Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a633030303a3a2f33342d3334203d3e20323731323531.roa
File:                     323830343a373839303a633030303a3a2f33342d3334203d3e20323731323531.roa (raw, json)
Hash identifier:          qfEFxutGij9aByxkdQM9vDOwukANMY/Vr7Z7+FbQKYs=
Subject key identifier:   33:E0:B6:76:58:FC:C0:4C:54:F9:62:18:41:42:0C:A4:96:CB:1E:B1
Certificate issuer:       /CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
Certificate serial:       2049B5B87C9EEF6FDA6C7FE1543897377A726110
Authority key identifier: 28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a633030303a3a2f33342d3334203d3e20323731323531.roa
Signing time:             Fri 17 Nov 2023 17:36:39 +0000
ROA not before:           Fri 17 Nov 2023 17:31:39 +0000
ROA not after:            Fri 15 Nov 2024 17:36:39 +0000
asID:                     271251
IP address blocks:        2804:7890:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:49:b5:b8:7c:9e:ef:6f:da:6c:7f:e1:54:38:97:37:7a:72:61:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
        Validity
            Not Before: Nov 17 17:31:39 2023 GMT
            Not After : Nov 15 17:36:39 2024 GMT
        Subject: CN=33E0B67658FCC04C54F9621841420CA496CB1EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:0e:54:ca:d5:2f:a0:5d:e3:9e:8c:52:2c:
                    64:5b:a8:8b:e3:cf:e8:a7:7c:2c:6f:2a:a6:60:2f:
                    5b:2b:e4:53:5b:ab:6d:bc:c2:0e:b0:a4:cf:aa:75:
                    ee:14:6f:84:87:4f:55:6e:70:29:f6:c5:27:e6:a2:
                    94:fc:5b:81:76:e5:73:db:2e:fc:46:d4:4c:4a:ad:
                    31:99:d3:87:87:54:c2:c9:77:a7:a8:88:ca:24:51:
                    a6:10:53:ef:91:9e:10:99:6b:6e:be:45:dc:5b:f6:
                    56:f3:47:f1:93:38:da:b4:84:a5:bd:f7:e2:fb:10:
                    3a:2a:f2:67:c0:9a:40:bc:64:6e:b4:9d:a3:37:8a:
                    89:0a:53:fc:9b:a1:b9:28:41:58:8c:63:c6:17:07:
                    20:b0:b4:3d:4a:2c:b5:4a:2e:1a:84:47:3c:15:88:
                    e9:52:e4:b6:48:97:bc:4c:1d:87:f9:44:2b:60:2b:
                    6e:68:27:dd:6c:c4:38:67:9e:c8:16:9e:8c:cc:b5:
                    39:2f:5f:56:2b:dc:b8:ec:bc:4c:d4:70:2a:74:62:
                    b4:b5:8a:b8:6f:b2:45:f0:5c:c9:d5:d9:fa:1f:76:
                    a4:8a:12:e2:a0:e0:7c:6a:6e:8a:4f:d9:72:ba:03:
                    dc:01:0e:1d:4d:14:f8:3b:38:41:f1:27:6b:6f:f1:
                    58:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E0:B6:76:58:FC:C0:4C:54:F9:62:18:41:42:0C:A4:96:CB:1E:B1
            X509v3 Authority Key Identifier:
                keyid:28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a633030303a3a2f33342d3334203d3e20323731323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7890:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         06:83:56:4c:8b:0d:6d:de:90:39:e2:00:31:9c:45:55:f4:46:
         bf:6a:75:45:a4:31:e4:6e:4e:96:5c:78:64:69:69:d5:3b:57:
         f5:68:7d:88:05:1b:2f:ba:fc:3c:6d:5b:54:21:4e:65:a7:a3:
         d3:f6:8b:df:58:e2:fd:ef:d0:3d:f5:40:9b:8a:12:7c:c9:08:
         fa:17:b3:b4:d7:93:b3:00:bd:d0:dd:d1:0d:e1:80:97:e3:51:
         64:d3:fd:cc:de:0d:d1:30:b4:0d:8f:48:af:9b:f7:aa:ab:ba:
         80:9e:42:e2:83:bc:88:55:7f:f3:b8:1c:40:ff:7a:94:c6:54:
         bd:7b:83:6b:12:e9:f2:2a:78:af:3c:7b:87:82:dc:10:f3:07:
         31:12:9d:7d:74:cc:bd:dd:2a:18:ea:0e:c5:1b:46:40:c7:7e:
         b1:1b:62:83:d1:f5:d9:4f:3e:b3:28:b1:dd:c6:36:f3:69:bb:
         3f:b4:20:87:bc:5b:5b:51:7c:b6:fc:6e:6a:56:93:48:6d:82:
         f7:9a:90:74:ca:94:ea:d3:a1:ee:6e:71:27:87:8b:15:1d:85:
         64:8f:75:cc:37:4a:ff:2a:10:ce:72:38:3f:e8:61:9e:78:fb:
         2d:04:51:6c:df:98:c5:48:26:37:c7:54:89:0d:4e:79:cc:b0:
         92:cf:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org