Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/323830343a313136383a3a2f33322d3438203d3e203532393034.roa
File:                     323830343a313136383a3a2f33322d3438203d3e203532393034.roa (raw, json)
Hash identifier:          F7NnGhRXohe63mL/r4BB6KT6YXPR6cwmTM0whUzMTFE=
Subject key identifier:   0A:52:DD:12:19:7F:09:29:1D:0F:52:C0:2A:0A:A6:0D:F5:44:A0:A7
Certificate issuer:       /CN=8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB
Certificate serial:       137B3BBC308968AC28101072D86A68DD1D5DD23A
Authority key identifier: 8C:6E:A6:74:D5:B6:AA:95:8B:C9:F7:C3:4A:F1:B6:9F:8E:9D:79:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/323830343a313136383a3a2f33322d3438203d3e203532393034.roa
Signing time:             Tue 26 Jul 2022 19:00:00 +0000
ROA not before:           Tue 26 Jul 2022 18:55:00 +0000
ROA not after:            Wed 26 Jul 2023 19:00:00 +0000
asID:                     52904
IP address blocks:        2804:1168::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7b:3b:bc:30:89:68:ac:28:10:10:72:d8:6a:68:dd:1d:5d:d2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB
        Validity
            Not Before: Jul 26 18:55:00 2022 GMT
            Not After : Jul 26 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:73:46:63:ed:13:d1:00:d9:c8:8d:c2:61:
                    54:8f:c9:f8:da:6d:ab:c2:60:6b:f1:a7:59:c6:77:
                    61:77:e1:fa:b9:fd:bc:df:9c:a7:c9:9b:c6:37:ad:
                    06:b6:11:67:bf:28:7a:ab:ee:04:37:06:81:e7:a5:
                    d0:65:8f:d7:9d:81:21:7a:65:84:27:c5:11:f2:48:
                    a9:e1:2e:f2:8d:68:03:04:d7:3a:3f:6c:55:fd:18:
                    30:20:2e:a9:42:e8:c9:04:51:55:25:a3:6b:bc:a7:
                    39:a4:79:56:bd:1f:80:ff:4d:56:59:32:06:b0:15:
                    ce:45:cc:9d:fd:5a:8e:0b:bf:97:a1:0a:87:06:4a:
                    d0:99:88:07:68:59:62:53:a0:98:bc:18:eb:10:a9:
                    90:14:f5:de:4f:b5:f7:27:a5:19:02:c6:d6:f2:c6:
                    54:08:73:a1:75:28:c7:17:3d:e3:55:55:54:b7:3a:
                    9b:0d:68:2d:47:46:62:5a:02:00:af:1b:74:4a:53:
                    62:ca:a8:78:68:8a:70:3f:b8:d7:0a:a4:de:20:86:
                    e9:bd:dd:3a:ae:47:35:c2:74:c2:7d:73:2f:42:ef:
                    13:6e:35:ec:49:2d:12:00:ca:0e:ec:69:c1:09:91:
                    68:c4:71:e5:df:1e:ae:50:65:a9:c2:8e:35:41:1b:
                    48:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:52:DD:12:19:7F:09:29:1D:0F:52:C0:2A:0A:A6:0D:F5:44:A0:A7
            X509v3 Authority Key Identifier:
                keyid:8C:6E:A6:74:D5:B6:AA:95:8B:C9:F7:C3:4A:F1:B6:9F:8E:9D:79:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/323830343a313136383a3a2f33322d3438203d3e203532393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1168::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:99:3e:52:d7:27:1e:86:aa:43:e6:95:bd:c1:a0:f7:00:bf:
         d7:30:93:c1:e7:11:00:50:e4:18:d2:00:a1:58:8a:17:35:a8:
         6a:bb:d6:21:78:80:2a:38:10:d1:23:1d:e7:04:e6:5e:c9:1b:
         28:08:46:e0:b1:7a:2f:8c:b1:7d:1b:88:78:ef:aa:b8:50:04:
         3a:62:bc:06:22:2f:3e:e9:e4:78:4f:e3:82:26:f2:28:ec:6c:
         bd:5d:07:91:cc:8f:31:e0:6d:a4:a5:34:44:7f:71:a5:3d:6b:
         89:f1:0d:c4:e2:31:9d:98:f2:d6:f6:25:7b:04:23:39:e8:ed:
         ca:fd:93:d0:c4:60:f7:33:10:56:4c:89:74:ae:d0:6e:33:29:
         02:41:e0:5d:17:e5:be:f5:f0:0c:b0:fa:1c:91:14:b4:28:6b:
         4f:e4:d6:9e:eb:86:a4:4a:16:38:4b:b0:14:f9:74:a9:d5:2f:
         95:80:25:b5:f9:3a:f2:9f:42:ff:92:ea:d3:f0:9e:38:8b:c2:
         fd:cb:10:07:2c:a0:a0:26:e5:d3:04:9a:fc:d0:82:a0:cb:9c:
         74:e8:d1:5f:74:a9:dd:f8:09:41:72:05:91:8d:ac:8f:b3:bd:
         b1:3a:65:e5:2c:64:58:e6:94:3f:90:81:d1:47:27:84:81:58:
         1a:1b:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org