Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a633030303a3a2f33352d3335203d3e203532393332.roa
File:                     323830343a323862303a633030303a3a2f33352d3335203d3e203532393332.roa (raw, json)
Hash identifier:          zXW7rtrlBEEuu1QF/uf+C4NBB9z6FVZ+lp95+CviaLI=
Subject key identifier:   B8:76:C4:2D:EB:6C:45:49:60:DC:FA:68:62:E0:99:20:44:36:9B:06
Certificate issuer:       /CN=D2BF9E80DF73E948339BCB21CA261EC445C64E1C
Certificate serial:       39F8036B9EEB29C9E69CB2A5D11225609FAB4700
Authority key identifier: D2:BF:9E:80:DF:73:E9:48:33:9B:CB:21:CA:26:1E:C4:45:C6:4E:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2BF9E80DF73E948339BCB21CA261EC445C64E1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a633030303a3a2f33352d3335203d3e203532393332.roa
Signing time:             Wed 06 Dec 2023 14:00:01 +0000
ROA not before:           Wed 06 Dec 2023 13:55:01 +0000
ROA not after:            Wed 04 Dec 2024 14:00:01 +0000
asID:                     52932
IP address blocks:        2804:28b0:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f8:03:6b:9e:eb:29:c9:e6:9c:b2:a5:d1:12:25:60:9f:ab:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2BF9E80DF73E948339BCB21CA261EC445C64E1C
        Validity
            Not Before: Dec  6 13:55:01 2023 GMT
            Not After : Dec  4 14:00:01 2024 GMT
        Subject: CN=B876C42DEB6C454960DCFA6862E0992044369B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:8a:3a:2c:b5:eb:a9:88:42:c2:f0:47:05:
                    14:f2:7e:22:ec:b0:2c:2f:f7:59:42:c7:3a:99:92:
                    18:04:3d:7d:24:6f:7b:ea:f3:df:68:00:61:e7:34:
                    e9:97:44:67:d2:fc:90:bd:1c:38:15:b8:b5:23:f8:
                    af:0a:ff:bb:34:cc:a9:9f:1b:72:c8:36:f3:13:67:
                    66:ba:4c:0a:24:80:39:de:db:8d:34:a8:50:a5:94:
                    dc:0d:15:b2:8a:bf:19:2f:10:1f:9c:a3:13:bb:87:
                    6c:0e:30:55:88:46:ac:cb:d5:3d:cc:3a:13:9c:2d:
                    b6:e3:77:6e:e3:aa:b2:b8:76:7d:c6:59:c3:c6:64:
                    f7:b6:ad:58:14:12:ff:55:49:ce:c2:0a:c5:33:c5:
                    1c:0b:55:90:ce:87:f2:05:a8:7b:df:e6:30:cc:fc:
                    31:05:97:09:57:87:f7:ba:42:76:d5:01:da:c7:56:
                    e4:26:b3:be:48:26:01:81:40:24:dc:6b:85:3e:00:
                    dd:55:c0:43:ed:47:28:d0:38:fc:67:ed:03:98:f1:
                    07:78:0f:cf:f4:a8:fe:2e:03:07:d3:c5:df:55:28:
                    4f:3c:49:7e:28:42:f1:9f:20:c3:f3:f7:2f:74:ef:
                    06:f3:7a:51:40:d5:f5:22:51:4c:64:c5:37:2c:ea:
                    ed:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:76:C4:2D:EB:6C:45:49:60:DC:FA:68:62:E0:99:20:44:36:9B:06
            X509v3 Authority Key Identifier:
                keyid:D2:BF:9E:80:DF:73:E9:48:33:9B:CB:21:CA:26:1E:C4:45:C6:4E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/D2BF9E80DF73E948339BCB21CA261EC445C64E1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2BF9E80DF73E948339BCB21CA261EC445C64E1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a633030303a3a2f33352d3335203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         af:87:a9:47:a3:ac:6c:a3:10:21:bf:23:d1:15:25:82:f5:07:
         eb:bb:08:4a:73:60:14:2d:bc:1d:1c:42:d4:35:81:6d:16:2d:
         92:0e:7b:8a:bc:2c:42:97:94:d0:3a:58:97:5c:24:29:90:bb:
         2c:89:1f:c8:dc:5c:cf:56:99:0b:67:d2:20:8a:85:b6:37:e5:
         56:6e:84:e4:ee:f8:fa:94:63:d7:51:03:c0:c3:a9:3c:47:2a:
         cc:52:e0:7d:9a:be:e8:93:36:7f:47:53:b8:e5:9b:61:2c:bb:
         3a:eb:d6:91:fe:62:db:5b:ad:ad:5f:45:8b:53:47:c4:06:03:
         e6:a2:ad:73:3b:05:f6:77:f9:16:7f:8f:e7:07:b7:76:01:1b:
         ec:f7:e2:1d:5c:a3:50:20:7d:4e:e8:4e:dd:0e:83:53:f8:cf:
         72:90:ed:8a:7b:b0:b8:c3:56:0b:ff:7a:7b:59:7c:b8:a4:77:
         b8:f5:e9:af:81:76:de:18:da:3c:81:24:a0:f9:23:72:cd:a3:
         db:8c:04:4e:0d:4a:c6:46:99:fe:79:9b:cd:0a:3e:f0:20:34:
         cc:de:37:49:24:25:e3:0a:91:70:f0:4e:77:0a:de:70:0f:a7:
         48:28:3e:e0:5f:38:cd:e9:51:9b:cf:34:c5:5c:54:47:cf:c5:
         d0:6e:14:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org