Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a383030303a3a2f33332d3333203d3e20323638383438.roa
File:                     323830343a356237633a383030303a3a2f33332d3333203d3e20323638383438.roa (raw, json)
Hash identifier:          d2qPBsXu7XztMra311EtlyButN3h4uppu3xCeVtUXxI=
Subject key identifier:   63:07:36:EC:B3:2D:00:AC:B5:40:2D:37:0E:88:BE:B3:8A:67:D8:34
Certificate issuer:       /CN=331A86B1CFCE5CD752521AD91A88036C23D00242
Certificate serial:       647E8DDBD55E29D1B1DF85D448E105AA9F91E482
Authority key identifier: 33:1A:86:B1:CF:CE:5C:D7:52:52:1A:D9:1A:88:03:6C:23:D0:02:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/331A86B1CFCE5CD752521AD91A88036C23D00242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a383030303a3a2f33332d3333203d3e20323638383438.roa
Signing time:             Thu 14 Sep 2023 16:00:00 +0000
ROA not before:           Thu 14 Sep 2023 15:55:00 +0000
ROA not after:            Thu 12 Sep 2024 16:00:00 +0000
asID:                     268848
IP address blocks:        2804:5b7c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7e:8d:db:d5:5e:29:d1:b1:df:85:d4:48:e1:05:aa:9f:91:e4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331A86B1CFCE5CD752521AD91A88036C23D00242
        Validity
            Not Before: Sep 14 15:55:00 2023 GMT
            Not After : Sep 12 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:87:12:a2:fd:ce:9a:5c:e6:1f:1c:30:48:
                    03:ce:71:66:4f:f7:ae:3d:17:7c:38:e2:d2:f6:f6:
                    a1:49:e6:41:02:73:2f:66:8b:48:26:ca:59:d3:e3:
                    2c:29:57:de:b0:78:71:42:65:39:e4:83:81:67:d9:
                    07:16:6e:e4:04:3e:62:fd:45:6e:af:16:3b:25:63:
                    6e:76:f9:d2:bc:39:38:d4:e0:b4:44:d1:f0:bf:b7:
                    b5:14:ca:3c:c5:28:32:87:63:f4:02:9f:81:41:4f:
                    e6:cc:36:21:f2:8a:79:62:f5:91:75:e2:a3:94:c8:
                    94:e4:db:5c:a7:ea:90:a5:da:3e:45:f3:45:67:73:
                    ad:39:49:ac:0d:15:78:48:64:3e:5f:15:89:31:75:
                    55:c4:5d:c8:91:0e:06:8b:d6:68:2c:1b:4d:9d:7e:
                    c2:ea:df:ad:7c:7e:6c:76:bc:02:93:61:98:0b:33:
                    d2:35:3c:c0:d7:41:85:47:0b:fb:d0:1e:62:32:db:
                    d1:d7:de:5d:b3:b5:20:00:a9:32:4d:75:1f:be:71:
                    10:4c:a4:52:24:bf:a0:41:c3:4f:19:ba:6a:46:37:
                    43:0c:17:c4:92:c8:49:4b:ae:8e:01:9c:6f:22:54:
                    d3:9a:a1:6e:7c:41:ee:2d:6a:0c:06:62:ea:52:37:
                    ac:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:07:36:EC:B3:2D:00:AC:B5:40:2D:37:0E:88:BE:B3:8A:67:D8:34
            X509v3 Authority Key Identifier:
                keyid:33:1A:86:B1:CF:CE:5C:D7:52:52:1A:D9:1A:88:03:6C:23:D0:02:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/331A86B1CFCE5CD752521AD91A88036C23D00242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/331A86B1CFCE5CD752521AD91A88036C23D00242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a383030303a3a2f33332d3333203d3e20323638383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b7c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1d:32:e4:da:73:20:df:66:ef:c5:e5:72:75:e9:86:5d:84:90:
         d0:50:59:bd:24:5b:0d:12:b7:bd:50:d9:72:b3:a5:30:fc:93:
         8e:55:dd:dd:98:26:64:16:fa:4a:8b:2e:8f:bb:d1:d1:8b:f5:
         f2:f1:2c:70:cc:a7:33:73:3e:1a:91:8c:c8:cc:4b:0b:f4:e1:
         f1:ca:0e:4e:0a:5c:12:f5:f6:8a:32:4f:19:6b:7b:9c:74:20:
         39:ef:14:f2:50:85:c7:e6:b6:16:7b:37:ca:09:16:22:3a:d7:
         12:f7:c3:6a:b6:7b:90:19:4f:7d:a3:14:bf:d5:41:a5:5c:e3:
         15:27:7a:c0:24:ea:29:fa:1b:8b:1d:dc:c6:26:5b:ef:79:b7:
         3b:96:cd:94:38:33:0c:ce:59:ab:93:6a:f9:c5:62:81:94:75:
         1d:56:4d:b0:6a:43:fe:fa:44:b2:f6:92:9a:11:de:d8:f2:b9:
         d0:2d:51:eb:bd:3a:4d:c0:cb:d3:fc:c5:8f:a1:18:a8:e0:f0:
         b3:72:9d:4b:b2:2b:14:f3:c6:72:d4:dd:33:56:e2:55:9b:95:
         90:47:c2:ac:ad:d6:9d:ac:75:26:bf:94:0c:2d:a5:b4:f2:b5:
         ce:03:91:6d:e1:8b:1a:0f:1a:7b:f5:cc:15:dd:18:b4:44:aa:
         50:77:3c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org