Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/323830343a326334343a633030303a3a2f33342d3334203d3e20323635323037.roa
File:                     323830343a326334343a633030303a3a2f33342d3334203d3e20323635323037.roa (raw, json)
Hash identifier:          pCZBJ73ARoTEMpGnKQ9+9/ufylty9R1v9OVsejEW9SQ=
Subject key identifier:   2C:4C:5F:03:4F:DF:69:64:DB:B7:76:90:87:BD:49:79:5E:97:2A:F0
Certificate issuer:       /CN=61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B
Certificate serial:       4C75C83BAC80578896B94F3C5E132DED4266EC57
Authority key identifier: 61:E4:6A:B8:6B:31:64:E8:2D:DF:72:DD:CF:60:7F:FC:C4:FA:C2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/323830343a326334343a633030303a3a2f33342d3334203d3e20323635323037.roa
Signing time:             Fri 30 Jun 2023 13:06:38 +0000
ROA not before:           Fri 30 Jun 2023 13:01:38 +0000
ROA not after:            Fri 28 Jun 2024 13:06:38 +0000
asID:                     265207
IP address blocks:        2804:2c44:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:75:c8:3b:ac:80:57:88:96:b9:4f:3c:5e:13:2d:ed:42:66:ec:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B
        Validity
            Not Before: Jun 30 13:01:38 2023 GMT
            Not After : Jun 28 13:06:38 2024 GMT
        Subject: CN=2C4C5F034FDF6964DBB7769087BD49795E972AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cf:f0:3b:64:c8:8a:ae:85:63:92:d7:3f:3f:
                    99:fa:25:58:82:37:91:4b:e8:29:0e:27:f9:ec:46:
                    3f:0c:5b:bf:5b:29:3e:78:01:1c:a0:78:0a:1e:6f:
                    0c:9b:a6:b7:03:56:90:7e:ed:04:dd:dc:3e:23:11:
                    17:7f:7c:3e:e4:c2:c6:07:e4:3b:da:16:a3:7b:41:
                    f7:a6:be:c1:7d:2c:aa:8a:13:2b:d3:db:34:8b:ae:
                    d2:8f:d5:1e:3a:87:b1:c9:26:c2:05:4c:91:1e:38:
                    2c:b6:aa:63:48:94:3f:ba:b8:bf:bb:15:c2:f8:12:
                    59:27:3f:d7:2e:d8:bb:84:92:43:04:dd:ac:ad:b2:
                    6c:9d:a0:b2:37:3f:1e:0a:43:c4:0c:1f:91:6b:05:
                    2d:83:67:b7:5c:ee:33:68:22:97:b5:63:5f:3a:18:
                    82:7b:2e:f4:01:2c:cc:b5:c0:73:27:3c:2b:f0:50:
                    c8:f9:da:3e:67:ff:a2:dc:f0:b5:6e:c4:e7:b7:b0:
                    62:81:8e:08:4d:df:b6:47:93:7c:1f:73:25:1a:0b:
                    ab:43:92:eb:c3:fb:88:0e:aa:d4:31:b4:a6:e0:a2:
                    cb:3e:53:a6:19:ad:db:f0:b5:95:d7:57:ce:c2:c7:
                    cd:83:31:c3:8e:ad:81:a6:83:a5:2f:22:e6:8a:a6:
                    05:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4C:5F:03:4F:DF:69:64:DB:B7:76:90:87:BD:49:79:5E:97:2A:F0
            X509v3 Authority Key Identifier:
                keyid:61:E4:6A:B8:6B:31:64:E8:2D:DF:72:DD:CF:60:7F:FC:C4:FA:C2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/323830343a326334343a633030303a3a2f33342d3334203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:ee:db:21:4d:b5:09:90:1e:f1:d4:72:9f:36:44:c4:69:
         4e:64:ee:d6:56:6f:ca:ae:3f:ed:53:bd:35:8b:5a:44:c5:ee:
         9f:43:bf:be:40:02:a1:bf:c8:85:e9:78:40:4e:db:ab:2b:e9:
         54:88:86:f9:5e:27:6b:9d:f0:bc:a5:1f:80:de:91:31:15:66:
         bb:0c:01:1d:9c:b9:5a:60:93:d4:29:7a:e3:19:f6:55:28:7c:
         87:25:ac:b4:6e:eb:f6:2e:6b:19:59:b1:5a:1d:f7:c3:17:d6:
         50:7b:82:c4:57:a8:cd:83:7b:ac:43:88:a6:02:12:9e:0f:d7:
         38:07:f8:c6:b5:3a:5a:6a:dd:23:77:4e:b8:8b:5e:45:5c:25:
         db:e8:99:70:e9:b1:57:6d:43:2d:52:70:c7:0b:27:38:46:28:
         65:7f:ca:06:34:f8:0f:72:48:87:99:ae:b9:25:fa:28:c0:17:
         2f:bb:c9:0d:67:e8:8a:63:a8:e4:b0:10:95:ce:6d:ea:b8:1a:
         5e:8b:5e:51:21:3b:1c:8c:b5:bd:42:a8:1f:fb:c9:4f:75:c8:
         26:b7:b2:ca:5b:97:24:d7:3a:11:92:31:d6:bb:e5:27:11:46:
         4f:9e:04:0a:62:f5:ab:04:82:9c:59:d2:b0:5c:8d:83:6f:63:
         ae:52:39:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org