Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/323830343a6364633a3a2f33322d3438203d3e203532353635.roa
File:                     323830343a6364633a3a2f33322d3438203d3e203532353635.roa (raw, json)
Hash identifier:          oh53jCJWioeAjZfgBcKVGaGEeh/Ezqsrqp1QPElBpaY=
Subject key identifier:   D3:3B:96:2A:8E:10:C8:45:BF:D8:E9:FE:66:69:DC:19:F0:6C:7F:49
Certificate issuer:       /CN=6079C649A991E25158493789223D12CEE8A7D2FC
Certificate serial:       1241C01718397413CC663FE72CFE700D807E0CCD
Authority key identifier: 60:79:C6:49:A9:91:E2:51:58:49:37:89:22:3D:12:CE:E8:A7:D2:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6079C649A991E25158493789223D12CEE8A7D2FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/323830343a6364633a3a2f33322d3438203d3e203532353635.roa
Signing time:             Mon 09 Jan 2023 19:57:08 +0000
ROA not before:           Mon 09 Jan 2023 19:52:08 +0000
ROA not after:            Mon 08 Jan 2024 19:57:08 +0000
asID:                     52565
IP address blocks:        2804:cdc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:41:c0:17:18:39:74:13:cc:66:3f:e7:2c:fe:70:0d:80:7e:0c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6079C649A991E25158493789223D12CEE8A7D2FC
        Validity
            Not Before: Jan  9 19:52:08 2023 GMT
            Not After : Jan  8 19:57:08 2024 GMT
        Subject: CN=D33B962A8E10C845BFD8E9FE6669DC19F06C7F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:94:4a:5c:31:2c:1b:97:88:fe:c5:ab:b3:
                    53:9f:bc:40:9e:e9:dc:8d:4c:8f:61:f4:f0:e9:bf:
                    4c:00:7c:d7:a9:93:88:42:fe:ea:3a:73:44:7c:04:
                    01:ab:c3:f7:6f:af:ad:22:70:97:71:86:2f:26:cd:
                    72:c1:01:1a:fa:98:11:fa:62:58:e4:b8:b0:19:ac:
                    87:c9:6d:ac:a1:58:47:81:7f:18:1e:5f:14:30:07:
                    fa:76:0e:82:e3:22:34:ca:26:16:73:ee:aa:75:d2:
                    3f:9d:de:f0:7c:30:86:02:f7:12:b9:77:aa:47:c6:
                    a0:0d:50:57:1e:5a:68:bc:fc:09:25:79:65:c1:21:
                    16:29:b5:3a:ce:51:73:0f:a1:97:70:8f:58:c1:d3:
                    68:5b:c2:e7:22:6a:ca:da:fc:bb:c0:05:e0:21:c6:
                    b2:59:d8:97:6d:06:ce:72:e2:7b:a5:6d:4b:86:b2:
                    db:07:20:05:0e:1e:7c:b6:ca:d6:84:54:4e:39:14:
                    ff:55:63:67:e9:9a:2e:a9:74:8c:43:ff:21:21:36:
                    7d:79:78:4f:08:1e:fb:c4:e3:57:b8:6c:95:25:c4:
                    6c:43:39:4e:8b:cf:36:cb:bf:aa:9a:89:27:d4:eb:
                    c1:d1:8e:52:25:75:51:5a:4a:49:8d:fc:cf:31:3d:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3B:96:2A:8E:10:C8:45:BF:D8:E9:FE:66:69:DC:19:F0:6C:7F:49
            X509v3 Authority Key Identifier:
                keyid:60:79:C6:49:A9:91:E2:51:58:49:37:89:22:3D:12:CE:E8:A7:D2:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/6079C649A991E25158493789223D12CEE8A7D2FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6079C649A991E25158493789223D12CEE8A7D2FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/323830343a6364633a3a2f33322d3438203d3e203532353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:a9:bb:f4:b1:dd:1a:72:72:49:58:0f:eb:bc:d5:7f:29:22:
         bc:83:7a:d1:ea:92:52:26:34:56:4f:8d:3a:71:6f:25:76:5a:
         b2:8a:a2:be:56:c9:99:57:d2:2b:0c:31:34:7d:af:7e:a0:fe:
         99:20:16:ff:b1:fc:41:76:78:57:51:97:66:64:73:b3:17:18:
         8f:72:75:76:1d:92:b8:2d:19:78:6d:4a:f4:c6:19:e5:f6:3e:
         e6:03:f9:6e:03:d2:5c:87:34:42:3d:a3:8e:79:fa:e4:f7:82:
         fb:56:f2:91:3d:02:28:6a:1e:85:32:b1:9d:b5:43:ac:9a:5b:
         7a:71:d7:84:a9:8b:19:b4:6b:96:2d:59:4b:bd:90:75:50:35:
         ce:67:25:c0:5b:64:5d:ee:96:90:fb:2e:27:a3:2b:d2:9b:d0:
         7c:26:ac:ef:06:d1:92:c1:3e:26:4b:07:cf:22:de:f7:53:4c:
         47:99:af:fb:fd:a9:55:bf:9d:30:41:78:e4:7f:47:30:99:ce:
         2d:12:5b:ea:c1:cc:31:ed:0f:1f:c3:ff:65:cf:66:66:b6:d1:
         8e:c7:f0:7a:b8:f5:6f:c9:f5:8a:f5:46:73:37:02:d9:0f:19:
         f9:ce:e8:36:3b:0c:24:22:97:3a:87:ac:70:f8:44:64:2b:3b:
         f9:1b:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org