Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/323830343a356633343a3a2f33322d3332203d3e20323639303833.roa
File:                     323830343a356633343a3a2f33322d3332203d3e20323639303833.roa (raw, json)
Hash identifier:          0UDWA9obDtWkAHZ3mc5tSLzXMxfygYRWI2+zDsiw2ho=
Subject key identifier:   3E:3D:CA:3D:13:2A:D0:1B:93:3D:2F:2C:B5:2E:72:93:ED:40:01:EC
Certificate issuer:       /CN=11DE1C63E7D9AD434813D69B1DD1F3A877C26667
Certificate serial:       328926BF0A74174E3C0F6FD9E2F79E5C8DEEFBF6
Authority key identifier: 11:DE:1C:63:E7:D9:AD:43:48:13:D6:9B:1D:D1:F3:A8:77:C2:66:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11DE1C63E7D9AD434813D69B1DD1F3A877C26667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/323830343a356633343a3a2f33322d3332203d3e20323639303833.roa
Signing time:             Thu 28 Sep 2023 19:20:40 +0000
ROA not before:           Thu 28 Sep 2023 19:15:40 +0000
ROA not after:            Thu 26 Sep 2024 19:20:40 +0000
asID:                     269083
IP address blocks:        2804:5f34::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:89:26:bf:0a:74:17:4e:3c:0f:6f:d9:e2:f7:9e:5c:8d:ee:fb:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11DE1C63E7D9AD434813D69B1DD1F3A877C26667
        Validity
            Not Before: Sep 28 19:15:40 2023 GMT
            Not After : Sep 26 19:20:40 2024 GMT
        Subject: CN=3E3DCA3D132AD01B933D2F2CB52E7293ED4001EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:0e:a6:3d:c6:73:e2:28:6d:db:c4:ab:12:bc:
                    4d:b4:16:5c:db:8d:68:08:60:51:9e:4a:cd:0c:20:
                    ba:58:50:66:2c:d6:6a:46:86:60:59:af:9a:57:39:
                    ed:21:8f:94:29:8e:71:6f:51:4b:a5:95:ff:d4:86:
                    de:06:02:e4:56:11:e4:c4:25:85:a2:b4:9f:77:e5:
                    33:2c:20:68:55:77:2f:fb:3c:36:22:dd:4a:2b:4f:
                    b8:0a:06:7b:b5:6c:1c:fb:6e:ad:2e:39:3c:82:00:
                    86:62:ba:5b:45:19:7c:86:48:44:8c:6e:5a:07:25:
                    c0:73:8d:2e:00:41:da:ec:f3:cf:5d:40:af:3e:6f:
                    5e:a3:5d:cf:36:b5:d4:57:2e:c0:e0:9d:33:d0:c0:
                    1d:7b:2d:aa:8f:e5:b4:df:5b:20:42:27:88:fb:fb:
                    64:76:be:a9:70:4f:f6:12:c9:e6:27:81:9d:63:f4:
                    7c:b0:a6:cd:38:cd:02:95:80:14:24:2e:04:e0:dc:
                    a2:67:70:87:f3:15:b4:db:3e:bd:5c:49:b9:e1:80:
                    89:6d:e2:42:b1:b8:b2:ba:c5:4e:13:af:a0:61:52:
                    9e:79:d2:f0:6b:ce:f0:e6:fb:4a:f7:ee:b5:df:97:
                    a3:b1:99:05:2a:8c:6f:58:0b:5b:e5:71:7a:83:fe:
                    bf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3D:CA:3D:13:2A:D0:1B:93:3D:2F:2C:B5:2E:72:93:ED:40:01:EC
            X509v3 Authority Key Identifier:
                keyid:11:DE:1C:63:E7:D9:AD:43:48:13:D6:9B:1D:D1:F3:A8:77:C2:66:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/11DE1C63E7D9AD434813D69B1DD1F3A877C26667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11DE1C63E7D9AD434813D69B1DD1F3A877C26667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/323830343a356633343a3a2f33322d3332203d3e20323639303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f34::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:37:b0:2b:35:4b:9a:ca:bd:80:ab:ce:11:14:10:0b:27:0f:
         61:b6:6e:d2:59:96:01:7e:b9:33:5b:ca:83:c9:ac:94:4b:19:
         7d:6b:8b:14:cd:c7:1a:e4:13:31:5f:16:1a:d2:a3:d3:e7:5b:
         89:eb:db:4c:49:ad:0e:73:75:c5:fd:89:93:bc:aa:6f:0c:87:
         c4:11:84:cd:1f:3f:00:21:33:32:01:f0:2e:6e:b3:2a:58:5f:
         9c:df:75:86:f5:89:f2:38:e7:82:3d:aa:c8:31:d7:15:04:eb:
         47:ee:12:59:eb:82:c4:a4:f2:ce:ee:e2:79:ea:8a:92:4b:7c:
         8b:7e:d4:a9:a9:c0:89:f6:2e:f3:1f:6a:70:f2:79:85:33:d5:
         27:38:66:fe:c0:e7:fd:40:ea:a4:53:9d:65:26:21:06:69:3f:
         46:aa:75:9d:1e:1d:ad:c5:f2:13:0f:a2:6c:e7:e2:f6:e6:4a:
         15:a0:c4:75:eb:9d:ac:0d:e7:1f:7f:10:86:43:8b:34:a2:ea:
         ec:33:6c:9d:50:ba:54:59:1c:30:e9:44:2b:1e:b2:b6:45:e5:
         44:47:56:1a:40:8e:7a:c8:f4:81:4d:cf:34:b2:7e:18:93:18:
         06:32:10:57:9b:e3:08:f3:41:66:ea:ec:43:10:c8:d2:42:0e:
         aa:0f:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org