Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a383030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a383030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          ofRk3k9d91JrENH1ejIMpoGhp1AocfpnsPAuo9LlJkI=
Subject key identifier:   AC:59:8B:44:1A:EE:DA:18:DA:7E:99:25:24:A1:46:1D:67:92:00:9C
Certificate issuer:       /CN=B181A11248DDCC042E5C8D4FBA61452301CB2829
Certificate serial:       5C94744AED7BA1C6A102CC4F22C249B657850F4A
Authority key identifier: B1:81:A1:12:48:DD:CC:04:2E:5C:8D:4F:BA:61:45:23:01:CB:28:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a383030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 13 Sep 2023 12:16:51 +0000
ROA not before:           Wed 13 Sep 2023 12:11:51 +0000
ROA not after:            Wed 11 Sep 2024 12:16:51 +0000
asID:                     265429
IP address blocks:        2804:33fc:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:94:74:4a:ed:7b:a1:c6:a1:02:cc:4f:22:c2:49:b6:57:85:0f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B181A11248DDCC042E5C8D4FBA61452301CB2829
        Validity
            Not Before: Sep 13 12:11:51 2023 GMT
            Not After : Sep 11 12:16:51 2024 GMT
        Subject: CN=3082010A02820101009D2FA1448F178154EC6AEC64253C2452EAC061EE1FFC39DD23C896D563E4E93EFD7A5E04F95BB30371C5B21051EAFFB861A616F75A5092C43968D2E63DF2D405A01E7EF0F2917BAB2D0DC5ECF022008E9320B0FF488D97979195CFDED8FAF94862EA4B8B87D122CB962F65990A87B446C7B792277FEE64BC78CD58109656E94317C6E6BA8210379E1603E652CE96EE96F6CE42F1FD2CC8D247D21DE8C5B6603CE4181E0A0A9F9149E3D6EDDF09543317B1563D2FFA7135A0D57FD172857F5C5AC14109304FB32665D0D5F7D9139737CE3B7B49D73F192979D89B15A050A8F965D1FD3B5DB8492A032CA301B3F18C35BDCB656166968937B3B99C9010BB6185B10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2f:a1:44:8f:17:81:54:ec:6a:ec:64:25:3c:
                    24:52:ea:c0:61:ee:1f:fc:39:dd:23:c8:96:d5:63:
                    e4:e9:3e:fd:7a:5e:04:f9:5b:b3:03:71:c5:b2:10:
                    51:ea:ff:b8:61:a6:16:f7:5a:50:92:c4:39:68:d2:
                    e6:3d:f2:d4:05:a0:1e:7e:f0:f2:91:7b:ab:2d:0d:
                    c5:ec:f0:22:00:8e:93:20:b0:ff:48:8d:97:97:91:
                    95:cf:de:d8:fa:f9:48:62:ea:4b:8b:87:d1:22:cb:
                    96:2f:65:99:0a:87:b4:46:c7:b7:92:27:7f:ee:64:
                    bc:78:cd:58:10:96:56:e9:43:17:c6:e6:ba:82:10:
                    37:9e:16:03:e6:52:ce:96:ee:96:f6:ce:42:f1:fd:
                    2c:c8:d2:47:d2:1d:e8:c5:b6:60:3c:e4:18:1e:0a:
                    0a:9f:91:49:e3:d6:ed:df:09:54:33:17:b1:56:3d:
                    2f:fa:71:35:a0:d5:7f:d1:72:85:7f:5c:5a:c1:41:
                    09:30:4f:b3:26:65:d0:d5:f7:d9:13:97:37:ce:3b:
                    7b:49:d7:3f:19:29:79:d8:9b:15:a0:50:a8:f9:65:
                    d1:fd:3b:5d:b8:49:2a:03:2c:a3:01:b3:f1:8c:35:
                    bd:cb:65:61:66:96:89:37:b3:b9:9c:90:10:bb:61:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:59:8B:44:1A:EE:DA:18:DA:7E:99:25:24:A1:46:1D:67:92:00:9C
            X509v3 Authority Key Identifier:
                keyid:B1:81:A1:12:48:DD:CC:04:2E:5C:8D:4F:BA:61:45:23:01:CB:28:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a383030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9c:34:ef:3f:2a:78:85:03:c9:e2:11:e4:45:31:9c:f7:f7:5b:
         9c:07:41:d7:28:19:50:57:ae:de:cc:44:40:8e:a4:56:7e:f5:
         bb:f2:04:79:b3:76:b5:32:d7:88:1c:2f:e4:d7:38:2a:c7:57:
         b0:4d:53:73:e2:a5:dc:44:e3:4b:ad:e1:6a:d6:d8:ed:bd:49:
         63:26:f9:75:a0:6c:31:ad:4f:5b:be:54:1b:59:c9:e9:7b:e1:
         94:10:e7:23:59:2e:b6:77:a8:89:3e:30:62:96:a0:d3:ef:ee:
         e4:ea:e0:c0:2a:a0:c6:72:6a:66:eb:39:44:57:52:fc:8e:38:
         1a:29:ff:a2:e4:ef:48:b7:36:13:d6:8b:b6:17:0b:a4:e1:93:
         81:db:e2:2f:39:24:5f:07:5f:96:18:e7:fb:cb:e5:8a:19:29:
         b3:dd:9d:2d:e9:f7:7b:91:fb:30:ac:ea:85:60:3a:c4:42:e4:
         0d:30:97:15:8c:b7:da:75:36:15:95:60:46:aa:55:b6:07:d0:
         75:6f:41:5a:21:b5:93:9f:02:6b:02:06:64:06:cf:7b:ab:c0:
         03:8e:8c:6d:15:d4:24:6f:1d:d0:29:96:e2:45:60:01:23:ab:
         e6:1d:f9:58:5a:84:ab:51:30:53:6f:a2:ca:46:97:95:85:8e:
         53:44:e2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org