Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/0/323830343a363765383a3a2f33322d3332203d3e20323639363538.roa
File:                     323830343a363765383a3a2f33322d3332203d3e20323639363538.roa (raw, json)
Hash identifier:          PqSr3B0vkWFFujuEv1+7sEdp51nar7qo1ns8r/d827w=
Subject key identifier:   B1:8A:E1:B5:43:7D:D3:55:F4:BA:E3:7E:3D:04:6B:AE:79:76:82:95
Certificate issuer:       /CN=952AC068B7B96477F85E17C379F12DD0F4D0F924
Certificate serial:       350C56A3D7DD8C5CA2CA44248144D3017ADD4454
Authority key identifier: 95:2A:C0:68:B7:B9:64:77:F8:5E:17:C3:79:F1:2D:D0:F4:D0:F9:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952AC068B7B96477F85E17C379F12DD0F4D0F924.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/0/323830343a363765383a3a2f33322d3332203d3e20323639363538.roa
Signing time:             Tue 05 Mar 2024 00:20:36 +0000
ROA not before:           Tue 05 Mar 2024 00:15:36 +0000
ROA not after:            Tue 04 Mar 2025 00:20:36 +0000
asID:                     269658
IP address blocks:        2804:67e8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0c:56:a3:d7:dd:8c:5c:a2:ca:44:24:81:44:d3:01:7a:dd:44:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952AC068B7B96477F85E17C379F12DD0F4D0F924
        Validity
            Not Before: Mar  5 00:15:36 2024 GMT
            Not After : Mar  4 00:20:36 2025 GMT
        Subject: CN=B18AE1B5437DD355F4BAE37E3D046BAE79768295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:c2:d9:7b:49:73:54:17:77:21:6b:4b:10:
                    8e:84:db:46:45:dd:79:45:0c:5b:f4:68:ad:16:9b:
                    a6:a5:2e:09:d6:77:21:ef:84:5f:34:2b:ab:be:03:
                    0f:fa:f7:25:c6:84:35:71:e9:17:93:7b:f9:f3:88:
                    98:40:25:b1:cd:3b:bf:25:67:0d:87:c8:7a:e5:d0:
                    ed:40:50:5a:df:47:b4:42:36:24:1c:3d:57:67:37:
                    ba:03:64:8b:83:18:ce:ee:c8:c9:23:df:f4:af:96:
                    e6:32:84:ba:c9:be:02:80:52:78:ab:c4:25:09:2d:
                    f4:cd:e3:71:9d:66:65:dd:63:77:c0:49:b6:97:02:
                    79:18:5c:87:03:51:0c:c7:69:a7:64:98:fe:53:a8:
                    ec:3f:62:f2:cd:c9:2b:ba:94:9c:2c:ad:e3:d4:f2:
                    56:a2:c6:9d:62:33:0d:e2:20:cd:88:a1:87:9a:f2:
                    e7:40:9e:ff:6d:ae:19:c0:3b:76:38:28:6d:27:88:
                    45:6d:d1:f3:9e:b5:06:e6:4d:17:4f:01:96:25:37:
                    85:e4:da:95:85:9e:14:7a:77:37:71:3d:94:12:b8:
                    f2:4f:44:1c:ad:e4:e8:be:07:55:2e:12:26:69:a6:
                    be:8d:cb:c1:8e:ac:e2:87:e2:7e:05:6a:83:be:2d:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8A:E1:B5:43:7D:D3:55:F4:BA:E3:7E:3D:04:6B:AE:79:76:82:95
            X509v3 Authority Key Identifier:
                keyid:95:2A:C0:68:B7:B9:64:77:F8:5E:17:C3:79:F1:2D:D0:F4:D0:F9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/0/952AC068B7B96477F85E17C379F12DD0F4D0F924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952AC068B7B96477F85E17C379F12DD0F4D0F924.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/0/323830343a363765383a3a2f33322d3332203d3e20323639363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:64:2d:12:c0:4e:81:ba:1b:74:f9:cd:13:68:d5:aa:4c:b6:
         a4:3f:20:47:38:a9:8f:fd:02:93:a1:b6:85:91:08:c0:6e:ab:
         3c:71:04:6c:fb:c7:bd:39:26:ec:c8:0f:8d:f1:2a:98:1b:ca:
         24:ea:15:61:48:62:19:de:97:f7:e8:fc:38:fc:cb:ea:23:b9:
         42:10:fb:36:5a:a2:d2:22:e2:ec:47:ad:b7:ec:a6:b7:bd:5a:
         7a:7c:3e:29:60:e4:43:23:25:d0:06:88:f0:a4:8a:c5:1e:9d:
         ab:82:f6:98:22:c7:ff:79:d7:e1:fa:ed:2d:ab:4a:e2:f6:20:
         85:f8:ec:dc:09:6b:86:dd:df:5e:e1:3b:3a:24:37:85:04:c4:
         f4:03:86:f7:83:ea:1b:fb:92:a7:1c:0d:37:52:f2:8c:6b:fb:
         ed:73:ba:3d:e2:e8:34:24:93:78:ad:6f:0b:60:f9:b7:f7:35:
         cd:da:2d:ac:4d:4a:57:a9:cd:7f:ee:2a:6d:cf:a0:08:b7:32:
         dd:d5:ef:71:5c:b8:d3:05:19:59:ec:93:5c:a8:25:42:09:46:
         63:5d:62:f4:75:ea:dc:e0:8c:e3:d7:44:1e:f0:ae:4c:f4:69:
         ac:25:39:69:f2:4d:27:67:d7:da:7a:96:39:20:64:41:6c:9a:
         5e:06:03:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org