Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a383030303a3a2f33342d3334203d3e20323731323531.roa
File:                     323830343a373839303a383030303a3a2f33342d3334203d3e20323731323531.roa (raw, json)
Hash identifier:          F/4adIuFDLQhqJaBhSB0cRRs15Kx/bYNQkKSk3SM3Ok=
Subject key identifier:   E2:C4:53:27:3A:F8:E8:E5:AB:24:BF:4F:E5:F7:14:50:85:50:00:54
Certificate issuer:       /CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
Certificate serial:       3EF737FDD04EB0F640EAA4C83120A3355CB5BDE3
Authority key identifier: 28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a383030303a3a2f33342d3334203d3e20323731323531.roa
Signing time:             Fri 17 Nov 2023 17:36:39 +0000
ROA not before:           Fri 17 Nov 2023 17:31:39 +0000
ROA not after:            Fri 15 Nov 2024 17:36:39 +0000
asID:                     271251
IP address blocks:        2804:7890:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f7:37:fd:d0:4e:b0:f6:40:ea:a4:c8:31:20:a3:35:5c:b5:bd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
        Validity
            Not Before: Nov 17 17:31:39 2023 GMT
            Not After : Nov 15 17:36:39 2024 GMT
        Subject: CN=E2C453273AF8E8E5AB24BF4FE5F7145085500054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:3b:84:a7:d1:18:cc:3f:16:04:7c:22:d6:
                    b3:8a:ab:4d:e1:d1:26:f9:8e:1b:c7:b9:52:37:03:
                    46:47:13:72:b8:cc:56:dd:a6:64:94:5b:8d:4e:05:
                    53:68:01:e2:b6:c0:e2:de:1b:d1:36:b2:3a:94:aa:
                    b9:5a:9c:e7:b4:ff:68:2b:b2:97:e6:e1:d3:1c:a9:
                    e7:02:b5:2a:20:16:eb:f3:3a:46:58:6e:86:37:61:
                    79:3b:00:82:50:3e:72:d7:b6:1a:d1:7d:57:38:d5:
                    45:9b:c0:6e:96:f5:d3:3c:d5:2e:bd:c2:81:47:c4:
                    a5:4b:40:7a:bd:23:fd:bd:47:ce:b4:3a:a5:07:5a:
                    a5:4c:e1:7a:e5:5f:d8:89:63:b6:b9:bb:d2:de:01:
                    e6:55:38:aa:64:ec:e2:e7:8f:27:6b:95:fe:ae:d8:
                    8e:9e:f8:41:89:be:78:aa:0f:1c:ea:5b:c7:f3:5a:
                    d2:ae:43:7e:f6:94:b2:cf:56:87:04:29:88:a0:51:
                    57:f8:22:4e:59:06:66:f9:62:de:76:18:08:bc:35:
                    67:97:52:c3:b5:b7:60:c1:1e:e2:c0:bb:55:c7:10:
                    11:7c:66:0c:2e:07:9a:01:53:7f:4f:b7:fb:00:71:
                    e3:aa:28:88:2b:f4:85:e8:2c:cf:74:ec:7b:c5:61:
                    77:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C4:53:27:3A:F8:E8:E5:AB:24:BF:4F:E5:F7:14:50:85:50:00:54
            X509v3 Authority Key Identifier:
                keyid:28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a383030303a3a2f33342d3334203d3e20323731323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7890:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:fa:a5:89:b0:b4:79:d3:37:5e:7f:42:32:57:e7:d9:99:f2:
         5f:90:93:92:1f:ec:cc:70:5b:f2:01:26:4d:77:b1:58:9c:39:
         69:81:29:47:67:26:1a:32:30:a1:50:56:20:37:bc:92:41:b2:
         ed:10:c7:b4:a8:e8:20:e6:e5:ae:b3:05:1c:af:5e:bf:4c:95:
         8d:2f:6b:9c:ed:f7:fc:df:68:10:e4:6f:f6:40:bb:1a:fb:24:
         9e:55:69:0f:40:ab:2c:19:64:ea:c2:ca:a0:21:c2:28:9f:09:
         3a:c4:bd:96:26:b1:dd:0a:22:9c:ee:79:48:57:c6:21:60:30:
         01:11:f0:11:47:2a:b6:86:6e:c6:f6:e6:d8:e5:3c:0a:86:89:
         fb:ab:85:52:9d:34:71:b3:42:3b:a6:50:df:d3:20:55:81:37:
         95:6d:9c:56:7f:32:c4:43:d2:79:6d:47:78:36:7d:5a:86:61:
         46:47:74:87:9c:89:75:d4:e9:e1:b9:93:9d:98:1d:41:9b:ea:
         96:6d:b0:be:af:9f:b9:6d:8b:62:b6:f2:35:c0:d3:30:9f:99:
         d0:eb:03:01:ad:43:2a:05:23:14:61:28:92:33:44:e9:46:71:
         cb:da:4d:b3:9f:90:98:e1:ad:23:e6:01:59:ae:7d:f7:12:36:
         71:1d:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org