Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/323830343a353939303a3a2f33332d3333203d3e20323638373130.roa
File:                     323830343a353939303a3a2f33332d3333203d3e20323638373130.roa (raw, json)
Hash identifier:          0O9nLPM1DxHDrvbM/+y1MFwW/Wi+Yz49Tldw6JGp/7U=
Subject key identifier:   5F:63:E4:D6:BC:C9:A4:A0:0B:77:3D:64:6F:62:18:77:22:A9:C0:8D
Certificate issuer:       /CN=669B05AF68A578CAF79FDBA7B72AE047A96436E6
Certificate serial:       609A68654CDB564C072DD961EDB111BEA8F64B43
Authority key identifier: 66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/323830343a353939303a3a2f33332d3333203d3e20323638373130.roa
Signing time:             Thu 28 Dec 2023 17:54:13 +0000
ROA not before:           Thu 28 Dec 2023 17:49:13 +0000
ROA not after:            Thu 26 Dec 2024 17:54:13 +0000
asID:                     268710
IP address blocks:        2804:5990::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9a:68:65:4c:db:56:4c:07:2d:d9:61:ed:b1:11:be:a8:f6:4b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669B05AF68A578CAF79FDBA7B72AE047A96436E6
        Validity
            Not Before: Dec 28 17:49:13 2023 GMT
            Not After : Dec 26 17:54:13 2024 GMT
        Subject: CN=5F63E4D6BCC9A4A00B773D646F62187722A9C08D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:f7:07:4d:b1:50:9d:d8:c7:fd:3c:e1:f0:
                    56:40:ef:d7:c4:fb:a1:af:bd:ce:b0:1b:d4:3f:2c:
                    e3:00:18:b6:7f:d0:a1:6b:7c:4f:e7:ba:7c:b2:46:
                    3b:5c:0b:3b:08:59:d1:33:5a:2e:fb:21:8d:17:8d:
                    4a:4c:6e:50:d6:ed:3f:19:d0:e9:b2:e1:a5:db:2c:
                    10:6b:8e:2c:6b:9d:8a:ac:d5:c7:4c:8e:36:b3:58:
                    5c:c9:e4:0d:8f:0e:5c:70:ff:01:a9:52:75:86:41:
                    97:96:01:32:92:94:82:f8:ec:9b:12:46:b1:07:35:
                    14:f4:b4:f2:7f:b5:13:d8:77:aa:dd:19:40:1f:16:
                    54:6f:20:1a:3e:76:05:8d:43:e2:31:68:f4:ed:df:
                    6a:b2:1c:ce:9b:db:e3:b8:9f:ec:17:99:f0:37:8e:
                    f8:1e:dd:5e:7d:41:60:5a:8d:f6:d0:ae:5c:c0:63:
                    91:03:55:f0:94:ca:17:de:fa:e2:aa:56:8d:ce:b1:
                    1a:59:48:aa:5d:32:7b:59:15:f1:e4:87:c3:af:66:
                    73:50:42:8f:29:7f:50:d9:f6:54:0c:cb:50:68:e2:
                    51:01:a6:45:40:96:5d:20:66:cb:0c:0a:6a:db:d9:
                    fb:78:57:9b:f7:4d:c3:88:e2:c9:2b:4c:81:18:85:
                    6b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:63:E4:D6:BC:C9:A4:A0:0B:77:3D:64:6F:62:18:77:22:A9:C0:8D
            X509v3 Authority Key Identifier:
                keyid:66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/323830343a353939303a3a2f33332d3333203d3e20323638373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5990::/33

    Signature Algorithm: sha256WithRSAEncryption
         3d:8f:b6:e6:7e:dc:22:8b:a0:0a:94:6d:df:cd:38:b3:16:95:
         42:3c:ce:54:52:c0:0f:cb:cb:80:ce:a4:9e:e2:47:a8:63:de:
         8b:4b:56:8a:d8:2d:af:f8:72:db:95:99:fc:4f:c0:6c:d0:82:
         db:6e:f2:8f:19:8e:b4:ed:09:5f:8e:c7:c0:66:b1:8b:37:0d:
         e1:a5:20:45:3c:c1:e3:f6:3c:3b:1b:ce:03:1e:d7:6e:0a:1b:
         c4:39:b0:15:af:13:c7:b8:54:9b:66:51:77:5a:c2:78:e6:c6:
         cf:51:7a:ac:b2:b2:82:55:0f:54:0e:06:1f:57:72:b4:4f:83:
         59:14:fd:ee:5c:51:24:bb:c1:a1:a8:a2:57:56:2e:8f:b6:b3:
         9e:27:39:da:2c:5b:84:eb:4d:eb:81:39:92:9c:0c:3a:0a:7c:
         8b:be:f4:7e:0d:9c:af:f9:7f:c1:0b:95:3b:7e:58:02:29:1e:
         02:cd:3e:40:3f:f9:c3:3e:c9:b9:0b:f8:5d:1b:40:11:95:24:
         a6:f2:7b:09:4c:5f:f5:7e:2b:f4:72:4b:0d:3e:ee:aa:a5:33:
         74:c3:06:cf:17:31:a5:a2:4f:36:68:11:31:96:2b:34:34:bc:
         d9:63:9c:5a:79:cd:6a:36:ab:56:58:a2:d2:fa:c6:ab:f9:c8:
         eb:1a:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org