Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/323830343a316163383a633030303a3a2f33342d3334203d3e203631383835.roa
File:                     323830343a316163383a633030303a3a2f33342d3334203d3e203631383835.roa (raw, json)
Hash identifier:          vrSFJ4evCtqRBl1fHDes8h8jd/kZoBscTVFgfV2uj24=
Subject key identifier:   BA:1A:7B:65:87:C9:D3:AD:F3:8A:7F:31:A2:92:F8:E1:65:06:32:76
Certificate issuer:       /CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
Certificate serial:       1DA05A6B5E031967E51E9610451EB81FF2ED0553
Authority key identifier: FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/323830343a316163383a633030303a3a2f33342d3334203d3e203631383835.roa
Signing time:             Thu 04 Apr 2024 15:17:12 +0000
ROA not before:           Thu 04 Apr 2024 15:12:12 +0000
ROA not after:            Thu 03 Apr 2025 15:17:12 +0000
asID:                     61885
IP address blocks:        2804:1ac8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a0:5a:6b:5e:03:19:67:e5:1e:96:10:45:1e:b8:1f:f2:ed:05:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
        Validity
            Not Before: Apr  4 15:12:12 2024 GMT
            Not After : Apr  3 15:17:12 2025 GMT
        Subject: CN=BA1A7B6587C9D3ADF38A7F31A292F8E165063276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:2d:43:bd:c8:c7:33:3b:ee:8e:fb:e4:a4:
                    49:4f:3f:06:3c:87:c4:c2:1b:fb:ed:5d:a1:62:81:
                    f2:0f:81:79:bc:60:7b:54:24:be:43:1c:ca:9d:a1:
                    01:63:9a:bc:f6:18:01:59:63:35:8c:58:99:1f:e9:
                    04:40:4b:b7:26:7b:54:24:40:95:57:17:f4:fa:f7:
                    e0:f0:e5:4f:49:42:26:d5:6b:eb:68:74:49:1b:f2:
                    02:e2:09:7b:e6:67:d5:62:cc:60:20:3d:5a:3e:f5:
                    30:38:cf:3a:01:97:d3:7b:b6:59:9e:2c:8c:d1:a4:
                    6b:9a:15:d8:04:f8:92:8c:8c:d9:e5:4c:37:41:15:
                    9e:92:66:b1:68:ef:9b:7c:be:39:1c:13:cc:50:5f:
                    f7:c9:38:a3:73:20:a9:ad:7c:5e:af:8f:ea:c9:79:
                    5b:0b:c9:48:7f:7d:76:e7:61:55:6c:c7:17:71:b5:
                    de:98:ce:99:7f:b7:1b:d3:49:89:ff:e4:94:8d:83:
                    aa:55:f6:8e:6d:e4:21:a3:fa:77:4c:98:4d:17:e9:
                    da:64:20:24:f5:f4:ed:d8:ce:92:58:60:9b:42:89:
                    a7:b2:2f:4d:9c:a7:b3:9b:98:12:49:9a:cb:d5:b7:
                    8d:73:c8:2c:f7:73:1d:0a:b4:10:65:c4:0b:1a:42:
                    54:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1A:7B:65:87:C9:D3:AD:F3:8A:7F:31:A2:92:F8:E1:65:06:32:76
            X509v3 Authority Key Identifier:
                keyid:FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/323830343a316163383a633030303a3a2f33342d3334203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6a:3f:2d:0a:94:01:22:5c:d0:c1:85:b5:2d:91:c5:21:52:24:
         df:08:a4:4f:48:7a:96:2a:5d:d1:76:22:1a:ea:e2:b8:66:82:
         df:c6:93:9f:d9:cd:0a:d9:b4:95:d9:77:27:e6:e5:12:ea:5f:
         3d:27:09:5f:07:05:0d:58:3e:40:a3:bc:16:4b:12:b0:fa:e9:
         05:fe:f2:35:e3:a3:fe:47:5c:4c:33:d9:83:a7:19:72:bb:3a:
         16:d4:58:97:1c:31:fd:7e:c7:7b:3f:dd:16:a8:0d:70:bb:eb:
         d8:9c:c9:a0:0b:eb:87:36:2a:db:f9:36:11:23:3c:08:53:95:
         b6:3b:0a:dc:30:d3:16:ec:8a:00:20:34:be:3e:69:57:2e:45:
         9a:83:3e:4b:d8:a2:9a:d0:2f:fb:c6:6c:e1:43:b8:08:a5:c6:
         e9:6b:aa:92:6f:39:bb:03:b0:00:4b:a8:50:e6:da:fb:99:97:
         71:fc:60:8e:3d:0d:52:d9:a3:5e:03:1a:67:7d:73:d1:c3:9e:
         ae:ce:ed:1c:eb:d2:bf:7d:68:21:88:e3:56:24:bd:db:79:f1:
         df:8a:2f:9f:c9:d2:df:d6:ca:37:00:d3:60:16:77:ce:a7:96:
         e1:0b:61:13:1a:17:6e:26:ee:af:0c:f3:ff:dd:c3:ef:9e:09:
         a1:70:3c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org