Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a343030303a3a2f33342d3334203d3e20323638363136.roa
File:                     323830343a353365633a343030303a3a2f33342d3334203d3e20323638363136.roa (raw, json)
Hash identifier:          xEr2vPrWrICXvGH9X6MzrXgnu3yhueXm3iVV0IPTw7o=
Subject key identifier:   88:21:B2:6E:6B:2B:C9:1F:A0:1E:E4:C1:CE:AA:C7:28:13:CD:CF:37
Certificate issuer:       /CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
Certificate serial:       4B61CB57FBD922FDBF66F863346B499EDA621DC6
Authority key identifier: 42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a343030303a3a2f33342d3334203d3e20323638363136.roa
Signing time:             Tue 05 Sep 2023 14:04:37 +0000
ROA not before:           Tue 05 Sep 2023 13:59:37 +0000
ROA not after:            Tue 03 Sep 2024 14:04:37 +0000
asID:                     268616
IP address blocks:        2804:53ec:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:61:cb:57:fb:d9:22:fd:bf:66:f8:63:34:6b:49:9e:da:62:1d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
        Validity
            Not Before: Sep  5 13:59:37 2023 GMT
            Not After : Sep  3 14:04:37 2024 GMT
        Subject: CN=8821B26E6B2BC91FA01EE4C1CEAAC72813CDCF37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b4:bb:74:b8:73:16:2b:f8:6a:32:ad:68:9a:
                    a1:34:66:f8:a6:b9:b9:4b:b5:4e:ad:7e:69:a1:3f:
                    1d:41:6d:3e:53:3c:7c:22:a7:61:ee:f4:55:f0:8a:
                    f4:a7:d2:05:ba:fe:57:11:63:a2:e3:73:72:ad:99:
                    a0:63:2d:11:74:96:c2:61:19:6f:f1:b4:59:dc:30:
                    5e:17:69:50:e0:19:f0:30:14:69:d8:85:af:95:66:
                    20:6d:e1:25:a6:27:b4:a2:78:c2:0b:73:7c:5e:db:
                    60:57:b2:54:50:f2:66:b2:5d:bf:05:d9:cd:1a:cf:
                    aa:dd:32:d6:f1:21:e8:46:71:8e:39:80:f9:ed:91:
                    f7:9f:ca:fe:9d:5b:b9:19:3d:fb:13:66:94:bf:9d:
                    ae:c2:a1:cf:18:3f:37:af:20:b5:e4:b6:e4:39:5a:
                    e0:d0:2f:c2:73:50:13:ad:8a:1a:d3:9e:55:49:bd:
                    ac:46:47:ce:76:54:21:54:00:6a:7e:b3:91:f7:33:
                    a4:03:17:75:80:ca:47:8b:25:21:20:10:3f:ba:74:
                    9d:1b:55:20:d6:99:ac:eb:dd:0e:7c:ce:d0:d6:10:
                    0e:a6:11:93:ab:90:07:93:d9:01:78:f7:63:3a:e8:
                    97:cb:10:53:f0:44:02:43:f6:a4:43:b5:fe:a5:46:
                    06:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:21:B2:6E:6B:2B:C9:1F:A0:1E:E4:C1:CE:AA:C7:28:13:CD:CF:37
            X509v3 Authority Key Identifier:
                keyid:42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a343030303a3a2f33342d3334203d3e20323638363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53ec:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         64:48:cf:e8:28:5c:1f:19:ab:fb:07:ec:fe:cb:45:f7:84:ae:
         82:d8:b6:bb:6e:50:66:a6:05:a6:88:9b:39:8b:15:ce:92:c0:
         11:da:61:74:62:a8:a4:99:58:be:7e:a0:2a:3d:66:69:aa:16:
         20:8c:ce:0a:0f:8b:91:c2:3c:3d:e3:3c:7f:68:6f:04:68:04:
         53:69:7d:7e:fd:9c:48:44:40:29:d3:dd:93:8b:30:bc:81:83:
         d3:af:e5:a8:b7:af:bb:69:82:37:61:f6:c6:19:33:6e:ee:fd:
         c6:df:ac:08:03:1c:be:e1:cb:90:81:43:65:f7:52:6b:24:81:
         ec:7a:9f:d8:e8:1b:f0:dc:9f:2c:0e:20:ad:4e:4b:a4:3d:00:
         94:60:c7:5e:a9:d8:ea:c5:ad:65:32:20:ad:84:0d:a7:61:af:
         03:df:9b:c8:f4:97:f7:9d:54:a2:1d:e2:55:3f:2b:84:d7:93:
         60:6a:bf:8b:07:39:52:0d:b2:ba:81:ab:d8:a7:dd:17:5a:97:
         d0:8f:bc:31:63:c2:de:cc:64:ed:56:52:ca:71:98:9c:99:44:
         e9:f1:2d:6c:3d:3c:2e:1f:ad:d2:41:25:b6:ca:cf:f7:ab:e1:
         47:da:72:c6:8b:6d:72:c0:a3:40:18:40:96:c5:60:26:43:ea:
         8a:17:87:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org