Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa
File:                     323830343a323536343a3a2f33322d3438203d3e20323634323738.roa (raw, json)
Hash identifier:          yO6ODVCzzIbgHDRO6O8jLPf1ibdCrJziXFTzBc/cJ50=
Subject key identifier:   85:C9:25:60:CF:9D:1C:ED:6D:BD:A9:A5:D2:1C:4A:63:7B:0C:38:C4
Certificate issuer:       /CN=C3976C839B0ABBABE40425B1CDA010B8DF73E96B
Certificate serial:       6D61BFEC344C9BB4CD640C43A89FBD3B0E3285E5
Authority key identifier: C3:97:6C:83:9B:0A:BB:AB:E4:04:25:B1:CD:A0:10:B8:DF:73:E9:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa
Signing time:             Fri 15 Sep 2023 15:11:35 +0000
ROA not before:           Fri 15 Sep 2023 15:06:35 +0000
ROA not after:            Fri 13 Sep 2024 15:11:35 +0000
asID:                     264278
IP address blocks:        2804:2564::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:61:bf:ec:34:4c:9b:b4:cd:64:0c:43:a8:9f:bd:3b:0e:32:85:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976C839B0ABBABE40425B1CDA010B8DF73E96B
        Validity
            Not Before: Sep 15 15:06:35 2023 GMT
            Not After : Sep 13 15:11:35 2024 GMT
        Subject: CN=85C92560CF9D1CED6DBDA9A5D21C4A637B0C38C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ff:96:8f:0c:4b:1c:93:20:fa:94:d9:75:ec:
                    4e:c4:34:a8:79:39:46:1f:f3:72:3e:9d:fe:02:a1:
                    5e:23:85:65:bc:73:14:47:6c:92:c6:c9:39:68:8f:
                    28:16:e4:e2:2e:40:05:b8:eb:bc:8b:06:0c:a8:1e:
                    67:89:22:22:e4:7e:e8:b1:61:42:ed:87:9d:99:5d:
                    e0:15:f2:16:82:0e:c2:6f:af:39:72:52:f1:7b:cd:
                    41:89:4b:06:69:3f:c2:2d:99:83:d3:be:87:a6:e9:
                    63:79:46:b1:e9:2f:05:2d:e1:cd:62:5d:bb:02:76:
                    57:63:1f:38:01:80:e3:7b:c5:2a:9b:07:fb:96:c4:
                    6f:52:3f:cd:8b:94:f1:6c:e1:e6:a5:eb:8d:ee:d7:
                    37:22:98:e7:04:53:52:c5:a8:60:18:a8:64:c3:5b:
                    dd:d3:59:d3:a7:27:c8:d2:10:c6:de:16:88:3e:ec:
                    33:e6:7a:fd:4a:7f:da:d9:44:50:90:0d:b8:4a:14:
                    cc:3a:0b:94:8f:4a:07:77:f0:8b:b6:72:06:de:f9:
                    af:34:66:ca:6a:14:b6:6a:89:78:f1:ab:92:d8:39:
                    df:1c:2f:6f:66:ed:ad:d3:e3:7a:da:e6:a4:28:68:
                    c7:4d:cc:8c:73:40:d9:17:01:f5:a7:51:ae:85:95:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C9:25:60:CF:9D:1C:ED:6D:BD:A9:A5:D2:1C:4A:63:7B:0C:38:C4
            X509v3 Authority Key Identifier:
                keyid:C3:97:6C:83:9B:0A:BB:AB:E4:04:25:B1:CD:A0:10:B8:DF:73:E9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2564::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:41:43:0a:ae:24:37:c2:3a:d8:29:a2:a8:24:4d:d2:1a:43:
         97:95:f7:8b:55:21:2c:b4:ba:d8:30:00:bd:b1:a4:99:12:fc:
         10:3a:dd:58:a1:01:73:0c:72:6d:89:dc:08:59:66:05:c0:ac:
         50:bc:1f:01:f3:a3:f1:4d:61:bf:5d:d9:64:6c:25:d4:00:a9:
         09:9c:5c:82:97:69:ae:de:70:31:b1:81:b2:d6:b2:ad:db:43:
         39:d2:ac:b0:a7:a8:fa:5c:92:16:44:8e:47:5d:4b:ec:a9:ca:
         d8:7d:6a:1f:69:a2:5d:7f:0e:ff:00:4d:9f:dc:46:86:c6:fa:
         f3:2b:04:02:75:b9:de:4d:bb:20:76:54:3f:e3:39:e7:f0:3e:
         8b:4f:0b:a3:ad:c8:fb:9e:07:bd:52:32:95:52:f1:15:3a:13:
         05:79:b5:3c:56:a9:45:6f:f8:f4:24:f7:a8:f8:cd:f0:1b:79:
         13:1c:1f:de:f1:cb:87:6a:95:87:fe:35:8f:82:6e:a6:8e:1b:
         28:0f:95:b1:1d:f8:70:04:9d:d9:0b:cc:8e:ea:24:52:0d:e6:
         39:6a:40:99:84:af:9c:e4:4c:5d:25:69:cc:68:c4:78:22:5c:
         0b:e2:4a:b8:aa:76:e9:e3:a5:c6:4b:22:b7:fd:38:5b:54:3c:
         40:cd:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org