Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a3a2f33342d3334203d3e20323730373232.roa
File:                     323830343a373035633a3a2f33342d3334203d3e20323730373232.roa (raw, json)
Hash identifier:          8rknnvBq6KEeqcGC7kNznHiIuCk500iN1Vj4J1TJNQw=
Subject key identifier:   DA:F6:3E:2C:95:01:01:7A:92:7D:8D:ED:8A:94:71:1D:2C:3D:44:57
Certificate issuer:       /CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
Certificate serial:       65B0048EEE7E430EA45D41A163E4207008A0B0A8
Authority key identifier: F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a3a2f33342d3334203d3e20323730373232.roa
Signing time:             Fri 09 Jun 2023 14:38:02 +0000
ROA not before:           Fri 09 Jun 2023 14:33:02 +0000
ROA not after:            Fri 07 Jun 2024 14:38:02 +0000
asID:                     270722
IP address blocks:        2804:705c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b0:04:8e:ee:7e:43:0e:a4:5d:41:a1:63:e4:20:70:08:a0:b0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
        Validity
            Not Before: Jun  9 14:33:02 2023 GMT
            Not After : Jun  7 14:38:02 2024 GMT
        Subject: CN=DAF63E2C9501017A927D8DED8A94711D2C3D4457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:14:d1:d3:61:b9:88:3c:14:1d:22:20:cd:
                    7d:84:ce:3c:0b:3b:5a:05:e3:fe:9a:1e:b3:52:c0:
                    89:a0:85:ae:f4:9e:1f:1c:46:21:8e:0b:2e:26:c8:
                    9e:da:49:99:7f:c2:d3:83:ec:da:38:6f:97:d1:bf:
                    da:c1:23:d3:64:94:53:67:bb:3b:63:32:dc:95:a0:
                    a3:08:d1:86:fe:a9:ea:51:48:46:f9:97:55:7b:44:
                    18:7d:08:a7:41:2f:a1:5d:c5:0f:40:08:37:46:e2:
                    d2:09:45:4d:b9:13:4a:76:83:5b:6a:e3:3e:d8:5f:
                    c5:4e:c3:9b:d9:01:28:89:76:c3:06:3d:1b:84:c1:
                    0a:28:f8:84:d6:fe:8a:57:fe:a0:a0:e9:d1:e5:e0:
                    f4:38:90:cd:32:40:d7:a5:ed:de:8a:6a:00:2f:0c:
                    dd:73:1a:33:87:ae:5b:57:c6:05:97:c2:6f:4c:77:
                    6b:d4:0f:fc:0b:db:47:1d:20:ad:24:6f:7e:cc:2a:
                    ad:b7:3b:f3:d9:20:47:89:e0:71:05:e4:1e:ad:4e:
                    ad:89:e0:6d:90:cf:39:f8:d8:23:91:28:d0:6d:af:
                    f2:4e:ef:1f:e1:a0:f0:95:02:b7:3f:27:8f:4d:ab:
                    9d:5a:c0:37:9e:8b:7f:e2:6e:d7:f6:f3:b8:48:7d:
                    2f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F6:3E:2C:95:01:01:7A:92:7D:8D:ED:8A:94:71:1D:2C:3D:44:57
            X509v3 Authority Key Identifier:
                keyid:F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a3a2f33342d3334203d3e20323730373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:705c::/34

    Signature Algorithm: sha256WithRSAEncryption
         68:37:ed:c5:8e:e7:83:ee:d1:ef:51:30:63:17:7c:02:0b:17:
         66:5f:c1:f9:aa:74:75:51:7b:82:55:19:36:0c:df:8c:2d:ee:
         46:e4:1f:73:18:21:2a:4c:f7:54:30:42:fa:b2:f1:67:74:42:
         74:5a:d4:ee:d4:0a:28:72:e9:a2:df:82:fe:17:d2:c4:24:b9:
         a1:bd:dd:a6:8a:d5:af:3f:c9:8d:80:8b:23:7b:c4:8e:9a:8b:
         c5:f0:d4:93:12:55:a2:f9:2e:0e:46:f3:51:b3:3a:66:c4:34:
         86:47:11:bc:de:f0:ef:57:3d:71:d9:30:7c:9c:59:52:7e:2f:
         4e:7c:5c:38:f7:37:62:c5:66:74:a1:9f:7d:d9:23:85:65:38:
         a2:2b:d1:01:20:91:ac:bd:b5:d4:47:ff:6b:00:96:1f:46:d7:
         c4:d8:9b:2d:d1:36:17:60:b2:25:b5:66:c5:59:49:dd:33:6e:
         97:0c:f9:ac:18:4c:2e:24:2b:3a:81:66:63:7e:c9:e1:de:ee:
         c7:8b:31:c8:2b:87:66:55:0e:3a:ec:5e:69:3f:a2:f6:a3:61:
         63:9a:1b:63:78:62:ce:3f:f7:eb:c4:ac:57:19:b4:f3:48:9d:
         e7:a3:f2:00:e9:aa:7c:c7:91:2b:f5:66:29:81:24:21:c7:a9:
         de:31:5d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org