Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/323830343a363935633a3a2f33322d3335203d3e20323730323635.roa
File:                     323830343a363935633a3a2f33322d3335203d3e20323730323635.roa (raw, json)
Hash identifier:          FaRSry/hAzk8n0/wAC44+fGC+e4+Q66StDF48d8Pi88=
Subject key identifier:   2A:E1:C5:DD:7D:0F:CB:BF:39:A4:D5:D8:6A:9F:2E:7E:EC:B8:5D:01
Certificate issuer:       /CN=838E68116DF7FA82100254E70121556A8E484E4B
Certificate serial:       61594709C897FDFE1B61241A249FEA41E4B50A56
Authority key identifier: 83:8E:68:11:6D:F7:FA:82:10:02:54:E7:01:21:55:6A:8E:48:4E:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/838E68116DF7FA82100254E70121556A8E484E4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/323830343a363935633a3a2f33322d3335203d3e20323730323635.roa
Signing time:             Mon 02 Jan 2023 15:18:30 +0000
ROA not before:           Mon 02 Jan 2023 15:13:30 +0000
ROA not after:            Mon 01 Jan 2024 15:18:30 +0000
asID:                     270265
IP address blocks:        2804:695c::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:59:47:09:c8:97:fd:fe:1b:61:24:1a:24:9f:ea:41:e4:b5:0a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E68116DF7FA82100254E70121556A8E484E4B
        Validity
            Not Before: Jan  2 15:13:30 2023 GMT
            Not After : Jan  1 15:18:30 2024 GMT
        Subject: CN=2AE1C5DD7D0FCBBF39A4D5D86A9F2E7EECB85D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:67:3a:ce:99:05:28:26:23:87:34:6f:b5:f0:
                    78:ad:07:72:a3:b8:18:90:0c:6b:4a:87:f9:03:b7:
                    a5:97:c6:3b:fc:f1:7b:c7:ee:9f:a0:d8:68:95:5a:
                    1a:e5:04:c6:e0:c0:8a:ce:05:d0:f8:05:2b:f2:4d:
                    26:73:11:24:90:2c:16:59:d6:04:1b:51:8e:70:e4:
                    de:9a:64:fb:c6:7c:a7:02:86:3e:bf:be:02:70:3c:
                    83:a5:66:c6:c2:2e:d9:b9:b2:05:4e:73:64:27:88:
                    29:88:40:24:6b:7e:d9:ae:3f:62:df:2e:d2:a5:4e:
                    5e:c6:be:f9:20:e9:78:8b:36:54:4a:1c:9e:37:22:
                    73:c1:35:54:b4:84:25:33:ee:7e:cf:96:1a:a0:d1:
                    cc:04:f4:73:f3:de:35:d9:70:a4:eb:a6:1e:56:93:
                    6d:92:dd:d2:ab:8d:e1:bc:0f:6f:d3:cd:10:1e:3d:
                    78:f8:3e:7b:67:21:89:e5:74:e2:b6:e9:5f:cf:db:
                    da:95:0a:eb:21:8e:22:72:92:89:4e:94:8d:a6:87:
                    45:19:e6:3a:cb:82:77:29:be:d2:04:df:2b:04:07:
                    20:c9:cd:89:1a:10:05:8d:19:a6:47:94:72:0d:ed:
                    80:97:a0:cf:cd:8a:15:f9:67:d6:38:12:90:3a:16:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E1:C5:DD:7D:0F:CB:BF:39:A4:D5:D8:6A:9F:2E:7E:EC:B8:5D:01
            X509v3 Authority Key Identifier:
                keyid:83:8E:68:11:6D:F7:FA:82:10:02:54:E7:01:21:55:6A:8E:48:4E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/838E68116DF7FA82100254E70121556A8E484E4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/838E68116DF7FA82100254E70121556A8E484E4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/323830343a363935633a3a2f33322d3335203d3e20323730323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:695c::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:03:d0:0c:25:51:0c:31:bf:0a:6a:e3:0e:0f:15:b5:8d:e2:
         fd:3c:c8:d5:da:42:7b:56:fb:b4:95:d6:67:c3:c4:d8:a1:27:
         ee:4e:91:22:68:aa:a7:96:4e:94:b5:48:93:42:98:47:a8:0f:
         58:52:fd:ec:4f:9f:9f:7b:36:bf:85:89:2f:61:77:d8:17:f3:
         ba:de:1b:af:46:3b:cc:14:9a:d0:87:a1:2c:71:27:1c:a0:f7:
         e6:71:da:72:f7:68:31:a6:db:3d:53:79:ce:ed:69:7a:d1:b7:
         08:d1:ac:da:f4:09:b6:be:60:df:40:e1:3b:56:46:4c:b6:bd:
         86:48:e5:1d:cc:8e:ba:0b:f4:66:5b:78:cf:44:45:4c:e9:4c:
         e9:7f:b7:13:02:98:3d:fe:27:3f:c4:50:1b:cd:38:22:c0:27:
         b2:6c:01:a4:a1:79:cd:c1:27:1b:e2:1f:1c:a1:f7:26:cd:67:
         d3:c2:01:c1:48:76:2e:e8:4e:13:d4:0b:2f:e3:42:bf:a1:b9:
         17:a7:b3:7c:cc:01:5a:ce:82:a2:c7:4b:c2:42:36:32:65:bc:
         21:c0:d1:ed:74:d0:a0:de:c3:60:81:ea:88:ab:b8:b9:53:56:
         59:0d:b8:bf:1a:9e:4c:50:b4:b4:98:13:c5:c1:24:68:ba:30:
         6f:2e:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org