Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/323830343a363262633a3a2f33332d3333203d3e20323639333135.roa
File:                     323830343a363262633a3a2f33332d3333203d3e20323639333135.roa (raw, json)
Hash identifier:          iyBCGclMiBR3/L2+RPrum8zEpDdn4kfVpRxa9RQWqUA=
Subject key identifier:   C0:82:D9:DB:A7:7F:18:FE:2A:57:27:97:CD:D4:ED:6E:B0:44:1D:E4
Certificate issuer:       /CN=B7A998992696FF1723DF042964560BDF4E6F9722
Certificate serial:       6649D9CCEA302D3C85F65E82C1EB985AA08C4988
Authority key identifier: B7:A9:98:99:26:96:FF:17:23:DF:04:29:64:56:0B:DF:4E:6F:97:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A998992696FF1723DF042964560BDF4E6F9722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/323830343a363262633a3a2f33332d3333203d3e20323639333135.roa
Signing time:             Mon 05 Jun 2023 18:00:00 +0000
ROA not before:           Mon 05 Jun 2023 17:55:00 +0000
ROA not after:            Mon 03 Jun 2024 18:00:00 +0000
asID:                     269315
IP address blocks:        2804:62bc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:49:d9:cc:ea:30:2d:3c:85:f6:5e:82:c1:eb:98:5a:a0:8c:49:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A998992696FF1723DF042964560BDF4E6F9722
        Validity
            Not Before: Jun  5 17:55:00 2023 GMT
            Not After : Jun  3 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:0e:83:17:b7:78:22:c6:15:29:b3:78:d8:
                    ad:6d:83:1b:05:de:d4:8c:81:5d:be:73:3f:19:4f:
                    c4:06:31:7a:66:95:53:fa:38:7f:10:49:67:e0:52:
                    04:92:05:f8:9a:d8:3b:54:09:50:e6:be:a3:17:21:
                    0a:1c:59:f2:8b:09:73:b4:49:4d:7f:11:48:30:31:
                    ee:84:8a:a0:5c:e9:8f:b0:94:c0:a8:b3:18:23:0e:
                    2c:2e:c7:f2:f8:3d:51:3c:d0:f3:23:a0:78:a7:e0:
                    3f:96:ef:93:b4:35:2d:a2:3e:ff:45:0b:f0:88:9a:
                    b3:50:5d:c6:24:c9:d7:1b:d3:b9:5f:e3:6c:61:db:
                    1c:8c:da:7e:fc:92:55:95:2c:4f:5c:4c:66:7d:46:
                    16:c8:05:3f:2b:cd:e4:e9:9d:f3:14:8d:35:a1:c2:
                    ea:7b:8c:04:32:fb:ab:8b:a9:5f:43:12:7a:b2:4a:
                    e2:23:b7:75:0a:ce:49:86:36:21:f3:49:ff:11:13:
                    57:ca:45:36:90:c4:e1:9e:1b:0e:df:28:38:2c:e2:
                    49:fa:4b:01:49:89:85:35:e9:b4:90:af:6d:27:c6:
                    7d:22:3c:79:24:ff:56:16:0a:b7:09:9c:c5:f2:6f:
                    26:88:dd:81:9f:db:87:f6:68:3e:52:68:e4:54:25:
                    bd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:82:D9:DB:A7:7F:18:FE:2A:57:27:97:CD:D4:ED:6E:B0:44:1D:E4
            X509v3 Authority Key Identifier:
                keyid:B7:A9:98:99:26:96:FF:17:23:DF:04:29:64:56:0B:DF:4E:6F:97:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/B7A998992696FF1723DF042964560BDF4E6F9722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A998992696FF1723DF042964560BDF4E6F9722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/323830343a363262633a3a2f33332d3333203d3e20323639333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62bc::/33

    Signature Algorithm: sha256WithRSAEncryption
         cd:de:03:34:a9:a5:2f:55:03:81:0c:88:58:41:69:d4:15:51:
         2f:d7:ac:36:d7:b5:b9:73:4a:c1:cc:f4:64:9a:b1:0b:a8:1f:
         43:4d:e5:ec:6d:dd:30:9a:20:9d:72:5c:04:2d:ba:a7:9a:d1:
         d6:39:f6:38:d8:7a:55:cd:4d:94:e4:69:cc:96:60:2c:61:c3:
         30:4a:fd:2c:7b:32:5a:60:34:ce:40:29:5f:ca:16:49:46:b3:
         22:2f:94:81:d7:b7:1c:4c:fc:4d:d8:93:2b:5e:80:f2:57:e2:
         96:67:34:ce:18:aa:e5:09:45:a0:d3:12:b4:d9:69:59:83:3d:
         98:20:27:15:5c:b7:1d:09:9e:73:80:19:ff:80:a9:7c:52:ee:
         68:d7:ca:b2:3a:d6:65:93:99:9b:ef:21:6f:f6:85:c4:16:97:
         c6:0a:17:bc:c6:b8:e3:61:8c:0f:45:f0:9e:b3:f3:48:02:8b:
         b2:8d:35:ef:b6:0d:91:a5:6d:da:11:f3:3f:6c:12:ab:5a:a8:
         41:2b:3a:fb:5c:62:c6:cd:53:f0:00:48:16:f6:d9:6b:98:d3:
         ea:da:30:af:f6:cd:a0:eb:63:15:e8:6d:eb:56:d7:29:8b:33:
         c2:65:1c:79:e1:93:0b:7c:a8:39:c7:e0:b5:55:6d:fb:fc:75:
         ed:6e:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org