Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/323830343a336132303a3a2f33322d3438203d3e20323636303732.roa
File:                     323830343a336132303a3a2f33322d3438203d3e20323636303732.roa (raw, json)
Hash identifier:          bBmUzLou9gYaDy8p03dBFkoK9NcVPOY/zOq5rA3M6Vc=
Subject key identifier:   CA:AC:67:40:F7:95:AC:E7:A1:2A:08:AA:A0:97:29:BF:E1:A2:C3:8A
Certificate issuer:       /CN=33494705E93212BFD28AEA719521AE8BF6684199
Certificate serial:       7E3FF757F210A9A5456AD14EB40DEBB20D9C0D87
Authority key identifier: 33:49:47:05:E9:32:12:BF:D2:8A:EA:71:95:21:AE:8B:F6:68:41:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33494705E93212BFD28AEA719521AE8BF6684199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/323830343a336132303a3a2f33322d3438203d3e20323636303732.roa
Signing time:             Wed 30 Aug 2023 13:58:26 +0000
ROA not before:           Wed 30 Aug 2023 13:53:26 +0000
ROA not after:            Wed 28 Aug 2024 13:58:26 +0000
asID:                     266072
IP address blocks:        2804:3a20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3f:f7:57:f2:10:a9:a5:45:6a:d1:4e:b4:0d:eb:b2:0d:9c:0d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33494705E93212BFD28AEA719521AE8BF6684199
        Validity
            Not Before: Aug 30 13:53:26 2023 GMT
            Not After : Aug 28 13:58:26 2024 GMT
        Subject: CN=CAAC6740F795ACE7A12A08AAA09729BFE1A2C38A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:76:63:13:c6:fd:54:d5:28:ee:04:c1:61:
                    b1:9b:ee:38:04:63:1b:a3:68:2c:24:12:d3:eb:6c:
                    b5:85:f5:6d:8f:b1:d3:f9:0d:0d:cb:11:59:b4:a0:
                    c6:58:5d:28:b0:e8:5a:5e:f3:27:db:3f:cd:43:33:
                    85:9d:90:fb:eb:28:ed:06:d3:1c:6f:f4:cc:1b:04:
                    6d:5d:b1:e4:b9:6b:60:c1:7b:6d:f0:a5:b6:f5:8c:
                    70:6e:fe:8b:c3:fa:77:bc:8a:b9:0f:85:73:46:f9:
                    68:02:e9:1b:3f:2e:84:08:8e:63:1e:bd:89:99:5e:
                    9f:87:6d:a7:ce:81:c2:09:8d:32:eb:a2:df:5d:b6:
                    03:16:36:37:c8:ea:aa:c2:7c:af:f2:eb:fb:ba:36:
                    dd:95:6c:ec:e3:11:9b:34:79:6e:a6:26:19:24:0a:
                    7d:aa:8a:8e:ed:fe:55:c6:3e:68:d8:ee:1e:56:ca:
                    f2:88:2a:52:ff:05:ef:17:95:44:88:8c:47:54:b0:
                    43:48:b3:1a:bf:7d:ba:71:c8:e3:fd:28:96:fe:d5:
                    81:78:16:6b:6f:32:ee:45:70:81:54:4b:ce:0f:b2:
                    d2:74:ab:53:de:99:6e:c8:13:2e:d0:5f:fd:b4:c1:
                    0f:22:70:f8:f5:a2:98:62:1a:0a:a7:2c:5b:a7:23:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AC:67:40:F7:95:AC:E7:A1:2A:08:AA:A0:97:29:BF:E1:A2:C3:8A
            X509v3 Authority Key Identifier:
                keyid:33:49:47:05:E9:32:12:BF:D2:8A:EA:71:95:21:AE:8B:F6:68:41:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/33494705E93212BFD28AEA719521AE8BF6684199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33494705E93212BFD28AEA719521AE8BF6684199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/323830343a336132303a3a2f33322d3438203d3e20323636303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:67:b6:6a:05:6d:57:95:a4:fa:3d:1c:ef:d9:31:b9:c3:ee:
         14:a2:ac:b4:36:48:76:02:75:53:80:fd:c5:63:5c:84:2e:2f:
         8a:eb:07:8c:bf:76:fa:dd:34:b0:a4:07:58:5f:69:6a:d8:f0:
         44:35:92:21:a5:4f:50:c1:d8:b8:95:e2:4c:2b:8c:dc:cc:3d:
         38:2f:74:fb:95:fe:55:64:8a:b0:6f:ad:57:30:f9:2e:d2:95:
         76:7b:9a:7f:34:e9:b3:4a:7a:31:68:13:02:5b:1a:86:e9:a8:
         09:db:59:9a:7b:75:54:47:9b:64:60:55:6c:57:67:8f:7e:d3:
         da:1f:4d:ec:27:53:32:ac:fa:eb:f5:ef:97:4c:6b:dd:fa:48:
         78:44:e6:6b:ef:25:9a:7d:79:75:46:57:62:e7:6c:40:77:a6:
         01:84:fe:f5:73:51:71:79:d1:14:16:08:a7:41:c5:76:21:de:
         4e:3c:26:93:f7:02:a6:cf:ca:65:b8:8a:83:9e:97:24:1a:fa:
         19:56:ba:08:c8:23:ed:a1:bb:5c:16:b6:8e:cb:98:aa:40:63:
         00:ab:e9:d5:76:82:63:9d:da:46:0a:b2:e7:ba:58:1c:a0:d4:
         48:02:7b:d7:5d:e5:4e:29:be:a6:a8:04:d2:37:75:16:b6:4e:
         a7:bd:fb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org