Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/323830343a346537303a643030303a3a2f33362d3438203d3e20323638323631.roa
File:                     323830343a346537303a643030303a3a2f33362d3438203d3e20323638323631.roa (raw, json)
Hash identifier:          8Bv0T+9rXbJaFSlytVwn9g96VDSuPd2P99piGClKLo8=
Subject key identifier:   63:93:6D:82:B8:8D:C1:6D:B1:E8:F9:18:CC:8F:F0:D6:A5:22:A2:00
Certificate issuer:       /CN=C06C9A928E7DAE51A6503DDCA4B5F79752FFA942
Certificate serial:       4DE2F6A0B262DB4B7ACC815296A5FF4B688F7FB3
Authority key identifier: C0:6C:9A:92:8E:7D:AE:51:A6:50:3D:DC:A4:B5:F7:97:52:FF:A9:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/323830343a346537303a643030303a3a2f33362d3438203d3e20323638323631.roa
Signing time:             Wed 22 Nov 2023 15:20:54 +0000
ROA not before:           Wed 22 Nov 2023 15:15:54 +0000
ROA not after:            Wed 20 Nov 2024 15:20:54 +0000
asID:                     268261
IP address blocks:        2804:4e70:d000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e2:f6:a0:b2:62:db:4b:7a:cc:81:52:96:a5:ff:4b:68:8f:7f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C06C9A928E7DAE51A6503DDCA4B5F79752FFA942
        Validity
            Not Before: Nov 22 15:15:54 2023 GMT
            Not After : Nov 20 15:20:54 2024 GMT
        Subject: CN=63936D82B88DC16DB1E8F918CC8FF0D6A522A200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:af:1a:63:d6:f2:e2:6f:db:f0:75:c3:b5:81:
                    23:42:72:71:9c:5d:33:72:78:e8:13:52:bb:37:25:
                    6c:86:0d:a9:13:b0:24:2e:c1:bc:7e:83:d9:69:d8:
                    90:ed:8c:94:f9:dd:17:0f:ee:df:76:15:84:06:11:
                    70:a1:7f:bb:3d:02:a1:a3:10:0d:36:c9:0e:5c:0e:
                    27:3c:b6:12:d5:4f:c3:c9:13:83:b2:e5:22:dc:4e:
                    28:dd:68:ad:2b:fa:2a:0e:03:ab:53:92:cc:3b:36:
                    85:2c:c7:9c:f7:d6:c1:4a:8f:ab:c6:ce:9c:e5:2d:
                    c4:a7:e5:97:b1:41:41:b7:05:d9:a5:1b:16:6f:5f:
                    12:c7:32:d1:b1:f2:ac:bd:b4:cc:26:22:b8:71:6f:
                    dd:7d:96:89:83:c0:ac:1e:63:17:60:aa:45:ae:74:
                    43:66:fa:b1:04:8a:3a:da:b5:e9:6a:28:bb:8c:d3:
                    91:91:00:74:f3:17:90:6a:a1:1f:94:68:ae:e3:20:
                    f4:21:14:8f:90:8d:76:d7:6d:49:a6:be:db:53:77:
                    b8:6b:31:f5:57:8f:5c:87:f3:03:b8:13:22:b0:a6:
                    c9:5c:a7:8c:f8:0a:1e:f2:e6:4f:8c:b0:a1:b0:2e:
                    8b:bc:7e:d7:64:7a:a4:ab:ce:04:a9:26:6f:58:32:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:93:6D:82:B8:8D:C1:6D:B1:E8:F9:18:CC:8F:F0:D6:A5:22:A2:00
            X509v3 Authority Key Identifier:
                keyid:C0:6C:9A:92:8E:7D:AE:51:A6:50:3D:DC:A4:B5:F7:97:52:FF:A9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/323830343a346537303a643030303a3a2f33362d3438203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e70:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         01:75:99:bc:ec:97:e6:99:6e:e8:f8:0f:c1:2d:5b:95:f6:83:
         99:9c:05:31:f3:e7:92:cd:2e:1d:c3:5d:c7:fc:8c:d2:c8:9b:
         03:67:a8:2c:fd:30:91:4a:ac:26:0a:29:5e:5a:f8:a4:f7:5a:
         25:f2:ac:e0:aa:9d:7c:fc:f8:63:1b:00:fa:c4:3e:e7:83:d4:
         81:ed:32:9a:25:13:c9:dd:d7:78:e5:dd:7e:31:ed:6a:ed:a0:
         7c:8d:7a:e1:00:40:02:10:f5:12:31:c3:e8:5c:78:ff:1b:7d:
         59:3c:fb:61:d1:f7:5b:ff:d9:a1:6b:41:a6:fc:0c:f2:71:93:
         26:eb:ff:a2:7c:02:37:c4:4b:b5:d2:30:bb:01:de:0e:d8:e8:
         eb:62:4a:16:a9:00:4c:7b:bd:89:2d:bb:ed:d0:d6:ff:85:81:
         da:3c:5c:d1:74:f4:0a:d4:52:43:9f:83:71:6c:36:73:db:3f:
         26:bf:85:5e:d8:d0:f7:88:cf:f4:9b:a0:8e:20:66:c6:a0:04:
         69:84:eb:cb:ce:79:3c:1e:9b:38:f3:58:4a:25:35:37:88:12:
         9f:fe:f6:60:9d:6c:10:d0:cc:1d:db:f5:a5:c8:dc:3e:1f:a7:
         e5:05:44:e5:95:e5:87:b4:1c:22:70:94:53:a1:75:3b:f3:bc:
         f9:5d:5d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org