Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/323830343a313337383a3a2f33322d3336203d3e20323633353335.roa
File:                     323830343a313337383a3a2f33322d3336203d3e20323633353335.roa (raw, json)
Hash identifier:          PI90T0mC071/gpRcI9DMNuszUd9SuM8UGbUsokTlCaQ=
Subject key identifier:   CA:F8:78:C6:70:6C:E7:AD:DA:F3:1D:AC:42:19:4B:43:41:86:D1:AC
Certificate issuer:       /CN=68E2494CADFA72482513CD8E105ECF8FECB726FE
Certificate serial:       083EDC5D7BB8591BB17E4D7FD53E2DBE0062F6A3
Authority key identifier: 68:E2:49:4C:AD:FA:72:48:25:13:CD:8E:10:5E:CF:8F:EC:B7:26:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68E2494CADFA72482513CD8E105ECF8FECB726FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/323830343a313337383a3a2f33322d3336203d3e20323633353335.roa
Signing time:             Tue 24 Jan 2023 15:08:40 +0000
ROA not before:           Tue 24 Jan 2023 15:03:40 +0000
ROA not after:            Tue 23 Jan 2024 15:08:40 +0000
asID:                     263535
IP address blocks:        2804:1378::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3e:dc:5d:7b:b8:59:1b:b1:7e:4d:7f:d5:3e:2d:be:00:62:f6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E2494CADFA72482513CD8E105ECF8FECB726FE
        Validity
            Not Before: Jan 24 15:03:40 2023 GMT
            Not After : Jan 23 15:08:40 2024 GMT
        Subject: CN=CAF878C6706CE7ADDAF31DAC42194B434186D1AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:d1:da:21:6b:27:6e:af:5b:f4:dc:69:0c:
                    f0:0a:cc:4a:52:2c:b6:8e:0b:e1:b9:1f:f9:9b:cc:
                    a1:68:ba:50:e4:a1:a8:f6:51:41:0b:57:b3:2b:49:
                    cc:54:76:ae:37:1e:9a:c5:45:c2:d3:62:b1:52:34:
                    40:67:2b:b2:bb:0c:ed:d4:25:21:5c:82:14:56:61:
                    29:25:de:c3:7f:9c:f9:fd:7c:57:a1:39:03:c0:19:
                    ed:48:ae:50:15:9d:ae:16:d6:bf:68:4d:d1:7c:a5:
                    99:3a:85:dc:dc:d3:c3:76:06:e7:23:1c:88:db:48:
                    19:d5:06:1f:b9:15:9f:f5:cd:14:83:8d:01:ff:0d:
                    6c:a7:c0:49:e6:5c:82:ca:2e:a3:0b:e1:e2:16:1d:
                    b4:46:bd:da:cf:3c:d7:ac:77:b4:43:e4:c1:ca:6e:
                    c7:3e:29:a7:17:e2:04:17:37:d7:93:a5:6a:cd:3c:
                    82:73:ce:f0:9b:5f:e4:a9:96:85:6d:44:4c:35:61:
                    42:73:4c:93:d4:20:df:09:af:26:38:9f:e6:eb:98:
                    fb:87:eb:71:6b:ec:79:21:ac:0d:5d:8a:ed:15:eb:
                    b5:70:06:63:c9:b2:23:05:21:88:4d:40:8e:5a:82:
                    c7:0a:94:43:de:b7:4d:24:64:96:fc:ca:72:a5:8b:
                    18:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F8:78:C6:70:6C:E7:AD:DA:F3:1D:AC:42:19:4B:43:41:86:D1:AC
            X509v3 Authority Key Identifier:
                keyid:68:E2:49:4C:AD:FA:72:48:25:13:CD:8E:10:5E:CF:8F:EC:B7:26:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/68E2494CADFA72482513CD8E105ECF8FECB726FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68E2494CADFA72482513CD8E105ECF8FECB726FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/323830343a313337383a3a2f33322d3336203d3e20323633353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1378::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:ce:e1:87:45:41:88:80:d3:31:51:df:6a:43:ca:38:65:fa:
         04:5f:ec:53:8e:a4:14:fd:55:8f:9c:14:c3:b8:b5:12:dc:37:
         10:3a:01:6d:0c:3b:bb:bc:18:29:f5:a5:2d:de:f9:2a:ea:80:
         c7:03:64:83:8d:9b:fd:40:c1:06:42:0d:5c:65:42:67:e0:34:
         4a:bc:18:8f:13:7b:6f:8b:c0:c5:a5:2b:d2:b6:2c:6e:4f:c9:
         dd:8d:79:d7:0b:4b:d6:7a:8d:b9:c7:a9:06:45:f1:54:44:38:
         ed:ec:ca:e2:c0:b4:e6:48:6d:3c:93:b7:cf:6b:36:fd:8f:99:
         ff:4d:6b:72:7a:57:3e:48:25:97:41:7b:b9:cd:17:4c:4c:15:
         d2:1b:af:f0:a9:35:08:e2:a5:72:18:06:da:98:6a:f7:f2:c7:
         33:35:d4:7a:b1:64:b8:05:4c:e5:75:8d:9f:01:b5:2c:b4:b0:
         51:e3:70:44:93:2c:21:f1:65:2f:d5:0a:1a:85:94:18:84:54:
         93:85:28:ab:3e:1c:52:46:81:15:a0:dc:e0:4f:9c:93:c2:82:
         fa:f0:e6:ff:cb:4c:35:fc:85:c5:cf:f1:85:75:44:b8:33:6d:
         a2:98:12:b6:79:f7:5b:3a:c2:a7:27:c1:34:28:92:59:34:a6:
         af:a8:7f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org