Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a3536383a3a2f33322d313238203d3e20323632353134.roa
File:                     323830343a3536383a3a2f33322d313238203d3e20323632353134.roa (raw, json)
Hash identifier:          ZV31Pc8j66cIIumJ4rBUBlxDvQWwiVIW3LkPn+B5CQk=
Subject key identifier:   FB:68:37:1B:DE:0B:EA:E7:F2:B6:F8:C1:F4:33:4A:2F:CC:AF:D7:CB
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       69973DB5C96DE4C6A2E1C96A6C6B1CD8E2769530
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a3536383a3a2f33322d313238203d3e20323632353134.roa
Signing time:             Mon 27 Mar 2023 17:40:58 +0000
ROA not before:           Mon 27 Mar 2023 17:35:58 +0000
ROA not after:            Mon 25 Mar 2024 17:40:58 +0000
asID:                     262514
IP address blocks:        2804:568::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:97:3d:b5:c9:6d:e4:c6:a2:e1:c9:6a:6c:6b:1c:d8:e2:76:95:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Mar 27 17:35:58 2023 GMT
            Not After : Mar 25 17:40:58 2024 GMT
        Subject: CN=FB68371BDE0BEAE7F2B6F8C1F4334A2FCCAFD7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:80:14:9e:e1:20:b1:12:fc:30:a3:d8:2c:
                    eb:60:70:71:af:0b:5a:97:f9:49:0e:cd:91:7b:c2:
                    97:51:5d:4c:0d:74:06:36:8f:e0:ba:50:d0:db:3c:
                    ed:7e:af:03:73:2b:e1:65:dd:fb:6b:4d:e6:b7:10:
                    7c:e8:a5:78:90:0e:bd:4c:39:c9:fd:df:ae:6b:be:
                    55:df:79:e9:8c:d4:db:96:89:ea:ff:f6:21:5c:36:
                    aa:20:fa:1a:16:a5:26:17:6e:a8:97:5b:b5:d8:b2:
                    f5:03:43:35:84:48:49:59:60:29:39:7f:6c:eb:bc:
                    8b:f3:49:68:e8:ef:86:21:ac:15:ba:01:02:c0:bb:
                    41:55:cb:d5:a7:e0:d4:3e:86:9a:28:49:49:83:13:
                    bf:7d:ae:f3:ff:ef:78:84:51:94:30:46:b6:38:9e:
                    af:99:c4:b3:d4:2d:b1:5f:f8:25:d9:20:be:24:b4:
                    53:29:32:46:dd:b9:c8:2b:2d:c9:73:de:10:67:32:
                    fb:73:ba:1a:45:f5:6f:1d:91:39:07:01:60:d6:28:
                    e0:27:75:fb:7e:99:7f:35:f2:68:d8:c2:8b:35:09:
                    27:31:44:f5:ad:cc:e4:bf:23:0d:be:2f:1c:52:80:
                    0f:d7:1e:0c:d2:ff:bf:c0:25:d0:4d:ba:45:2c:cd:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:68:37:1B:DE:0B:EA:E7:F2:B6:F8:C1:F4:33:4A:2F:CC:AF:D7:CB
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a3536383a3a2f33322d313238203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:568::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:e1:30:c8:1d:7c:2c:55:61:9d:bf:8c:35:1a:0e:8b:0f:91:
         91:49:8a:f5:ea:5c:37:ca:66:98:05:06:6a:b0:19:f8:a4:52:
         ba:9f:36:25:11:6f:43:c1:fc:ab:15:9c:64:f1:92:07:75:5a:
         cb:2c:10:63:8c:4e:e7:4c:22:36:b6:cc:3f:1b:54:f2:ba:f7:
         3d:40:37:bf:b9:92:3d:7a:13:c7:65:2d:f3:de:7b:07:6d:35:
         4e:e2:e0:74:a4:c2:2b:f7:85:59:19:f0:30:58:2b:0c:f3:6b:
         e6:47:d7:14:35:11:88:58:2b:83:9d:27:b4:ce:92:c6:cf:aa:
         81:28:61:2e:da:78:7e:08:e8:76:e8:b9:8d:66:e7:b0:37:89:
         34:3c:4a:b8:6d:0a:ef:25:b8:75:6b:a6:d4:03:f2:09:36:a6:
         e6:ab:e4:36:f9:35:53:26:ef:9d:53:ef:56:e1:b4:26:65:45:
         01:67:d4:6e:ae:9d:c9:aa:76:20:27:a8:6d:b5:2c:cf:c1:08:
         86:b9:7e:d6:a2:33:dc:1f:ec:8f:3b:69:19:55:79:5c:dd:e6:
         e3:e3:e5:77:aa:ba:fa:cb:a1:1c:30:f5:15:0f:8c:c7:d6:50:
         fb:b4:1f:cd:eb:51:31:49:18:2f:03:83:f3:4e:dd:2d:ae:25:
         1a:10:cc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org