Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a633030303a3a2f33342d3634203d3e203238313235.roa
File:                     323830343a313438383a633030303a3a2f33342d3634203d3e203238313235.roa (raw, json)
Hash identifier:          vuFcFLP/E5XslAJ1vhhd5z4b75d5dNYUhp2xHgfkoRg=
Subject key identifier:   DC:D3:10:CB:6B:2B:80:A1:A7:3D:70:46:18:2A:DF:2D:29:60:28:AC
Certificate issuer:       /CN=267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93
Certificate serial:       6AA3AF6B659704CDCF7FD4686E5098BD49AAB766
Authority key identifier: 26:7F:64:B0:BC:7F:BA:7A:C7:B5:6F:D7:E9:A0:51:AF:78:7A:4A:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a633030303a3a2f33342d3634203d3e203238313235.roa
Signing time:             Thu 30 Sep 2021 18:58:52 +0000
ROA not before:           Thu 30 Sep 2021 18:53:52 +0000
ROA not after:            Fri 30 Sep 2022 18:58:52 +0000
asID:                     28125
IP address blocks:        2804:1488:c000::/34 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a3:af:6b:65:97:04:cd:cf:7f:d4:68:6e:50:98:bd:49:aa:b7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93
        Validity
            Not Before: Sep 30 18:53:52 2021 GMT
            Not After : Sep 30 18:58:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:a5:b4:1d:f7:c7:69:84:29:84:36:a3:6e:
                    10:2a:ec:ac:62:8a:bf:19:d4:c1:a9:09:9a:cd:0b:
                    d1:29:61:4a:05:4d:de:b9:ca:77:1c:f0:28:47:fb:
                    4c:1f:12:cb:3c:2e:76:7a:1b:eb:ea:dc:37:b6:54:
                    4c:de:3d:22:89:18:6d:66:ad:85:9c:06:c9:aa:d2:
                    4d:6b:04:71:f2:92:fc:55:1d:bc:53:8a:c0:70:20:
                    cf:34:a1:e6:cb:5d:f5:70:61:e3:1e:68:d3:00:52:
                    20:3f:c6:fb:5b:80:cd:c0:f6:19:cb:e8:1b:ab:fb:
                    67:53:68:d1:70:a6:86:02:a1:d7:99:91:f1:1c:38:
                    5d:5f:25:29:bc:63:89:27:02:db:46:b0:9d:f6:ec:
                    cd:0c:fd:2e:73:17:6c:4b:86:5d:73:86:ce:02:69:
                    80:32:11:a1:9d:76:a1:e0:0a:ff:53:73:03:10:b0:
                    5c:30:87:ce:71:01:e4:d6:6a:80:a5:04:6f:58:0a:
                    fb:53:14:7a:04:08:f6:e7:77:e8:40:b0:2f:24:e8:
                    5a:af:55:c8:d7:63:43:49:51:96:5c:a4:73:09:ab:
                    96:72:11:22:a6:49:23:7e:9a:6d:2a:5a:fb:a3:e6:
                    20:73:8c:60:5b:2c:dd:26:32:74:5a:b0:7e:7f:ab:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D3:10:CB:6B:2B:80:A1:A7:3D:70:46:18:2A:DF:2D:29:60:28:AC
            X509v3 Authority Key Identifier:
                keyid:26:7F:64:B0:BC:7F:BA:7A:C7:B5:6F:D7:E9:A0:51:AF:78:7A:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a633030303a3a2f33342d3634203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1488:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         15:74:25:22:12:51:29:3a:d7:6f:43:a8:53:fb:1a:75:6d:6c:
         a7:be:eb:0b:9c:f9:8b:3e:a5:e0:61:6e:10:f4:43:46:bf:17:
         65:b9:99:14:70:2f:e8:6f:40:98:9d:f1:fc:8c:83:b9:ed:43:
         34:e1:44:c7:da:15:15:88:b6:8a:ae:62:86:e3:5d:ee:0c:00:
         7b:3b:29:55:07:b2:06:21:6b:36:0d:dc:05:95:f1:9f:b9:9f:
         16:fe:69:3b:91:77:1e:a9:15:93:03:72:3b:b7:28:53:2f:d0:
         35:80:41:00:bf:7f:0e:4c:4a:59:2e:7e:be:7f:fd:aa:9e:25:
         f2:3a:8e:00:03:c2:94:cf:bf:10:92:6f:5c:bf:ab:46:53:94:
         77:4a:14:80:14:78:2a:f8:c6:9d:10:5e:7c:57:42:13:54:64:
         3e:1a:a6:ba:64:c3:7e:a7:b2:12:2f:0b:55:63:32:10:63:ac:
         4f:40:b0:fc:e4:0b:e7:56:25:d9:62:84:ba:76:f0:bd:f6:47:
         ee:a1:76:9f:a3:37:f4:8c:1d:ad:82:d8:2f:e0:5b:b1:b7:4e:
         f1:dd:56:47:1c:8b:d0:f7:c5:30:12:04:b6:12:ef:fb:34:78:
         a4:a7:a1:fc:c7:88:79:78:01:77:d5:8e:49:4c:4d:16:86:66:
         e4:6d:3d:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org