Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/323830343a366630303a3a2f33322d3336203d3e20323730363332.roa
File:                     323830343a366630303a3a2f33322d3336203d3e20323730363332.roa (raw, json)
Hash identifier:          tHZttDQ2Yq4eaoPekvWzAVolWm3a9l9uMLJca5wmw2Q=
Subject key identifier:   AE:97:3F:3B:52:00:1C:5E:14:AB:5E:B2:45:28:E9:EA:2B:15:71:E9
Certificate issuer:       /CN=09130D1C7615C38FDA09ACEF70984B36E81C6C91
Certificate serial:       6864BBF043D06C272995A8D0BD279A3131DF6BA9
Authority key identifier: 09:13:0D:1C:76:15:C3:8F:DA:09:AC:EF:70:98:4B:36:E8:1C:6C:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09130D1C7615C38FDA09ACEF70984B36E81C6C91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/323830343a366630303a3a2f33322d3336203d3e20323730363332.roa
Signing time:             Thu 02 Dec 2021 13:23:46 +0000
ROA not before:           Thu 02 Dec 2021 13:18:46 +0000
ROA not after:            Thu 01 Dec 2022 13:23:46 +0000
asID:                     270632
IP address blocks:        2804:6f00::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:64:bb:f0:43:d0:6c:27:29:95:a8:d0:bd:27:9a:31:31:df:6b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09130D1C7615C38FDA09ACEF70984B36E81C6C91
        Validity
            Not Before: Dec  2 13:18:46 2021 GMT
            Not After : Dec  1 13:23:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7e:96:09:69:3c:40:7c:07:62:b1:87:ca:22:
                    e5:0b:6d:e0:1c:16:31:cf:5d:8e:1c:d9:6e:24:c2:
                    96:48:48:a5:9e:b3:1e:19:d2:cf:d8:2a:bb:f7:0d:
                    e7:17:be:cf:03:0b:df:94:26:58:c1:79:6a:6f:b0:
                    d4:f9:df:3b:4e:06:e9:1f:b4:d1:e3:18:57:3b:5a:
                    b5:d1:2f:fc:d2:ba:4b:8d:ff:9e:f1:a1:2d:e5:d5:
                    f6:10:d8:e2:4b:68:09:81:b6:7d:12:40:71:b7:3f:
                    fa:45:91:a2:cb:73:00:26:f0:dc:79:89:f0:fe:1b:
                    1e:7c:d2:8c:24:ee:dc:70:56:eb:04:8e:2f:93:5d:
                    10:23:0e:e6:75:ee:f8:70:65:30:d5:7c:66:d4:3a:
                    4c:54:15:bc:3c:aa:36:18:49:21:6b:60:dd:8a:b5:
                    c7:72:ec:bf:91:4d:8f:3f:1c:57:ef:32:b0:89:8b:
                    9d:0c:b0:a7:2a:85:36:fa:e0:e5:f1:ed:00:eb:28:
                    65:72:e8:3e:bf:4b:39:8d:62:20:c5:d0:5c:7d:79:
                    8f:37:5d:66:a4:27:f9:b0:de:4f:bc:5f:09:7c:8d:
                    10:23:ad:80:ae:6b:d4:ae:21:9a:a8:49:cb:67:df:
                    77:8d:0a:81:fd:ec:bb:68:ce:b6:ac:cb:06:d9:e2:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:97:3F:3B:52:00:1C:5E:14:AB:5E:B2:45:28:E9:EA:2B:15:71:E9
            X509v3 Authority Key Identifier:
                keyid:09:13:0D:1C:76:15:C3:8F:DA:09:AC:EF:70:98:4B:36:E8:1C:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/09130D1C7615C38FDA09ACEF70984B36E81C6C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09130D1C7615C38FDA09ACEF70984B36E81C6C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/323830343a366630303a3a2f33322d3336203d3e20323730363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:08:1a:26:89:de:c2:13:fc:2f:23:81:fc:6a:2b:67:33:7d:
         e3:4c:cd:c6:f7:63:c4:2b:bb:36:fc:bf:ec:cb:87:a3:3f:6f:
         8e:fd:cf:37:fd:ad:fd:36:f3:33:7a:b6:3a:27:04:c7:42:bb:
         b0:30:a6:89:19:02:bb:4a:18:7e:5b:46:c9:1a:2a:c7:82:e0:
         e5:97:87:d6:cb:fd:ba:db:db:c5:ae:6b:91:58:e7:98:df:d1:
         70:4b:04:de:c5:28:59:16:36:3a:7d:4a:20:b9:5a:4f:79:8c:
         13:b2:b8:65:e9:2a:e3:b0:e1:7a:71:30:2d:a5:76:6f:3e:00:
         06:e6:1a:13:47:ac:91:33:3a:82:68:fb:35:f5:e0:3e:be:5b:
         6a:d7:29:ec:e8:20:f3:75:42:97:40:e3:86:86:e4:00:d4:8c:
         5a:31:20:c8:f9:c2:0f:8a:52:da:4e:e0:58:f3:ab:0e:35:34:
         d2:81:f6:eb:c4:5e:6b:cd:db:1f:c2:66:76:b9:20:35:d6:35:
         82:87:f1:81:ae:45:2b:b4:5c:09:db:5d:9d:85:ab:69:88:e0:
         5d:e4:f3:a3:63:8a:14:18:8a:9e:de:28:7b:13:c5:41:06:b7:
         07:1f:7d:f2:a3:f9:2f:24:e7:65:d3:71:a8:8c:6e:cc:a4:08:
         0e:2e:95:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org