Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/323830343a6465383a3a2f33332d3333203d3e203532353235.roa
File:                     323830343a6465383a3a2f33332d3333203d3e203532353235.roa (raw, json)
Hash identifier:          yLkVfxLPJXNIc6mYUgvUsfBM5ChOSmG1CN4OKQNGuAU=
Subject key identifier:   A7:E2:2E:0E:24:52:F3:76:24:B1:68:DB:4D:6B:2D:A0:4F:C5:8C:F4
Certificate issuer:       /CN=1C6016755CC52A3177ED1F706975750B6CD6C7A9
Certificate serial:       47492549006F3A87EFB8CEC17105B1D4F91DAC1B
Authority key identifier: 1C:60:16:75:5C:C5:2A:31:77:ED:1F:70:69:75:75:0B:6C:D6:C7:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/323830343a6465383a3a2f33332d3333203d3e203532353235.roa
Signing time:             Mon 18 Dec 2023 18:07:24 +0000
ROA not before:           Mon 18 Dec 2023 18:02:24 +0000
ROA not after:            Mon 16 Dec 2024 18:07:24 +0000
asID:                     52525
IP address blocks:        2804:de8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:49:25:49:00:6f:3a:87:ef:b8:ce:c1:71:05:b1:d4:f9:1d:ac:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6016755CC52A3177ED1F706975750B6CD6C7A9
        Validity
            Not Before: Dec 18 18:02:24 2023 GMT
            Not After : Dec 16 18:07:24 2024 GMT
        Subject: CN=A7E22E0E2452F37624B168DB4D6B2DA04FC58CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:a8:45:e4:35:bb:f5:36:15:13:65:ef:4a:
                    8f:55:41:ec:33:32:01:6c:4c:35:e8:f9:eb:b1:5f:
                    1a:2a:b9:24:9b:eb:e3:21:5f:be:7b:2b:75:fe:16:
                    99:63:b0:04:a3:3d:5b:95:a1:df:7a:cb:b0:91:18:
                    39:83:78:b0:8e:85:3b:74:6f:0f:32:40:79:ae:e1:
                    15:8b:b4:88:b9:3a:94:66:1a:ad:ca:24:cc:bb:82:
                    0d:8e:63:ee:f2:25:a4:0f:9a:a1:73:a3:b7:55:c3:
                    97:99:14:da:bf:73:73:0b:2b:b0:7a:0b:ef:81:1f:
                    1d:e8:4c:7b:9c:8b:5b:9d:7a:1e:05:07:30:73:4a:
                    26:55:8b:68:ac:ff:32:d1:a9:cd:f5:58:89:09:f1:
                    e4:a4:04:7c:82:68:52:cb:fc:e3:31:2d:97:92:d8:
                    9b:48:51:02:75:d1:c8:42:f2:b4:1b:46:b1:b9:65:
                    7a:5e:2c:93:d6:29:d8:f8:40:0c:cf:a0:8d:de:d2:
                    e8:dd:2b:d7:97:61:9b:4a:88:a7:9f:2e:f3:e9:40:
                    90:39:b5:24:67:bd:78:13:c5:72:96:16:40:58:1c:
                    63:3b:2f:25:37:f6:88:7f:8d:f2:23:2f:44:3e:5c:
                    f0:8d:03:e8:8a:ef:c0:0b:f0:bd:e2:dd:7e:d2:35:
                    34:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E2:2E:0E:24:52:F3:76:24:B1:68:DB:4D:6B:2D:A0:4F:C5:8C:F4
            X509v3 Authority Key Identifier:
                keyid:1C:60:16:75:5C:C5:2A:31:77:ED:1F:70:69:75:75:0B:6C:D6:C7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/323830343a6465383a3a2f33332d3333203d3e203532353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:de8::/33

    Signature Algorithm: sha256WithRSAEncryption
         a9:eb:0d:ad:9a:b7:76:57:c0:6d:d3:59:b4:8b:5f:27:39:5c:
         81:91:bb:59:1b:b1:d8:ac:61:e5:3f:bd:96:33:19:4c:74:dc:
         8c:54:3b:af:63:67:59:1d:67:1d:49:8a:86:54:98:32:51:ff:
         ce:4c:4b:bc:ff:f9:af:9d:cb:bb:86:62:45:64:6e:2c:90:70:
         3e:d0:28:37:63:db:29:79:9e:2d:86:96:99:32:b2:94:2f:f0:
         6e:69:f6:3a:45:f8:37:3d:85:c0:33:8a:80:09:46:3c:0f:bb:
         0d:e5:64:68:15:a3:0f:ca:bd:37:b8:3a:ac:8a:b5:48:10:b9:
         43:36:5d:37:1c:06:df:15:4a:bf:0a:ea:48:2c:cf:b8:5f:3b:
         f6:86:b7:75:76:38:66:39:3c:03:a7:04:5f:2c:c9:0b:35:2b:
         ce:f0:d3:36:ad:97:80:a1:56:b5:32:0c:8a:12:f0:dd:a3:05:
         30:9e:f1:bc:6f:50:c8:8b:54:88:52:67:c3:93:c1:8c:d2:0b:
         00:0d:64:31:fe:75:c5:a2:6f:d8:37:31:37:02:bc:ac:31:53:
         7c:1e:b6:18:e2:6a:17:e9:a5:d2:12:93:9f:02:7b:e3:11:53:
         31:4e:cc:06:16:a5:5d:37:06:dd:82:48:f2:8f:4d:38:26:12:
         a2:9d:48:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org