Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/323830343a363932343a3a2f33332d3333203d3e20323730323531.roa
File:                     323830343a363932343a3a2f33332d3333203d3e20323730323531.roa (raw, json)
Hash identifier:          KxjDzkcMuvzK8dFnHXy1nyvtayg3pQtPHXIx43tswXU=
Subject key identifier:   B7:1D:E2:88:5D:C1:9B:F1:FF:10:42:33:95:76:A8:2D:B0:C8:00:59
Certificate issuer:       /CN=8810BDE0DA994D68C04ABEBD38E406E4C04CB047
Certificate serial:       7E277AAEA5495182356A221713072FEC5C6D0622
Authority key identifier: 88:10:BD:E0:DA:99:4D:68:C0:4A:BE:BD:38:E4:06:E4:C0:4C:B0:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8810BDE0DA994D68C04ABEBD38E406E4C04CB047.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/323830343a363932343a3a2f33332d3333203d3e20323730323531.roa
Signing time:             Mon 06 Mar 2023 17:08:34 +0000
ROA not before:           Mon 06 Mar 2023 17:03:34 +0000
ROA not after:            Mon 04 Mar 2024 17:08:34 +0000
asID:                     270251
IP address blocks:        2804:6924::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:27:7a:ae:a5:49:51:82:35:6a:22:17:13:07:2f:ec:5c:6d:06:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8810BDE0DA994D68C04ABEBD38E406E4C04CB047
        Validity
            Not Before: Mar  6 17:03:34 2023 GMT
            Not After : Mar  4 17:08:34 2024 GMT
        Subject: CN=B71DE2885DC19BF1FF1042339576A82DB0C80059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:25:71:cb:0a:cb:65:da:69:93:24:8a:e7:0c:
                    98:86:59:70:a4:32:81:b3:c8:c4:4e:d0:cf:3f:57:
                    36:a9:e2:cc:c4:49:f0:38:e0:ed:15:57:80:b7:9f:
                    2d:ed:7d:d8:44:fe:93:bf:6d:6b:34:4c:d9:c2:79:
                    08:87:db:6b:4d:19:cd:20:fb:85:d1:9c:05:3d:8c:
                    49:7e:9a:35:34:a4:84:92:ff:73:27:e9:df:5c:74:
                    4d:01:56:29:d9:bd:d5:a4:4e:76:c3:39:0e:6f:ba:
                    11:80:c7:3d:68:71:00:e7:87:ae:d5:d1:06:b8:7c:
                    09:12:35:4f:3e:02:67:b9:fc:20:36:c8:ce:f2:51:
                    83:f1:b8:f5:df:a9:84:23:35:76:fe:05:1e:ab:2f:
                    de:c9:3c:27:ea:75:e8:d3:d0:30:7d:95:d3:07:f9:
                    19:20:79:86:84:43:02:83:28:0f:c4:51:90:fd:5d:
                    35:f1:57:90:b8:a5:0e:19:6a:c0:49:5e:c2:3a:47:
                    87:f6:cb:04:3a:5d:9e:56:6d:34:f7:97:fa:6c:45:
                    2b:f8:1d:b3:0d:71:a9:4c:31:06:9b:b6:10:35:20:
                    3b:45:fc:a2:ce:5b:b3:e7:b7:26:c0:d4:8d:c0:3c:
                    58:15:19:27:39:1d:9d:38:7f:ab:8f:de:9c:7c:b1:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1D:E2:88:5D:C1:9B:F1:FF:10:42:33:95:76:A8:2D:B0:C8:00:59
            X509v3 Authority Key Identifier:
                keyid:88:10:BD:E0:DA:99:4D:68:C0:4A:BE:BD:38:E4:06:E4:C0:4C:B0:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/8810BDE0DA994D68C04ABEBD38E406E4C04CB047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8810BDE0DA994D68C04ABEBD38E406E4C04CB047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/323830343a363932343a3a2f33332d3333203d3e20323730323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6924::/33

    Signature Algorithm: sha256WithRSAEncryption
         a8:f5:fc:0e:d0:76:fc:2e:b4:6b:c7:d3:e3:e5:ce:a4:e1:6a:
         3c:d6:4e:77:ea:f9:e0:dd:a2:5a:b4:1d:da:0b:19:a0:14:e7:
         42:fa:79:72:33:1c:5c:12:46:db:71:65:8f:3e:1b:86:3c:f6:
         1b:99:22:ae:b0:80:ee:26:f5:4e:22:a4:4f:82:4e:c9:d7:a7:
         9f:48:44:65:81:1e:01:48:20:4a:02:d2:1f:cf:5e:38:af:f5:
         db:20:13:fe:fa:8c:42:e4:6d:b3:2b:b6:10:cb:03:e5:99:a3:
         35:a8:dd:44:69:17:f0:f5:51:e2:da:93:d7:5c:e2:c1:69:37:
         db:fd:76:a4:52:a7:08:88:82:ed:82:5f:46:ce:b4:d9:d7:34:
         9f:73:f3:ed:a8:9c:fc:66:c7:46:91:9b:fd:c6:d9:3b:79:9a:
         45:00:e9:58:21:7c:4a:f4:63:74:ef:51:f4:66:87:84:ce:6f:
         1c:1a:23:db:1c:09:f2:9d:02:ba:8d:26:f2:a1:84:29:51:33:
         e7:1b:cc:4c:7d:ac:7f:d3:35:f6:b8:fc:dc:55:d6:9b:77:de:
         00:1d:0b:30:75:82:b3:1f:49:fc:9b:d3:ef:39:b6:d2:d6:06:
         d0:11:05:1b:55:fb:37:81:6e:d4:45:0a:dc:c1:0d:20:30:2e:
         2b:28:8b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org