Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a383030303a3a2f33342d3334203d3e20323731303138.roa
File:                     323830343a373530343a383030303a3a2f33342d3334203d3e20323731303138.roa (raw, json)
Hash identifier:          OiJo0fG3GSnPjc0zm9xttRGJLcQ7Z7KvKXXHsANjcHo=
Subject key identifier:   A0:91:2E:17:76:9B:E2:83:01:A4:66:B7:D2:43:50:01:36:F4:8E:7C
Certificate issuer:       /CN=AA607E5E454F44A3D5284D9663DCB35738F2672D
Certificate serial:       4BD64A71ADF4628DBE5C9B4A57D1D427766A7C04
Authority key identifier: AA:60:7E:5E:45:4F:44:A3:D5:28:4D:96:63:DC:B3:57:38:F2:67:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA607E5E454F44A3D5284D9663DCB35738F2672D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a383030303a3a2f33342d3334203d3e20323731303138.roa
Signing time:             Thu 23 Feb 2023 14:40:27 +0000
ROA not before:           Thu 23 Feb 2023 14:35:27 +0000
ROA not after:            Thu 22 Feb 2024 14:40:27 +0000
asID:                     271018
IP address blocks:        2804:7504:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d6:4a:71:ad:f4:62:8d:be:5c:9b:4a:57:d1:d4:27:76:6a:7c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA607E5E454F44A3D5284D9663DCB35738F2672D
        Validity
            Not Before: Feb 23 14:35:27 2023 GMT
            Not After : Feb 22 14:40:27 2024 GMT
        Subject: CN=A0912E17769BE28301A466B7D243500136F48E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:75:53:c5:c8:a7:4c:04:85:5c:34:73:12:
                    08:81:1b:36:9b:ca:d7:14:62:50:5f:ad:70:1d:96:
                    4c:44:67:31:54:09:22:d0:bf:4f:17:d3:15:d4:22:
                    69:6a:bf:27:4e:ee:7c:fe:ae:53:39:ea:38:f4:08:
                    16:e7:6d:77:0b:45:5b:f4:58:98:48:44:65:9f:76:
                    40:5b:de:95:4c:4b:d6:a9:f2:4b:97:b0:12:ba:20:
                    70:bc:8c:21:97:a4:4f:64:88:43:2a:51:b4:07:78:
                    c6:a8:66:62:d6:9f:02:65:d6:e8:8f:3b:33:38:67:
                    8f:23:6b:34:be:46:58:de:14:c8:52:32:09:4c:af:
                    4e:3c:ba:53:3f:51:0c:0d:d7:91:a2:65:6c:91:96:
                    fc:43:8f:d0:3d:65:06:97:c8:a2:a9:73:d5:a3:8d:
                    f6:b5:5c:df:cc:65:0c:e3:48:65:f9:72:e4:30:eb:
                    f9:18:b1:6d:27:cc:bb:92:2e:45:9a:be:58:68:c9:
                    7c:7e:1c:3e:c6:cb:e4:18:bf:58:38:5a:b9:35:b7:
                    13:91:1d:2b:6e:4c:3b:ec:cc:5a:a6:dc:14:37:f5:
                    d5:b2:cc:93:cb:54:8a:0b:03:ff:31:7f:4d:63:91:
                    f7:30:f6:b0:87:ed:0a:ff:ce:89:77:88:b4:02:f4:
                    cb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:91:2E:17:76:9B:E2:83:01:A4:66:B7:D2:43:50:01:36:F4:8E:7C
            X509v3 Authority Key Identifier:
                keyid:AA:60:7E:5E:45:4F:44:A3:D5:28:4D:96:63:DC:B3:57:38:F2:67:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/AA607E5E454F44A3D5284D9663DCB35738F2672D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA607E5E454F44A3D5284D9663DCB35738F2672D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a383030303a3a2f33342d3334203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7504:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a5:a9:51:85:31:37:ff:b9:60:79:65:a6:88:d1:5a:d7:76:53:
         d6:53:c3:68:77:d0:4d:91:0b:41:41:16:cf:dd:87:08:9c:25:
         b2:0e:bb:05:8a:73:7a:c4:e7:fe:e5:f3:ba:13:67:42:f7:0d:
         92:e8:8e:36:14:48:d4:4b:50:62:93:b9:a5:a9:f3:b7:a9:79:
         5c:3b:c7:82:95:55:56:ab:51:61:e4:0e:a0:f1:f9:58:c1:d4:
         f6:fe:c0:98:af:3c:60:99:6e:24:ef:30:8e:f2:c4:41:54:16:
         3b:d9:5c:3d:97:ea:5b:5a:28:85:db:fa:be:6c:de:ca:f2:5d:
         f6:5c:6b:e2:e6:3d:37:67:f4:06:9b:0b:fb:13:be:7f:28:d6:
         fc:9c:d7:c3:75:ce:55:c4:07:e7:cd:c2:13:e5:30:8c:c9:3a:
         d9:4e:f2:53:bc:8f:a1:eb:a0:63:aa:aa:1f:a0:1c:9e:00:a0:
         9a:2b:5e:32:af:2b:85:57:b0:7b:1d:ee:a1:2a:b8:b9:a8:6d:
         f9:bc:93:81:e3:99:9e:c5:ca:90:7d:04:0c:3c:f8:44:28:1d:
         c5:31:d2:cb:16:bd:3e:8e:a5:2f:7f:4c:a6:27:2b:90:18:d7:
         1b:61:6d:fc:50:7a:f4:c3:d4:20:f9:33:ef:c7:8f:22:ad:b5:
         31:b2:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org