Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a343030303a3a2f33342d3334203d3e203631373139.roa
File:                     323830343a316235303a343030303a3a2f33342d3334203d3e203631373139.roa (raw, json)
Hash identifier:          WFziPPSZB9hNCyOQvsRvxl55lw78cZDqaT8bVL+bdJI=
Subject key identifier:   55:93:3D:95:12:09:27:CF:A0:E2:96:16:18:70:7A:14:22:8C:56:84
Certificate issuer:       /CN=403FC78498B4F9A70A25B59957E31D1B39C27D1F
Certificate serial:       6B1E1297A217EEE15FA173E8DDEB923E541BAD03
Authority key identifier: 40:3F:C7:84:98:B4:F9:A7:0A:25:B5:99:57:E3:1D:1B:39:C2:7D:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a343030303a3a2f33342d3334203d3e203631373139.roa
Signing time:             Mon 06 Nov 2023 17:15:21 +0000
ROA not before:           Mon 06 Nov 2023 17:10:21 +0000
ROA not after:            Mon 04 Nov 2024 17:15:21 +0000
asID:                     61719
IP address blocks:        2804:1b50:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1e:12:97:a2:17:ee:e1:5f:a1:73:e8:dd:eb:92:3e:54:1b:ad:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403FC78498B4F9A70A25B59957E31D1B39C27D1F
        Validity
            Not Before: Nov  6 17:10:21 2023 GMT
            Not After : Nov  4 17:15:21 2024 GMT
        Subject: CN=55933D95120927CFA0E2961618707A14228C5684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8c:6c:72:96:22:73:52:f4:bc:fa:d7:fd:da:
                    26:47:15:fc:05:69:4e:d8:84:96:97:cc:bd:8b:88:
                    61:0b:ec:97:01:6b:8c:df:f8:c2:56:3b:98:57:24:
                    67:19:03:4d:45:61:f3:52:86:c6:95:7e:1f:fb:63:
                    04:b8:e4:c5:27:f8:02:43:db:35:f9:5d:76:2e:59:
                    f1:e3:fb:d5:a0:36:a3:c2:0d:8e:b0:06:99:b5:6b:
                    8f:13:50:db:db:90:2f:c2:84:43:ae:49:be:fc:b7:
                    21:ae:95:2e:8d:94:ed:ab:91:e2:95:98:85:7d:7a:
                    83:c3:62:33:24:5d:5f:be:82:b8:4c:12:13:69:9a:
                    db:5a:8a:b1:a0:d7:55:67:d6:44:d6:ab:7c:fd:31:
                    17:5d:71:eb:17:0f:0b:25:bf:b3:83:4d:67:91:7d:
                    ee:16:ad:47:de:c8:a2:02:1d:75:5f:1b:8e:55:ae:
                    6a:5b:e9:d4:42:10:5f:10:b8:58:1d:ef:12:99:3c:
                    4f:3d:44:cd:ae:e2:60:69:b1:71:d9:a7:11:13:58:
                    ca:2f:45:c2:5d:f8:69:df:9e:38:95:d7:86:68:a8:
                    fb:73:9c:7f:d6:df:52:49:4d:ee:99:00:c6:d2:0b:
                    37:f2:8b:de:e7:fc:96:7f:50:83:f3:ac:18:5b:3d:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:93:3D:95:12:09:27:CF:A0:E2:96:16:18:70:7A:14:22:8C:56:84
            X509v3 Authority Key Identifier:
                keyid:40:3F:C7:84:98:B4:F9:A7:0A:25:B5:99:57:E3:1D:1B:39:C2:7D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a343030303a3a2f33342d3334203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b50:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:28:a3:47:4f:88:ed:5e:40:08:14:7f:32:71:32:c5:b7:31:
         58:23:c8:53:ce:4e:39:41:02:b2:2b:58:b8:5e:14:79:e2:9c:
         73:31:d4:b6:27:54:6b:8f:ce:24:de:86:92:d6:9a:3f:55:b3:
         1a:b1:d6:46:46:45:7f:65:65:29:72:00:05:99:d4:d2:03:3b:
         cc:f6:96:94:d4:7a:52:7e:cf:96:a6:16:c0:46:b1:13:a5:c4:
         8a:bb:aa:65:d4:3d:57:76:e7:4b:82:d6:5f:4e:00:9e:5b:48:
         f1:ee:19:9a:a4:f2:d6:c8:df:44:68:c9:aa:7c:9d:7c:90:71:
         81:5b:66:a9:00:10:27:43:0f:33:93:56:56:63:22:51:9c:12:
         41:45:94:f0:fa:a1:71:ad:21:f7:81:b5:cf:5d:78:a4:f5:bb:
         1e:8b:86:c9:63:23:f7:18:5e:7d:f4:e6:0c:3b:ca:15:3d:74:
         78:37:98:2e:51:c9:99:ab:85:36:6f:29:a6:3d:dc:08:fa:9d:
         34:89:4f:3a:c1:f6:56:6e:5e:f6:70:b9:75:a6:e4:4c:ae:c5:
         a0:6a:8b:ca:44:ce:80:ab:ca:ab:ad:d5:da:68:02:64:aa:e0:
         1d:cc:20:f6:13:44:49:a3:a9:8b:d3:33:54:8d:bb:bb:42:2a:
         be:36:e5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org