Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/323830343a373565343a3a2f33332d3333203d3e20323731303736.roa
File:                     323830343a373565343a3a2f33332d3333203d3e20323731303736.roa (raw, json)
Hash identifier:          7+C+r4ZtQuN86e9qV20uqIFhC7RHreu9xRMlIowQPWc=
Subject key identifier:   6C:B6:78:59:B4:F4:AF:4A:9F:6F:34:5A:D8:04:1A:88:58:DC:F5:FA
Certificate issuer:       /CN=D52232967406E705729EA909CBA1A57972539515
Certificate serial:       66137D0CA9D86B9CA3D0C23DE84030B88DDD1EDC
Authority key identifier: D5:22:32:96:74:06:E7:05:72:9E:A9:09:CB:A1:A5:79:72:53:95:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D52232967406E705729EA909CBA1A57972539515.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/323830343a373565343a3a2f33332d3333203d3e20323731303736.roa
Signing time:             Tue 19 Sep 2023 23:00:00 +0000
ROA not before:           Tue 19 Sep 2023 22:55:00 +0000
ROA not after:            Tue 17 Sep 2024 23:00:00 +0000
asID:                     271076
IP address blocks:        2804:75e4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:13:7d:0c:a9:d8:6b:9c:a3:d0:c2:3d:e8:40:30:b8:8d:dd:1e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D52232967406E705729EA909CBA1A57972539515
        Validity
            Not Before: Sep 19 22:55:00 2023 GMT
            Not After : Sep 17 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ce:4e:a0:50:39:a4:97:3a:3c:0e:db:45:a7:
                    c2:0a:1d:cd:a7:13:11:5f:e9:be:32:d2:24:f3:97:
                    ba:39:dc:62:ef:f2:28:3e:cd:07:83:c1:69:88:90:
                    9f:c8:00:74:b9:5a:a7:d5:2e:0b:e4:b8:a4:ed:2c:
                    3c:d7:57:ad:c7:1e:54:d5:aa:c6:71:bf:da:8e:15:
                    d8:0d:38:c3:0c:c1:5a:32:19:07:99:28:55:5f:10:
                    65:06:d0:8a:71:81:61:6e:da:fe:b6:28:66:34:bf:
                    03:3a:91:79:28:fb:47:e0:6f:59:f5:60:92:80:a0:
                    f2:b7:8f:1c:12:9d:fc:d1:a3:63:cd:d8:12:04:9e:
                    b4:5b:a7:2b:c5:25:3d:55:1d:c4:dd:da:b8:0d:37:
                    26:82:cd:2d:6a:c3:49:1d:d4:3c:70:6b:36:72:0f:
                    9c:dd:3e:d5:ab:c3:14:c6:31:57:8a:22:c3:d2:a9:
                    67:cf:48:fb:0f:42:ec:33:4d:66:93:90:af:4c:19:
                    55:d0:8e:14:ae:6e:8e:68:0f:95:72:c1:1b:7f:d3:
                    b2:1e:aa:f3:57:13:87:48:1a:26:e5:20:9f:40:13:
                    ed:1c:96:db:02:51:43:1f:b0:1a:f4:96:af:22:13:
                    31:50:40:b6:60:46:cc:9c:9d:c4:6b:74:a6:0d:ed:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B6:78:59:B4:F4:AF:4A:9F:6F:34:5A:D8:04:1A:88:58:DC:F5:FA
            X509v3 Authority Key Identifier:
                keyid:D5:22:32:96:74:06:E7:05:72:9E:A9:09:CB:A1:A5:79:72:53:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/D52232967406E705729EA909CBA1A57972539515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D52232967406E705729EA909CBA1A57972539515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/323830343a373565343a3a2f33332d3333203d3e20323731303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75e4::/33

    Signature Algorithm: sha256WithRSAEncryption
         42:84:bc:46:65:12:dd:18:84:93:06:b7:41:c8:95:19:35:ca:
         26:27:a0:87:d4:34:9e:f1:bd:12:e1:57:06:5a:d3:59:4e:45:
         90:c0:df:95:b9:2c:d5:a2:7c:30:e1:e3:ac:5f:c9:f7:ed:c1:
         1a:c0:a1:e4:b6:0c:b1:78:10:ff:13:d3:a1:18:b4:bc:aa:d2:
         b8:be:ee:b8:a5:ee:6c:ee:39:be:eb:cc:27:19:bd:89:bb:b8:
         75:14:49:0c:26:d2:93:4c:e6:80:90:54:53:3b:ed:e7:74:22:
         c2:b8:bd:d8:78:7e:b5:4c:0c:d7:09:fc:22:a5:5c:c6:f9:dc:
         e3:0e:2b:89:d8:ff:b5:9a:a0:c7:14:ee:42:95:22:47:9c:84:
         18:1a:34:b5:c3:0f:f9:a0:70:6b:37:90:85:da:36:45:a1:57:
         0f:84:15:bb:20:5b:14:0a:fd:6e:04:af:7f:93:9a:7a:f2:3c:
         40:d3:45:c0:7c:e3:13:13:ab:b6:01:87:77:c4:02:59:68:13:
         e2:d0:51:0f:b1:ae:6b:82:5b:dc:da:33:46:6a:da:ca:aa:5d:
         05:ee:37:59:25:4e:47:dc:81:14:89:48:74:65:3c:fd:cb:6b:
         e7:ed:ad:4c:63:5e:2c:9d:0e:82:eb:1d:09:c1:1b:38:fd:c3:
         66:c7:bf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org