Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/323830343a3235303a3a2f33332d3333203d3e20323632383033.roa
File:                     323830343a3235303a3a2f33332d3333203d3e20323632383033.roa (raw, json)
Hash identifier:          YvAwPNUJuHA3jhbCIh+ZSy2cj6+FWFcD6U1+rWcxdnw=
Subject key identifier:   D6:36:3B:26:23:15:85:05:80:CF:A7:8D:62:69:59:82:37:C8:1E:37
Certificate issuer:       /CN=5CE8CC62295E168AEA6DF72A4F79361AE557F0D7
Certificate serial:       297EBC22D9DA7CD969DA592761A68F70A450302A
Authority key identifier: 5C:E8:CC:62:29:5E:16:8A:EA:6D:F7:2A:4F:79:36:1A:E5:57:F0:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/323830343a3235303a3a2f33332d3333203d3e20323632383033.roa
Signing time:             Wed 03 Apr 2024 20:41:06 +0000
ROA not before:           Wed 03 Apr 2024 20:36:06 +0000
ROA not after:            Wed 02 Apr 2025 20:41:06 +0000
asID:                     262803
IP address blocks:        2804:250::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7e:bc:22:d9:da:7c:d9:69:da:59:27:61:a6:8f:70:a4:50:30:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE8CC62295E168AEA6DF72A4F79361AE557F0D7
        Validity
            Not Before: Apr  3 20:36:06 2024 GMT
            Not After : Apr  2 20:41:06 2025 GMT
        Subject: CN=D6363B262315850580CFA78D6269598237C81E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:79:81:8b:5e:a7:f0:7f:3f:60:6f:4f:3a:
                    fe:90:6e:ed:5d:0b:bd:ed:ef:25:72:27:8e:37:6c:
                    d4:21:71:71:69:7f:69:cb:00:8e:fa:1e:08:c8:e3:
                    60:b6:49:a0:ad:3b:39:bc:e6:66:61:77:08:c1:54:
                    54:42:0d:c2:2c:b0:10:fc:ec:1d:4b:7a:a3:39:2d:
                    14:9a:66:4f:02:9a:ab:43:89:77:96:ec:fd:8b:86:
                    2a:1a:18:dc:36:55:6c:78:61:ae:1d:e5:c8:05:06:
                    bd:3d:20:27:ce:af:fb:6a:33:d6:4c:52:91:75:8d:
                    9b:17:2b:14:88:55:f8:db:69:05:cd:de:c2:74:ea:
                    53:73:39:2f:6b:ad:d5:a5:bd:0e:b4:9f:bd:93:87:
                    06:4b:65:71:1f:79:68:73:76:d7:35:fc:76:24:8b:
                    ad:16:d1:33:ed:53:82:71:9a:f1:39:95:e8:0a:c1:
                    8b:48:f2:7b:52:f9:02:c8:71:c6:da:a0:35:34:3a:
                    60:d1:f9:7a:f4:3a:9c:4b:dc:27:e5:b6:0b:5f:fd:
                    06:a4:6f:89:52:b0:fa:61:9c:eb:87:db:43:11:dd:
                    67:34:08:eb:20:fb:e9:99:23:b4:46:40:8a:3c:ec:
                    46:d6:52:78:43:5f:c5:dd:8a:47:df:71:2d:27:49:
                    4f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:36:3B:26:23:15:85:05:80:CF:A7:8D:62:69:59:82:37:C8:1E:37
            X509v3 Authority Key Identifier:
                keyid:5C:E8:CC:62:29:5E:16:8A:EA:6D:F7:2A:4F:79:36:1A:E5:57:F0:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/323830343a3235303a3a2f33332d3333203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:250::/33

    Signature Algorithm: sha256WithRSAEncryption
         10:17:b6:a8:f5:49:70:c8:da:d6:f1:76:da:4b:d2:58:9f:b6:
         2f:e5:ec:0f:89:13:5f:90:5c:02:c7:5a:b0:32:9e:69:96:eb:
         8f:b8:21:1a:fb:a4:28:53:0b:2a:48:3a:a8:dc:58:b0:fe:aa:
         b2:de:84:10:14:82:15:87:76:c5:12:33:30:ae:87:44:76:c7:
         58:13:a9:ee:fa:22:39:40:8d:4a:75:d3:cd:b5:fd:a5:71:2a:
         1f:a3:07:e4:7f:b6:a4:29:2a:f0:e0:50:9a:00:db:57:4d:00:
         4c:a5:88:c7:2a:29:41:a2:c6:1b:be:fa:b8:5d:5a:b9:bf:17:
         0b:a0:0d:46:f4:f0:c8:48:27:a0:f8:19:f6:1e:ba:bc:84:2c:
         1a:c2:f8:69:82:4b:20:f5:44:63:dd:62:ac:69:80:a9:c6:cb:
         4f:ee:89:93:fd:a0:60:94:9b:2b:fa:ab:40:04:16:7c:db:71:
         62:c9:9d:b4:af:59:75:8c:b6:1e:c3:05:1e:ae:2b:d9:97:ca:
         be:80:13:ee:2d:1b:e6:e7:f7:fb:e6:5d:b2:b4:54:a2:6b:9b:
         c4:da:4f:c3:da:c8:1c:50:4a:ff:e5:bd:a3:a6:f4:9f:1a:d3:
         31:36:96:32:43:12:f3:b7:9d:38:9a:9c:43:10:49:ba:f8:38:
         fd:84:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org