Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a3a2f33332d3333203d3e20323638363531.roa
File:                     323830343a353437343a3a2f33332d3333203d3e20323638363531.roa (raw, json)
Hash identifier:          WPiZ2Vkb1bv0NckenAmn+M8wXONy7KttsU7CD9gA9Y8=
Subject key identifier:   3C:83:67:EA:8F:89:77:0B:D9:28:FD:A6:F1:58:A8:08:05:78:46:AF
Certificate issuer:       /CN=D63F65BC868A989F5016FC5F923857D26EE2A068
Certificate serial:       70CDDA4E2BA618D353C733CFFEA2EC557099FE12
Authority key identifier: D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a3a2f33332d3333203d3e20323638363531.roa
Signing time:             Sun 07 Apr 2024 17:00:00 +0000
ROA not before:           Sun 07 Apr 2024 16:55:00 +0000
ROA not after:            Sun 06 Apr 2025 17:00:00 +0000
asID:                     268651
IP address blocks:        2804:5474::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:cd:da:4e:2b:a6:18:d3:53:c7:33:cf:fe:a2:ec:55:70:99:fe:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63F65BC868A989F5016FC5F923857D26EE2A068
        Validity
            Not Before: Apr  7 16:55:00 2024 GMT
            Not After : Apr  6 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:15:77:ab:25:6b:38:28:bc:15:2c:47:2e:1f:
                    4d:af:d0:03:d2:f8:a9:ff:61:0f:1e:23:ce:7c:8a:
                    27:d2:32:f3:73:1e:ba:be:f3:df:45:a8:5e:84:d6:
                    bf:51:bc:c7:0c:65:7a:c4:a4:17:4e:5d:ef:6e:cc:
                    cb:6a:9f:d7:73:eb:39:bc:0c:9a:87:da:78:3e:b6:
                    37:ad:d7:3f:d9:95:b8:86:aa:6f:c7:e5:58:a3:20:
                    98:4b:6e:06:dc:22:b3:6d:63:e6:82:d8:4b:2a:56:
                    cf:ab:84:89:64:e1:22:86:62:f2:29:e2:21:62:a1:
                    61:ca:54:6d:50:c0:5a:de:07:03:bf:83:06:f5:12:
                    30:10:c5:2d:b8:31:ae:e6:af:cf:92:e1:8e:01:b1:
                    a9:99:c5:de:db:65:f0:d2:a4:70:82:e9:09:b0:b8:
                    05:ab:3d:e2:1f:91:44:78:f2:26:8f:c9:2c:3a:ff:
                    eb:d8:ab:11:b7:4f:6f:98:b8:3c:10:6f:39:e4:85:
                    40:ce:d2:7d:3d:1f:d7:76:70:58:16:86:d9:15:5e:
                    a9:b5:ac:66:01:5c:6e:95:19:6b:4e:4c:a9:47:ba:
                    ad:e8:8b:91:45:0d:6c:db:86:e2:f2:b1:a7:dc:13:
                    81:fb:db:df:69:58:cd:ce:50:9b:92:44:19:73:a2:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:83:67:EA:8F:89:77:0B:D9:28:FD:A6:F1:58:A8:08:05:78:46:AF
            X509v3 Authority Key Identifier:
                keyid:D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/D63F65BC868A989F5016FC5F923857D26EE2A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a3a2f33332d3333203d3e20323638363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5474::/33

    Signature Algorithm: sha256WithRSAEncryption
         94:a1:c9:8e:47:de:18:5d:00:94:f6:c9:c6:7e:fd:a8:e6:1a:
         6f:6f:71:5e:74:9f:00:94:9d:34:9b:11:03:eb:06:61:aa:3f:
         54:cc:c3:22:45:1c:e3:e8:c1:90:0d:30:f5:11:41:dd:7d:16:
         bd:33:db:ea:d6:bd:d1:4d:b2:6f:33:b0:ec:c9:b9:ab:09:c9:
         82:58:71:20:fb:09:11:9c:45:2d:f8:bc:c4:6e:45:51:cf:66:
         6b:66:e8:4e:c6:62:aa:c6:08:36:27:a8:ee:5c:3a:4d:05:95:
         03:61:40:a9:8d:c0:36:e7:68:ac:56:6e:af:9b:b8:6c:cb:88:
         f0:53:ba:75:99:85:39:bd:20:88:94:88:6e:d6:a1:d6:9e:17:
         59:94:1f:7e:45:b5:73:4b:93:f1:85:46:99:92:23:41:f5:29:
         fe:a7:ef:5a:37:55:c6:4b:62:45:7f:fe:2b:d9:4c:c1:6b:29:
         71:84:79:09:dd:91:94:d6:19:7f:c9:4a:c5:19:57:fc:b8:61:
         08:62:02:27:8f:7a:bc:2c:fd:f2:af:3d:ad:c4:78:8f:f0:15:
         3b:b5:0e:14:b0:f8:73:6c:18:2e:35:12:d5:64:a6:77:e7:52:
         e9:32:b8:6d:92:7e:aa:30:d2:d5:ef:33:6f:cb:81:22:13:97:
         fd:5b:8f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org