Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a383030303a3a2f33342d3334203d3e20323635303835.roa
File:                     323830343a333239303a383030303a3a2f33342d3334203d3e20323635303835.roa (raw, json)
Hash identifier:          Hzk+IL7W/kSfrj18uRirMWDx8YYC1BalcBmO3vmV+3E=
Subject key identifier:   DD:FE:74:3C:06:E5:DD:54:CA:A6:3E:61:4F:78:E2:16:76:B0:38:9B
Certificate issuer:       /CN=6755D3522D9AAA05D8E619BF8EA6DBE34D108C24
Certificate serial:       2BEFB5FCBFC0FEA7341684E23EBA501B22D89289
Authority key identifier: 67:55:D3:52:2D:9A:AA:05:D8:E6:19:BF:8E:A6:DB:E3:4D:10:8C:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a383030303a3a2f33342d3334203d3e20323635303835.roa
Signing time:             Tue 13 Jun 2023 14:20:01 +0000
ROA not before:           Tue 13 Jun 2023 14:15:01 +0000
ROA not after:            Tue 11 Jun 2024 14:20:01 +0000
asID:                     265085
IP address blocks:        2804:3290:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ef:b5:fc:bf:c0:fe:a7:34:16:84:e2:3e:ba:50:1b:22:d8:92:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6755D3522D9AAA05D8E619BF8EA6DBE34D108C24
        Validity
            Not Before: Jun 13 14:15:01 2023 GMT
            Not After : Jun 11 14:20:01 2024 GMT
        Subject: CN=DDFE743C06E5DD54CAA63E614F78E21676B0389B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:f5:88:d1:f3:af:73:d7:2b:d4:85:b6:a5:
                    3b:88:e0:ba:7e:ce:4f:e5:ac:19:7d:41:32:57:47:
                    8e:5f:d9:e2:a5:5c:e4:1f:d9:bb:2f:f7:63:c2:ef:
                    dd:d6:88:8b:24:87:5f:8b:1c:97:c1:28:91:96:cb:
                    58:9c:e6:99:ef:ba:ae:c5:69:9a:ee:a7:7e:34:9c:
                    75:ce:8e:49:09:e6:01:75:50:ea:64:24:2a:0f:fd:
                    73:f6:7e:43:1c:4d:95:99:57:3f:c3:2e:44:ab:70:
                    c3:df:0f:28:81:c1:47:fa:21:54:80:c1:ca:02:1e:
                    28:e1:3d:c1:11:7e:04:d6:92:b5:fd:e2:ed:5a:88:
                    75:1a:26:0b:3b:8c:0b:fa:8b:d8:bc:da:7f:8c:f3:
                    8d:12:08:0b:6e:9b:18:08:66:b7:f4:62:13:4d:09:
                    66:9d:13:71:79:b3:db:ac:5b:7d:63:b4:91:d3:6c:
                    2f:44:51:9c:f6:cb:bb:40:11:e2:0a:49:60:2c:d5:
                    cf:e1:0c:95:b3:39:68:4d:52:7d:2c:06:b1:4f:8a:
                    07:4f:b3:db:ef:e5:d3:0f:1e:3f:de:57:0b:0f:f9:
                    92:5b:0d:99:c1:63:ca:1c:d9:09:32:c0:fe:09:d8:
                    23:1c:ab:d5:c8:32:77:c9:11:23:da:ce:16:20:e8:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FE:74:3C:06:E5:DD:54:CA:A6:3E:61:4F:78:E2:16:76:B0:38:9B
            X509v3 Authority Key Identifier:
                keyid:67:55:D3:52:2D:9A:AA:05:D8:E6:19:BF:8E:A6:DB:E3:4D:10:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a383030303a3a2f33342d3334203d3e20323635303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3290:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         08:53:35:77:4e:93:82:63:10:2d:dc:86:cf:28:9d:d4:eb:ea:
         45:b9:a3:34:44:db:03:8f:37:b0:77:5c:76:e9:34:a5:8e:23:
         11:1e:12:18:f9:c4:99:21:0b:b8:8b:5a:06:0d:82:88:c0:48:
         7f:2e:55:b4:20:c6:8b:ac:5f:6e:05:3a:f6:ad:b0:f4:f6:f9:
         d2:85:ba:6f:d5:be:34:2f:ac:49:f4:98:bf:5a:fb:67:08:01:
         9c:03:31:59:12:7e:33:be:07:e1:03:32:6b:24:97:d3:2b:7b:
         95:cb:01:46:f9:53:00:df:a3:36:42:2d:14:9c:47:39:7b:c6:
         e7:88:95:b9:d3:de:b9:d7:63:05:2a:ec:cf:a3:69:4f:ec:78:
         80:7b:72:d4:f1:b7:1e:1a:a1:a8:cd:03:76:af:85:7e:2f:69:
         de:cc:b3:ac:94:f1:02:0c:d3:cd:0d:3b:14:82:ce:65:ba:cb:
         66:ff:c3:70:da:40:32:8a:64:91:db:29:7e:b1:3f:9f:b9:1b:
         64:25:52:ec:db:21:6d:21:c7:37:ff:b4:71:87:fd:08:11:ed:
         52:8c:d8:2b:5e:c9:be:5a:72:43:41:6b:fd:79:1e:10:c3:02:
         05:3a:a8:ee:56:37:9b:75:68:60:a9:aa:ae:67:ce:75:78:2d:
         04:6c:fa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org