Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33322d3332203d3e20323635343835.roa
File:                     323830343a333464633a3a2f33322d3332203d3e20323635343835.roa (raw, json)
Hash identifier:          vNPfk/A1u6F12B5DUvxDL06OtNKznfzypru73szVSfA=
Subject key identifier:   06:54:BB:F1:DD:69:13:4B:D2:0A:81:E0:23:2C:39:D7:BA:FE:E9:FC
Certificate issuer:       /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial:       2E57026B23234BD44A8865C9693DD231EFB65DA3
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33322d3332203d3e20323635343835.roa
Signing time:             Fri 23 Feb 2024 23:40:58 +0000
ROA not before:           Fri 23 Feb 2024 23:35:58 +0000
ROA not after:            Fri 21 Feb 2025 23:40:58 +0000
asID:                     265485
IP address blocks:        2804:34dc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:57:02:6b:23:23:4b:d4:4a:88:65:c9:69:3d:d2:31:ef:b6:5d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
        Validity
            Not Before: Feb 23 23:35:58 2024 GMT
            Not After : Feb 21 23:40:58 2025 GMT
        Subject: CN=0654BBF1DD69134BD20A81E0232C39D7BAFEE9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:82:e0:1d:fc:fd:97:36:73:ec:3a:79:18:6d:
                    d6:d7:4b:ad:a8:cf:a9:31:43:62:fc:a0:7e:f9:65:
                    26:2d:f4:45:fa:1a:49:fe:a6:d9:29:7f:5c:70:65:
                    56:b6:6b:51:1f:92:14:cc:94:a1:69:ac:ad:7e:fb:
                    05:54:7e:c5:22:dd:ef:93:97:8e:e0:ff:5d:de:5a:
                    26:24:ce:72:70:f4:4b:68:0d:37:85:ec:6f:a9:64:
                    ef:7f:37:51:12:6f:db:2b:3c:aa:30:3f:31:cb:64:
                    97:ae:5a:c0:db:f0:62:2c:e0:ab:7b:ca:75:4e:2f:
                    23:1b:85:f5:77:1e:c3:de:da:17:e0:b6:f3:0f:89:
                    4b:24:fc:5d:fb:90:f5:30:bb:9c:b7:85:32:71:52:
                    29:41:db:b3:bd:50:c6:e3:30:33:02:b1:cc:16:cd:
                    af:7f:37:d9:5f:eb:9e:f8:23:e3:96:6d:0a:8e:cf:
                    ca:4c:74:95:c6:25:a7:9c:a7:bb:53:89:8b:7f:73:
                    77:cf:95:fe:e7:c4:46:d2:f2:95:c0:d5:bf:9a:11:
                    b4:3d:49:4f:59:b1:6b:26:01:28:9c:58:f2:dc:84:
                    57:f4:75:16:1e:b9:83:16:a4:ef:a8:c7:ae:96:d3:
                    cc:03:9a:09:b2:dd:5f:48:11:5c:04:8e:ab:69:67:
                    5e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:54:BB:F1:DD:69:13:4B:D2:0A:81:E0:23:2C:39:D7:BA:FE:E9:FC
            X509v3 Authority Key Identifier:
                keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33322d3332203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:f5:d2:95:40:e3:2a:3f:9f:89:08:49:a6:ee:23:6e:cb:aa:
         c3:67:71:34:f2:11:37:54:0e:50:ac:8c:75:f2:48:06:28:4a:
         d2:bf:7f:8d:80:ff:2f:c2:8a:ba:51:f9:47:64:af:f5:2f:37:
         3a:75:3a:8c:e0:5d:ca:9d:1b:0b:58:69:78:80:f7:93:e9:3a:
         ad:73:ba:16:f2:88:04:76:94:54:75:c5:ba:72:47:20:b2:d7:
         46:b6:94:17:dd:04:51:0b:2b:68:94:61:d5:1a:2e:31:78:5c:
         c3:ef:eb:f2:7a:d4:89:aa:41:42:e0:8c:7a:86:4c:56:da:73:
         2a:84:43:60:5f:ce:fb:1f:92:1a:97:ce:85:21:cb:36:8c:82:
         17:2b:62:2f:b3:9c:62:76:09:f9:db:2d:e8:0a:63:7f:f9:91:
         f3:4e:08:12:21:f9:cf:02:5a:28:35:40:40:b5:f4:d2:db:21:
         53:9e:09:1e:02:25:e9:4b:7b:04:f1:57:ea:ce:bf:4e:d5:33:
         4c:08:76:b5:d5:5c:78:3d:8f:11:e5:61:56:a5:d9:cf:00:63:
         24:00:37:b6:df:50:e7:62:5d:6c:a9:55:6c:a7:50:25:32:40:
         71:24:94:bf:1b:d2:d6:65:52:54:f2:89:44:e6:28:4e:dc:61:
         44:9b:3c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org