Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a3a2f33332d3333203d3e20323632393432.roa
File:                     323830343a6533383a3a2f33332d3333203d3e20323632393432.roa (raw, json)
Hash identifier:          yQYzff62l9k52s0GzDRP3ZS8nZJEF8x7t1IkxfZ2ryk=
Subject key identifier:   16:9F:B8:8B:05:39:FE:BE:3D:C6:AF:C2:25:C8:7C:13:67:ED:E3:17
Certificate issuer:       /CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
Certificate serial:       6B43FE6F4DEE0A240E6932C004A08C54C07078AA
Authority key identifier: C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a3a2f33332d3333203d3e20323632393432.roa
Signing time:             Wed 03 Apr 2024 18:31:35 +0000
ROA not before:           Wed 03 Apr 2024 18:26:35 +0000
ROA not after:            Wed 02 Apr 2025 18:31:35 +0000
asID:                     262942
IP address blocks:        2804:e38::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:43:fe:6f:4d:ee:0a:24:0e:69:32:c0:04:a0:8c:54:c0:70:78:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
        Validity
            Not Before: Apr  3 18:26:35 2024 GMT
            Not After : Apr  2 18:31:35 2025 GMT
        Subject: CN=169FB88B0539FEBE3DC6AFC225C87C1367EDE317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:06:59:eb:89:9a:99:82:23:7f:27:42:d8:
                    29:a7:34:d6:19:f6:b9:d4:22:55:9a:15:4f:b8:59:
                    34:67:19:a7:21:6e:0d:9b:4f:18:78:d3:a1:71:a0:
                    fa:24:00:36:59:62:a0:f8:d7:f9:d4:f5:33:90:58:
                    ec:d4:5d:07:e0:ee:11:f1:db:9f:2c:96:e5:a9:ca:
                    60:a5:3d:7a:42:d0:00:ea:41:f0:40:87:22:3b:f3:
                    b8:35:91:24:ae:8d:ff:f9:e4:c4:b7:27:6a:2e:e0:
                    01:9e:01:fe:2e:68:8a:ba:89:f7:2b:59:96:cf:64:
                    ba:8b:b9:a0:50:ff:c1:67:6d:56:37:45:b3:69:86:
                    44:07:c1:20:22:4f:ac:76:cc:a6:38:a6:c2:34:63:
                    52:7e:74:43:4a:2c:e8:21:79:cc:92:ea:23:64:ea:
                    01:d7:5d:b8:fc:be:62:5f:6b:a8:91:49:77:4f:fb:
                    61:1a:5d:46:cb:b6:c9:b6:c2:e1:73:74:07:25:93:
                    9b:d8:f5:29:25:ae:5c:df:72:fc:95:25:1e:be:25:
                    96:5a:46:47:44:b4:e3:8e:a8:f4:03:14:65:be:6a:
                    db:eb:5e:b7:bf:94:f9:a0:27:2b:d8:f7:a5:5b:89:
                    28:8a:a1:13:0c:7f:26:80:68:05:02:6d:4e:d7:32:
                    60:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9F:B8:8B:05:39:FE:BE:3D:C6:AF:C2:25:C8:7C:13:67:ED:E3:17
            X509v3 Authority Key Identifier:
                keyid:C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a3a2f33332d3333203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e38::/33

    Signature Algorithm: sha256WithRSAEncryption
         32:60:de:0f:06:e0:b3:64:8a:55:da:04:00:11:a5:4c:6a:06:
         5a:51:68:43:fa:04:f3:cd:0c:4f:f5:ec:90:03:39:3c:c3:cf:
         95:f8:30:6b:18:13:6d:96:c2:60:c4:2e:2e:c1:62:e2:0e:08:
         9b:04:79:01:62:5e:10:cf:91:7a:fe:ee:1c:17:bb:55:1b:ff:
         60:1c:a7:d2:45:71:c7:eb:9c:c9:3a:7c:80:20:a6:e5:de:03:
         c2:19:c5:6b:85:10:59:10:78:6c:1b:31:35:76:45:5a:e0:61:
         40:ac:64:3d:8c:2e:6c:95:99:c4:c2:06:2a:c5:d5:74:7f:b6:
         b1:1c:c6:c3:4d:59:18:bc:3a:5e:b1:90:77:33:4e:30:46:0a:
         fe:e9:d4:4e:01:bb:4c:5f:c1:70:d4:df:2f:aa:3d:7f:0c:2f:
         8a:be:05:63:a6:91:c8:2d:98:43:93:ab:87:1f:1f:5a:a2:37:
         5f:69:f9:bc:7c:5d:4c:37:53:9b:5f:e7:c7:1e:6b:18:85:f6:
         a1:1f:bc:12:de:e7:d0:57:d8:18:39:ee:fd:01:7f:83:21:bc:
         1d:91:30:f9:a5:8e:b1:9b:7a:e7:32:e1:ea:a1:5f:8c:0a:4b:
         ef:52:98:ef:76:b0:ef:42:7b:e5:a3:18:d2:7f:3c:d7:98:23:
         11:50:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 16:21:29 2024 by rpki-client on console-fra.rpki-client.org