Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a383030303a3a2f33332d3333203d3e20323635323639.roa
File:                     323830343a326434303a383030303a3a2f33332d3333203d3e20323635323639.roa (raw, json)
Hash identifier:          tGlFskBkVV6bpH9T29fBttX791xyywJJjKXbOtpJxTc=
Subject key identifier:   6D:70:46:2A:BD:6A:7B:92:BF:49:DD:FD:46:EC:17:B3:D4:B6:30:90
Certificate issuer:       /CN=C0E7F56E436009B8C2D302AFAC79978BD913BCD2
Certificate serial:       3E716657B5062C775BCDB71BC3D835E07561EB56
Authority key identifier: C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a383030303a3a2f33332d3333203d3e20323635323639.roa
Signing time:             Thu 09 May 2024 19:33:09 +0000
ROA not before:           Thu 09 May 2024 19:28:09 +0000
ROA not after:            Thu 08 May 2025 19:33:09 +0000
asID:                     265269
IP address blocks:        2804:2d40:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:71:66:57:b5:06:2c:77:5b:cd:b7:1b:c3:d8:35:e0:75:61:eb:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0E7F56E436009B8C2D302AFAC79978BD913BCD2
        Validity
            Not Before: May  9 19:28:09 2024 GMT
            Not After : May  8 19:33:09 2025 GMT
        Subject: CN=6D70462ABD6A7B92BF49DDFD46EC17B3D4B63090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:fb:7f:c8:90:f3:a5:4e:b8:c6:0b:06:fa:
                    02:e0:86:cb:2b:c8:01:79:6d:33:0b:74:ff:4a:fe:
                    c0:fb:b1:25:3a:b1:66:89:8e:4f:cb:54:0f:35:d6:
                    18:67:22:fa:fb:16:a7:54:54:b7:08:84:04:9e:63:
                    74:1a:90:41:95:07:85:c4:50:2d:ea:15:8c:a9:53:
                    9d:ba:35:a6:9c:28:13:7f:8d:56:bf:85:a8:a3:74:
                    ed:a0:43:6c:42:dc:b4:8e:4a:f0:b8:d7:f5:87:c4:
                    1a:99:d9:f4:e7:71:d2:2a:d1:7a:d1:08:8e:2f:22:
                    e2:f4:c3:e4:ea:25:1c:4f:9c:42:18:0b:dd:c4:f5:
                    db:f4:89:2f:ce:70:2e:d7:b0:20:d9:9d:01:fd:e5:
                    24:08:54:5d:60:5f:ba:e9:73:31:fd:28:56:a5:e5:
                    17:59:d8:03:0b:ca:9c:fb:2b:12:2d:ea:0b:36:aa:
                    f6:f4:b5:d1:db:b0:a6:e2:be:15:35:0f:fd:f4:ce:
                    46:c7:e3:4e:e8:a4:84:9e:16:61:42:44:60:43:6b:
                    8d:7a:10:f1:a1:37:91:1d:ea:c8:fc:90:48:95:d0:
                    27:0b:33:b1:16:aa:bb:1b:e9:f6:88:6b:e6:0d:2c:
                    a2:71:d2:00:af:77:4b:6f:3e:d8:50:9f:7f:87:09:
                    92:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:70:46:2A:BD:6A:7B:92:BF:49:DD:FD:46:EC:17:B3:D4:B6:30:90
            X509v3 Authority Key Identifier:
                keyid:C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a383030303a3a2f33332d3333203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d40:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a1:ac:07:05:1f:33:b6:b3:c3:1a:46:58:32:ec:f3:2c:65:98:
         78:07:c4:ae:b1:de:1a:01:72:f3:6b:0e:dd:0c:54:53:d3:76:
         42:5f:56:5a:b9:19:fe:13:2f:e9:52:68:60:5d:47:6d:6c:ee:
         3e:16:c7:d7:72:f1:46:4a:ca:6d:51:82:bf:24:3e:55:54:38:
         aa:74:9f:b7:50:59:c4:f7:33:6e:eb:22:a9:d5:bf:91:ad:66:
         86:db:42:79:26:a5:91:05:1f:2b:1b:23:52:cd:29:95:64:56:
         8d:bb:a1:10:e9:52:8f:1f:c2:6d:ca:69:28:45:c5:50:7d:fd:
         ae:ca:78:df:e4:0c:8e:7c:56:27:34:26:7e:a8:2a:4a:8b:fd:
         32:ee:40:9d:d4:03:07:48:3e:56:6a:72:fb:71:ed:29:6d:49:
         8a:8b:66:2d:9b:f0:ca:0a:29:cd:e0:16:bb:6b:fa:48:bc:f5:
         5a:32:62:03:75:20:8f:92:b6:36:c7:fd:fd:33:00:ed:5a:70:
         ad:ca:2d:fd:62:31:25:9f:7b:81:4a:39:0b:67:0b:a3:c3:5d:
         26:d8:bf:09:3c:cd:74:c3:bd:63:30:49:84:e2:5f:5d:e8:c4:
         78:cd:38:d9:54:aa:d5:d8:6d:2b:fe:42:93:d3:20:ae:95:2e:
         43:f5:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org