Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/0/323830343a313435303a3a2f33322d3332203d3e20323632383631.roa
File:                     323830343a313435303a3a2f33322d3332203d3e20323632383631.roa (raw, json)
Hash identifier:          HWDTvIRH1bSZo7XMIuGgqJQ5wKpOIjartXoP80EAP74=
Subject key identifier:   3C:91:11:35:19:9D:8E:23:1F:A7:7F:99:2B:10:72:DE:A9:2B:6A:66
Certificate issuer:       /CN=665F497A664051E7799FA890013BCC2F5B0B4428
Certificate serial:       13E720D6E2D0AE95D0D5C28E562150E3C63EAACA
Authority key identifier: 66:5F:49:7A:66:40:51:E7:79:9F:A8:90:01:3B:CC:2F:5B:0B:44:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/665F497A664051E7799FA890013BCC2F5B0B4428.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/0/323830343a313435303a3a2f33322d3332203d3e20323632383631.roa
Signing time:             Fri 09 Feb 2024 15:42:34 +0000
ROA not before:           Fri 09 Feb 2024 15:37:34 +0000
ROA not after:            Fri 07 Feb 2025 15:42:34 +0000
asID:                     262861
IP address blocks:        2804:1450::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e7:20:d6:e2:d0:ae:95:d0:d5:c2:8e:56:21:50:e3:c6:3e:aa:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665F497A664051E7799FA890013BCC2F5B0B4428
        Validity
            Not Before: Feb  9 15:37:34 2024 GMT
            Not After : Feb  7 15:42:34 2025 GMT
        Subject: CN=3C911135199D8E231FA77F992B1072DEA92B6A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:42:68:71:26:95:76:7c:5b:97:98:ad:0d:
                    56:e5:f5:fa:78:47:4a:35:22:49:1b:be:ac:a8:f1:
                    48:98:7f:2f:46:8a:26:b8:64:5e:04:75:90:f3:81:
                    1a:a1:3d:1c:03:a3:60:74:84:f5:8c:70:b3:ad:db:
                    1f:2b:3a:67:a4:e6:60:63:05:8a:75:f4:a4:1f:6d:
                    32:5c:9b:6a:54:f8:5b:22:73:fa:53:cb:ea:63:3b:
                    e6:d4:9c:50:b9:5a:dc:60:75:44:b0:08:07:42:66:
                    7a:77:d3:f5:53:de:ce:b3:a0:50:ff:0e:e3:78:04:
                    1d:24:28:29:d9:8e:7e:c0:8b:d0:7d:0d:73:22:7e:
                    4d:52:fb:14:8b:51:12:9c:c2:ab:89:e3:52:97:8d:
                    f7:a5:b7:7b:09:75:44:cd:3a:bc:0c:1f:14:46:38:
                    60:86:83:81:3f:4d:cd:de:fb:13:77:46:be:b8:e0:
                    70:82:f8:e4:a6:74:6e:08:c4:32:f7:8d:e7:f5:26:
                    f7:3c:a2:00:59:31:83:a2:61:1c:20:10:43:b3:2b:
                    4a:94:91:30:37:09:79:70:d7:b4:6a:bb:8e:f9:fc:
                    24:cf:30:1f:93:7b:e7:5a:75:47:95:e9:85:99:22:
                    b7:3c:ce:a1:aa:94:73:6c:7a:7d:a7:33:5f:01:92:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:91:11:35:19:9D:8E:23:1F:A7:7F:99:2B:10:72:DE:A9:2B:6A:66
            X509v3 Authority Key Identifier:
                keyid:66:5F:49:7A:66:40:51:E7:79:9F:A8:90:01:3B:CC:2F:5B:0B:44:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/0/665F497A664051E7799FA890013BCC2F5B0B4428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/665F497A664051E7799FA890013BCC2F5B0B4428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/0/323830343a313435303a3a2f33322d3332203d3e20323632383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1450::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:2a:1b:31:b0:f6:34:b8:65:01:fa:f7:78:c9:7e:d5:2e:ce:
         6e:a3:44:bb:72:09:b2:69:d0:8f:60:31:7e:56:82:38:0e:08:
         12:1f:b9:28:28:4c:ac:e6:c4:09:4b:9d:f8:73:12:dd:15:95:
         80:79:02:e2:ae:96:b1:c0:e6:c4:6d:c8:23:1b:7b:cf:c8:d6:
         91:ef:c3:c6:38:3a:fb:b1:ae:d9:a0:cb:84:f0:9c:31:f9:ae:
         9b:68:40:f6:ce:4a:ef:d6:12:0b:87:cc:e0:cb:eb:53:1f:86:
         52:38:07:e7:b7:fd:b1:e9:1e:0d:93:94:e6:1a:e8:7a:4d:80:
         19:58:34:b5:17:2b:8b:61:03:0b:e5:93:00:99:c7:05:1d:8a:
         20:a5:7f:0e:ff:9d:8b:27:f4:3c:5b:66:2f:e6:4b:01:54:ce:
         64:60:a0:d9:f7:73:22:6c:89:64:22:ba:ee:66:a7:59:fb:51:
         d8:cb:f6:f2:cc:d2:88:88:20:83:08:cb:39:b6:23:2f:aa:df:
         48:88:6c:72:b7:89:9d:f9:fd:55:85:2f:d5:62:a1:87:5b:40:
         12:d9:79:03:73:4a:47:ef:f6:76:41:08:e8:6f:71:8b:29:61:
         31:44:7d:44:e8:1b:5e:f5:84:5d:d4:be:c4:bf:62:75:09:7a:
         aa:44:02:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org