Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/323830343a353939303a3a2f33322d3332203d3e20323638373130.roa
File:                     323830343a353939303a3a2f33322d3332203d3e20323638373130.roa (raw, json)
Hash identifier:          a0RGKj4Eeh5jTwhgcjiNEvx2ZhISsajynfnCZDn6HAA=
Subject key identifier:   36:5F:B4:14:19:19:25:AC:66:07:A9:C1:32:82:FA:85:E5:8D:00:0E
Certificate issuer:       /CN=669B05AF68A578CAF79FDBA7B72AE047A96436E6
Certificate serial:       3B2384FAD4E0C98BA24AF4A06CD0059D31E8092A
Authority key identifier: 66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/323830343a353939303a3a2f33322d3332203d3e20323638373130.roa
Signing time:             Thu 28 Dec 2023 17:54:11 +0000
ROA not before:           Thu 28 Dec 2023 17:49:11 +0000
ROA not after:            Thu 26 Dec 2024 17:54:11 +0000
asID:                     268710
IP address blocks:        2804:5990::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:23:84:fa:d4:e0:c9:8b:a2:4a:f4:a0:6c:d0:05:9d:31:e8:09:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669B05AF68A578CAF79FDBA7B72AE047A96436E6
        Validity
            Not Before: Dec 28 17:49:11 2023 GMT
            Not After : Dec 26 17:54:11 2024 GMT
        Subject: CN=365FB414191925AC6607A9C13282FA85E58D000E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:9b:bc:c7:28:ec:3d:a9:03:76:4b:6b:bd:
                    13:85:ec:01:10:50:fe:fd:59:f5:cf:e0:0b:f8:1e:
                    5a:4c:13:b7:ea:ac:14:ae:d2:4d:ff:05:a4:c2:ae:
                    f2:a8:4a:f2:ca:44:05:3f:85:dd:84:6a:4d:15:7c:
                    51:f9:e1:ad:df:eb:a3:25:f4:2e:4b:4c:ee:23:7e:
                    ee:87:43:07:d1:3e:58:c6:20:11:38:1a:0e:2d:7c:
                    8b:2f:63:90:3d:5c:5a:89:a0:bb:e2:0a:cc:27:0c:
                    94:10:50:c0:b5:ae:d6:f4:f3:1b:d0:f4:d4:da:9f:
                    75:df:d7:1c:ae:50:d8:de:47:98:92:4a:75:be:21:
                    4e:e4:58:14:71:41:fb:b1:24:73:ba:22:15:2c:ca:
                    cc:e1:c8:c6:6b:c3:37:80:0d:a5:27:eb:9b:e7:4d:
                    11:b6:cf:95:3e:1e:6c:ea:1a:84:28:6d:73:67:a8:
                    84:06:fa:ae:1d:6d:78:80:8c:59:45:22:cd:52:3f:
                    e4:28:09:10:31:67:73:55:be:9f:39:39:f0:8c:c6:
                    31:30:f6:c4:04:41:d5:5e:1a:ae:cb:81:52:be:ba:
                    56:f0:b2:d6:1b:f5:36:e5:35:15:7e:96:dd:fc:76:
                    70:74:35:04:24:a1:97:be:87:4f:4d:19:12:9c:0f:
                    38:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5F:B4:14:19:19:25:AC:66:07:A9:C1:32:82:FA:85:E5:8D:00:0E
            X509v3 Authority Key Identifier:
                keyid:66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/323830343a353939303a3a2f33322d3332203d3e20323638373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5990::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:7e:8b:a1:5b:dc:69:bc:0e:a3:f5:1c:ed:50:e9:d6:65:
         45:96:5e:f1:2e:78:49:a5:8f:7d:f3:37:66:f2:90:5d:d5:d4:
         be:8f:21:c3:52:f7:f0:11:cb:d9:13:63:52:cb:cd:37:eb:57:
         dd:15:bb:75:8a:fa:9b:ba:a2:39:5d:4a:02:69:99:1c:16:4d:
         1c:bd:32:01:48:77:ba:c4:4e:b6:14:96:c0:88:8b:b1:3e:bb:
         23:ca:a5:54:45:38:22:03:f0:62:22:d7:47:5a:cd:34:8e:b2:
         41:37:c2:74:fc:06:6f:03:06:97:66:2e:83:e5:4b:79:0f:3b:
         5a:94:c4:a0:51:11:87:52:0e:23:29:ce:eb:10:4d:21:d8:0e:
         44:53:6d:01:b0:c6:4e:20:91:e4:5e:54:cf:c8:2f:0f:72:57:
         f6:ac:3d:6c:80:ed:9f:ad:d7:88:d4:d4:c7:f3:22:90:0c:e1:
         97:7e:c8:bb:81:22:e2:1d:45:10:d4:70:66:8d:ce:7b:ec:20:
         a8:26:c1:5d:25:bb:aa:ad:f4:5a:d8:08:ca:62:57:36:8a:37:
         e7:ab:69:73:99:61:1e:0b:7b:3f:61:0d:85:c4:d5:3b:07:30:
         58:c4:a6:fe:93:1d:7d:5f:03:cc:67:af:5c:d1:26:d6:a1:77:
         6f:4a:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org