Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa
File:                     323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa (raw, json)
Hash identifier:          XQF/qo5b3Ysrg6LWyCgqCFTR4FZrqGu3sp62Wx5CoFs=
Subject key identifier:   15:EC:CF:66:3E:84:83:62:EC:81:26:C3:C7:CB:68:89:DE:E5:4F:A4
Certificate issuer:       /CN=6E1445AA0189887B340B440C514D8045AAAD400F
Certificate serial:       68D1B4CEA4154A95E17CDEDBBFAF0E7F23EADD8E
Authority key identifier: 6E:14:45:AA:01:89:88:7B:34:0B:44:0C:51:4D:80:45:AA:AD:40:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1445AA0189887B340B440C514D8045AAAD400F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa
Signing time:             Fri 01 Dec 2023 15:00:00 +0000
ROA not before:           Fri 01 Dec 2023 14:55:00 +0000
ROA not after:            Fri 29 Nov 2024 15:00:00 +0000
asID:                     268137
IP address blocks:        2804:5894:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d1:b4:ce:a4:15:4a:95:e1:7c:de:db:bf:af:0e:7f:23:ea:dd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1445AA0189887B340B440C514D8045AAAD400F
        Validity
            Not Before: Dec  1 14:55:00 2023 GMT
            Not After : Nov 29 15:00:00 2024 GMT
        Subject: CN=15ECCF663E848362EC8126C3C7CB6889DEE54FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:54:15:37:f3:fe:f1:6a:fb:8e:09:17:93:
                    77:9e:c1:49:d2:88:54:61:7d:43:05:08:13:9c:43:
                    5a:5c:21:81:c6:94:02:f3:5d:af:f4:73:dd:58:aa:
                    57:08:57:91:3f:02:3d:91:85:71:cc:f4:c7:54:76:
                    1f:50:25:dc:20:2e:d0:0a:c6:0b:60:36:a9:af:89:
                    73:7c:b0:f6:b3:2f:93:51:0c:b6:d0:46:b3:6e:31:
                    1d:c0:f1:fe:b5:7f:0e:6a:ec:03:6b:7c:8a:40:b8:
                    31:8e:e9:c0:71:55:15:7b:2a:6f:19:1a:8c:43:62:
                    be:bf:85:ba:12:98:97:e9:3a:96:3f:8c:19:34:1e:
                    6c:b6:b8:d5:69:3d:f1:ab:5d:09:46:64:65:8e:57:
                    c9:c9:e1:28:f6:a8:49:92:f1:15:88:90:35:2a:1f:
                    2a:f0:59:8d:f2:c9:94:51:bf:37:5c:b3:f8:a6:44:
                    da:0b:cc:e3:7a:82:f2:82:9c:5e:3d:89:aa:e2:b4:
                    d1:52:dd:7e:90:92:32:43:31:e9:3c:19:d1:f7:5f:
                    a2:bf:6c:2b:73:73:6f:22:0a:ef:ce:d2:cc:ed:21:
                    49:1d:74:6b:f4:38:63:4c:f8:a8:53:b2:57:7e:8d:
                    af:07:02:a8:14:5a:c4:44:8b:75:93:7d:43:0a:f7:
                    f9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EC:CF:66:3E:84:83:62:EC:81:26:C3:C7:CB:68:89:DE:E5:4F:A4
            X509v3 Authority Key Identifier:
                keyid:6E:14:45:AA:01:89:88:7B:34:0B:44:0C:51:4D:80:45:AA:AD:40:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/6E1445AA0189887B340B440C514D8045AAAD400F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1445AA0189887B340B440C514D8045AAAD400F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5894:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         90:53:bc:36:26:59:f5:b4:1d:57:1f:1e:64:f2:28:33:cf:22:
         37:e7:38:a5:ad:14:3d:9b:5e:61:5c:83:ab:b1:24:45:97:7d:
         bb:0b:b9:f8:79:3d:83:ff:c9:18:c5:df:8c:4f:12:2a:71:e9:
         1a:55:07:10:50:20:b2:78:27:8a:e8:98:17:53:4c:4a:4a:f2:
         0d:3c:a4:c0:07:69:d3:32:1c:ba:63:8d:a8:56:70:fe:74:30:
         3e:b3:0d:a3:e0:ee:9f:b5:c1:df:7c:68:2b:71:3f:39:21:10:
         7c:f2:2e:2d:4c:52:b8:4a:30:25:15:c1:d9:c8:a0:81:99:b7:
         4e:15:0d:54:1d:bc:a6:bc:8c:9f:0f:d2:cd:d0:87:dc:a9:64:
         f3:24:ec:13:6e:31:7c:2a:34:27:85:84:22:e5:6a:5b:43:6f:
         5b:ca:31:13:da:42:38:d5:48:36:56:72:bd:7d:1f:45:d9:14:
         94:43:3f:00:69:9c:f4:39:32:0b:6c:43:97:4e:3e:11:3c:ac:
         25:88:77:54:84:8c:a1:9d:35:b9:f1:5a:b9:d1:0b:43:2a:0e:
         78:63:81:c0:a3:0b:f8:e7:ef:5e:f0:49:87:da:0d:62:b8:23:
         90:92:92:ad:c3:7d:a5:ce:de:bf:49:27:f5:77:d9:b0:4f:fe:
         4c:a1:b1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org