Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa
File:                     323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa (raw, json)
Hash identifier:          08OUPdMVqb3i9DxTEGWf3YTIwsK17DSkUsd1XNJ4O64=
Subject key identifier:   42:F8:23:28:47:D5:21:FA:6D:89:1E:6E:D5:E9:24:70:77:B9:BF:21
Certificate issuer:       /CN=6E1445AA0189887B340B440C514D8045AAAD400F
Certificate serial:       0EB651DF08080394A05052F99A21DB9816DEAE6A
Authority key identifier: 6E:14:45:AA:01:89:88:7B:34:0B:44:0C:51:4D:80:45:AA:AD:40:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1445AA0189887B340B440C514D8045AAAD400F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa
Signing time:             Fri 01 Dec 2023 16:00:00 +0000
ROA not before:           Fri 01 Dec 2023 15:55:00 +0000
ROA not after:            Fri 29 Nov 2024 16:00:00 +0000
asID:                     268137
IP address blocks:        2804:5894:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b6:51:df:08:08:03:94:a0:50:52:f9:9a:21:db:98:16:de:ae:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1445AA0189887B340B440C514D8045AAAD400F
        Validity
            Not Before: Dec  1 15:55:00 2023 GMT
            Not After : Nov 29 16:00:00 2024 GMT
        Subject: CN=42F8232847D521FA6D891E6ED5E9247077B9BF21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:11:f9:58:e6:f2:05:0f:1a:ef:83:2e:96:54:
                    29:e3:c7:9a:69:7a:81:7e:4e:24:71:9b:fa:77:c0:
                    8d:b1:a5:f2:c7:14:74:3a:1f:60:17:12:61:76:65:
                    46:c7:73:74:66:82:cb:c5:22:ed:e5:75:4b:a5:c8:
                    92:92:60:f2:fd:4e:28:95:2c:ad:47:78:5d:51:c3:
                    53:8d:64:45:86:61:ed:27:46:c8:07:08:d1:d2:8c:
                    f7:40:24:91:80:b4:ae:76:66:09:1e:f8:09:10:60:
                    5d:37:5d:36:10:53:f3:c2:50:cf:92:4d:74:71:80:
                    99:b0:b8:5f:5e:b9:bd:c0:df:d0:83:2b:10:e1:5f:
                    1b:dc:08:a3:24:51:85:cb:1a:56:63:f1:72:2d:fc:
                    4e:0d:24:bb:36:0e:a4:a8:e6:b7:95:aa:4f:6f:d4:
                    b7:21:e9:5a:c5:4f:65:77:6b:98:88:13:d9:b9:c0:
                    e8:5c:ed:db:af:9b:59:2a:dc:74:db:4b:ac:18:cf:
                    d7:9c:5c:0a:38:ca:24:5c:19:d7:95:85:29:67:1b:
                    c1:0d:a8:2c:31:16:60:f8:48:f7:2a:65:77:58:6b:
                    54:c2:d2:0f:90:66:b9:11:8c:4f:b3:b8:2a:ca:c9:
                    d9:58:54:37:64:55:c6:72:1b:4d:3f:24:0c:e9:c2:
                    e5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F8:23:28:47:D5:21:FA:6D:89:1E:6E:D5:E9:24:70:77:B9:BF:21
            X509v3 Authority Key Identifier:
                keyid:6E:14:45:AA:01:89:88:7B:34:0B:44:0C:51:4D:80:45:AA:AD:40:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/6E1445AA0189887B340B440C514D8045AAAD400F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1445AA0189887B340B440C514D8045AAAD400F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5894:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b5:0b:98:62:15:c8:72:df:8e:53:11:a3:5e:7b:07:37:5f:73:
         a2:68:3c:cb:53:20:06:f5:24:44:bf:07:c1:0f:a6:59:6e:83:
         12:e2:d3:a6:05:c7:a1:3b:15:6c:ea:2a:19:06:4c:35:b3:11:
         06:18:f3:8e:f8:0a:21:9e:6a:35:cb:ea:93:fc:4f:44:4f:43:
         63:05:6e:94:4e:c0:69:9d:d2:42:62:78:27:9d:e6:e1:71:f0:
         d6:ac:5f:01:fe:7a:4d:80:13:e8:c3:d2:4f:53:c3:15:6e:0d:
         0c:79:d4:67:5a:15:76:e0:9a:29:e1:0d:af:99:84:81:56:4f:
         05:c1:8e:2f:39:b2:38:89:f1:31:b3:88:00:64:2f:ff:29:43:
         5b:27:e4:a8:6c:8c:c8:5b:c0:8b:7d:cf:35:06:78:6a:0c:87:
         d4:62:b4:01:a5:7f:66:aa:25:7e:ca:ab:8b:0d:0c:df:d2:9c:
         ab:d7:01:e2:8e:b7:ca:91:80:31:68:40:76:4f:3b:64:f1:e6:
         c8:fb:e7:9a:79:6e:2b:84:fd:a1:88:7d:43:83:06:c3:bb:44:
         7a:02:83:f6:77:13:53:f7:2b:90:12:c0:42:0a:f6:61:7e:ef:
         1d:fc:0a:83:e0:69:af:c8:44:67:84:3e:a7:bd:89:db:19:36:
         27:16:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org