fc:
         88:4e:31:38:7d:7e:cd:a2:07:8f:1d:c9:9a:37:ec:dd:f4:8e:
         21:46:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org