Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/323830343a363066633a3a2f33322d313238203d3e20323639323034.roa
File:                     323830343a363066633a3a2f33322d313238203d3e20323639323034.roa (raw, json)
Hash identifier:          hULv6588ENgOqtZZoi50rnnOnSvUnHglKLoK4b8Lp+c=
Subject key identifier:   59:7A:26:73:97:E6:DC:54:18:C7:E8:68:D9:02:FC:14:45:67:D7:D9
Certificate issuer:       /CN=AE055C4FC9B22471BB0C5F5968630BFE867715D2
Certificate serial:       598CF69B5D9A83F1AD821079FDECBC13F4D08946
Authority key identifier: AE:05:5C:4F:C9:B2:24:71:BB:0C:5F:59:68:63:0B:FE:86:77:15:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE055C4FC9B22471BB0C5F5968630BFE867715D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/323830343a363066633a3a2f33322d313238203d3e20323639323034.roa
Signing time:             Fri 06 Jan 2023 16:25:58 +0000
ROA not before:           Fri 06 Jan 2023 16:20:58 +0000
ROA not after:            Fri 05 Jan 2024 16:25:58 +0000
asID:                     269204
IP address blocks:        2804:60fc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8c:f6:9b:5d:9a:83:f1:ad:82:10:79:fd:ec:bc:13:f4:d0:89:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE055C4FC9B22471BB0C5F5968630BFE867715D2
        Validity
            Not Before: Jan  6 16:20:58 2023 GMT
            Not After : Jan  5 16:25:58 2024 GMT
        Subject: CN=597A267397E6DC5418C7E868D902FC144567D7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:be:80:c9:b2:fa:08:12:3c:10:0e:01:cc:
                    eb:74:be:d1:71:36:6d:7c:3e:04:4c:02:05:b9:f1:
                    dd:3b:4d:20:1a:1e:fc:8b:57:bc:a3:64:95:a9:d2:
                    2e:7f:0c:22:bf:a7:e4:75:7b:d7:66:9d:b8:9e:9b:
                    3d:01:c8:34:d9:14:d4:bf:2b:ec:0d:77:11:d0:91:
                    a2:89:66:ce:2b:1b:99:12:b8:18:dc:42:cc:b9:fa:
                    20:13:06:a0:fe:a9:26:1f:26:b4:1c:db:8c:4e:78:
                    16:96:09:c7:24:f5:57:b4:55:00:bf:76:14:c5:7a:
                    da:7f:ab:37:eb:46:92:dc:ec:ef:cd:42:e1:55:85:
                    33:6f:13:bc:fa:70:0a:a8:4c:d4:7c:c3:45:28:df:
                    ba:60:96:72:0c:17:9f:81:fa:83:20:35:9f:6e:ce:
                    23:47:2b:2e:f4:44:fa:5e:09:e4:c1:8c:ea:07:5f:
                    88:f8:07:84:f8:0b:0f:b8:fc:8a:5a:2d:0e:53:84:
                    30:bd:cc:07:d1:de:be:8f:96:d4:24:3f:61:c0:0a:
                    b5:56:2b:92:9b:9a:58:67:93:32:9c:3a:21:2c:2b:
                    3a:75:20:22:32:7b:17:ed:e9:67:97:c0:bf:e0:29:
                    c6:b9:26:06:ce:16:64:05:60:24:45:ff:ea:a1:4d:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7A:26:73:97:E6:DC:54:18:C7:E8:68:D9:02:FC:14:45:67:D7:D9
            X509v3 Authority Key Identifier:
                keyid:AE:05:5C:4F:C9:B2:24:71:BB:0C:5F:59:68:63:0B:FE:86:77:15:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/AE055C4FC9B22471BB0C5F5968630BFE867715D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE055C4FC9B22471BB0C5F5968630BFE867715D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/323830343a363066633a3a2f33322d313238203d3e20323639323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:a8:b8:c5:aa:96:49:fe:72:78:e9:e1:a9:25:25:7f:b8:80:
         1c:7f:6b:3b:f8:3c:07:84:cc:71:30:5a:83:5b:9e:4b:1e:a3:
         aa:04:e9:6f:48:15:b3:58:f7:72:7a:88:6b:d2:1b:79:2d:4c:
         fe:41:ed:52:71:3c:5a:84:f7:a6:6f:1d:27:f3:89:91:bc:97:
         c7:c4:23:df:a2:d4:3c:eb:b4:7f:8a:71:0a:1b:f7:2b:31:af:
         5d:32:ed:3a:05:50:1c:c5:46:8a:55:bb:dc:b4:86:6f:75:33:
         d8:40:bd:53:c6:83:7b:41:a7:f8:c3:cb:48:91:9d:5a:da:74:
         7b:c5:ba:80:74:a4:44:e9:58:f1:06:a6:b0:97:b8:4f:e3:65:
         28:98:9a:63:39:10:7f:08:7d:a9:0f:0f:94:55:93:02:ea:34:
         34:71:75:bf:a7:0b:1d:24:5c:35:42:6a:03:d1:85:c9:67:5c:
         75:12:8c:3b:52:8a:18:de:eb:ed:75:fa:34:55:82:85:1b:61:
         09:0e:a8:1d:76:96:bd:86:af:44:53:87:fb:32:1e:19:01:cf:
         a2:d6:11:a5:b4:d4:b7:c4:e4:14:8d:bc:bd:a7:80:f3:09:93:
         95:68:81:e0:ee:17:95:f6:4f:e1:f1:6a:db:a0:04:7f:8e:95:
         5f:51:82:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org