Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a643830303a3a2f33372d3337203d3e20323637303237.roa
File:                     323830343a343730383a643830303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          UfEuQ8S5fOdSP4YnQwLsLhn41tXbUtQQt7NZufwGKmw=
Subject key identifier:   A4:1F:B3:81:FF:A7:6D:C9:DF:A2:CF:E7:48:6D:E6:C3:9C:7A:8F:C8
Certificate issuer:       /CN=B776754A2C8B100218B061AA79BE9186F191500D
Certificate serial:       2559F7EFB23006F8730B1B42710152DC8E39C2BF
Authority key identifier: B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a643830303a3a2f33372d3337203d3e20323637303237.roa
Signing time:             Sat 11 Nov 2023 20:59:22 +0000
ROA not before:           Sat 11 Nov 2023 20:54:22 +0000
ROA not after:            Sat 09 Nov 2024 20:59:22 +0000
asID:                     267027
IP address blocks:        2804:4708:d800::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:59:f7:ef:b2:30:06:f8:73:0b:1b:42:71:01:52:dc:8e:39:c2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B776754A2C8B100218B061AA79BE9186F191500D
        Validity
            Not Before: Nov 11 20:54:22 2023 GMT
            Not After : Nov  9 20:59:22 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:59:34:13:30:01:86:8d:fc:2f:35:42:f8:6f:
                    c2:25:df:0e:16:be:37:75:83:59:8d:43:eb:46:af:
                    92:24:8a:f4:bd:22:3b:d2:45:9d:d0:f0:44:fe:8f:
                    a1:24:d5:6e:79:b9:e9:2d:0d:d5:4b:5b:d1:d6:eb:
                    df:88:d9:80:30:bd:d8:bf:c1:42:5b:2f:d5:d1:18:
                    5b:91:84:11:9e:8e:85:9e:93:33:d7:8c:2b:23:0b:
                    1c:4c:f4:57:da:e0:aa:03:df:91:e9:ef:d8:fc:bd:
                    f9:20:a8:e8:11:3c:83:23:36:e6:18:15:bc:cd:0d:
                    43:9f:95:d9:9b:22:4f:d1:b8:95:bb:4c:b6:2a:7c:
                    2d:4e:02:db:ac:3d:b3:ae:7c:75:b3:fc:07:08:a8:
                    c1:00:e7:a6:c1:cf:29:49:c2:39:2e:af:ca:62:f4:
                    bc:00:93:29:45:73:ea:df:d2:72:63:5d:2a:9e:d2:
                    dc:ed:55:b8:4e:ce:cf:58:04:31:ee:a4:76:6d:77:
                    34:ac:2a:cd:c8:31:4a:d9:24:d9:d5:6a:aa:9b:36:
                    41:57:7c:f4:99:80:c4:12:50:fd:3f:d5:56:b1:b5:
                    d3:72:6a:67:0f:6b:9b:d7:4d:dc:55:2c:f5:e0:57:
                    5c:8d:da:e9:3f:f9:10:ea:59:a9:5f:d3:4b:a6:b7:
                    c4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1F:B3:81:FF:A7:6D:C9:DF:A2:CF:E7:48:6D:E6:C3:9C:7A:8F:C8
            X509v3 Authority Key Identifier:
                keyid:B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/B776754A2C8B100218B061AA79BE9186F191500D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a643830303a3a2f33372d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:d800::/37

    Signature Algorithm: sha256WithRSAEncryption
         11:08:59:a5:cf:a9:55:06:15:d0:b6:34:c8:ea:f1:93:30:31:
         eb:34:06:18:e9:aa:85:02:4c:f3:b8:55:2e:a0:bc:d5:8d:7b:
         e1:70:32:d3:78:63:1f:90:5e:af:5d:4d:2b:36:eb:83:7d:b3:
         42:8b:f6:71:46:a4:a6:02:90:ae:33:3a:bd:12:73:b4:8d:c0:
         03:32:78:cf:e4:9d:e3:a3:a9:41:cb:03:6e:84:c1:c3:9e:ce:
         6b:6e:1b:c0:2b:21:5a:27:7e:75:22:f3:cb:17:94:a8:da:c0:
         ec:36:83:c1:37:e4:73:7d:20:18:15:63:9f:45:29:1e:8e:69:
         1b:3b:b5:1d:64:3d:71:87:01:51:ce:4f:31:0a:74:81:e2:55:
         cc:6c:20:c1:ab:ed:1e:33:ef:52:0b:18:71:7e:f4:ec:ad:5b:
         bc:e5:40:91:e7:f7:fd:6a:0f:05:71:1c:0a:f1:50:ac:8c:95:
         da:d4:20:70:9c:54:a3:d6:34:27:95:51:5a:ad:fc:cf:e9:66:
         ca:19:fa:8f:93:aa:3d:e9:98:b4:14:f7:c3:8b:7c:e8:0c:b1:
         fb:2b:b4:c2:29:6c:32:93:0e:6f:dd:96:ff:59:41:72:07:40:
         07:b4:17:aa:ae:08:45:b1:99:47:f5:f4:25:e7:07:39:53:87:
         09:d2:35:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org