Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/323830343a313837303a3a2f33322d3334203d3e203631393332.roa
File:                     323830343a313837303a3a2f33322d3334203d3e203631393332.roa (raw, json)
Hash identifier:          pYsIv5/4P1kb1xIISPnpqpJYOdniJdbebPUJKuPLoBk=
Subject key identifier:   75:47:D1:DE:97:E7:79:C3:8A:23:41:09:AB:91:97:2C:95:82:0B:09
Certificate issuer:       /CN=DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907
Certificate serial:       665B3A08E8A820382F3BDF659F12774AFCB72713
Authority key identifier: DA:35:6B:6D:E9:FF:AE:56:64:C7:73:DD:2B:7E:A0:D6:18:6F:39:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/323830343a313837303a3a2f33322d3334203d3e203631393332.roa
Signing time:             Mon 23 Oct 2023 15:29:41 +0000
ROA not before:           Mon 23 Oct 2023 15:24:41 +0000
ROA not after:            Mon 21 Oct 2024 15:29:41 +0000
asID:                     61932
IP address blocks:        2804:1870::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5b:3a:08:e8:a8:20:38:2f:3b:df:65:9f:12:77:4a:fc:b7:27:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907
        Validity
            Not Before: Oct 23 15:24:41 2023 GMT
            Not After : Oct 21 15:29:41 2024 GMT
        Subject: CN=7547D1DE97E779C38A234109AB91972C95820B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:57:3d:53:de:6d:93:6f:34:b9:7d:5a:01:
                    51:e6:2a:42:ab:cc:89:ba:fa:11:f4:5a:27:2f:c3:
                    8a:73:7b:0f:3d:38:49:3e:af:d0:51:a2:13:c4:a7:
                    58:69:4c:d2:d7:ec:13:56:59:7d:0f:fd:7d:9f:fa:
                    8c:f8:f1:76:09:72:ee:b6:95:67:2b:15:09:0c:e8:
                    15:ac:f6:fd:db:47:a9:3d:6d:26:6a:ac:7b:ef:1c:
                    5c:e6:dd:ee:b3:ce:0d:91:60:83:e4:93:36:84:ba:
                    7c:25:5b:2b:bb:33:57:a3:f0:e5:e6:3d:39:db:da:
                    ad:4e:13:00:67:92:33:50:71:43:b0:e5:52:17:58:
                    04:0e:82:6b:1f:d4:f6:80:39:78:82:88:ef:ea:31:
                    59:84:45:17:62:7f:5e:3a:57:f0:63:5c:65:4f:b3:
                    83:19:b2:79:63:c4:0c:02:bd:19:9a:56:c4:38:04:
                    99:22:97:44:dc:0b:8c:3d:a8:cc:73:f9:53:80:b4:
                    07:c7:fb:9b:2f:d4:1c:62:fc:e4:72:10:6e:22:a4:
                    03:7d:07:14:b2:cd:d7:ef:30:37:e1:60:6c:d9:dd:
                    cf:1e:54:b1:25:78:0c:05:f4:88:0b:de:fa:6a:2a:
                    1c:22:70:7d:91:c3:9a:36:50:8e:f0:57:10:39:75:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:D1:DE:97:E7:79:C3:8A:23:41:09:AB:91:97:2C:95:82:0B:09
            X509v3 Authority Key Identifier:
                keyid:DA:35:6B:6D:E9:FF:AE:56:64:C7:73:DD:2B:7E:A0:D6:18:6F:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/323830343a313837303a3a2f33322d3334203d3e203631393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1870::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:07:1c:8b:24:ff:5c:12:00:b7:3e:98:03:cf:93:24:15:e8:
         86:5b:14:eb:ea:f2:ef:7f:d5:18:93:4a:40:bd:3a:54:b2:af:
         72:b0:be:a2:4c:df:3a:4e:cd:38:38:c7:67:bf:99:48:2c:24:
         89:3d:9f:d0:94:60:93:aa:8f:14:51:6e:fc:6f:30:8f:90:c7:
         6c:5f:1a:81:eb:13:93:a0:4b:b9:b5:ff:2e:c0:13:2b:de:61:
         ef:93:9e:cf:cf:87:83:31:a3:c0:10:d0:56:ff:67:ef:00:f3:
         e2:5f:38:a9:75:7c:0f:13:ae:fd:1d:e9:fb:3a:53:5b:ba:d5:
         86:f5:c9:23:58:53:4d:ac:19:af:b5:4e:a5:47:50:f9:05:e4:
         12:42:10:ca:cd:d2:56:32:64:da:4e:a6:a3:c4:e3:89:43:ad:
         ba:af:43:83:04:4a:46:5c:71:61:32:02:8c:f6:2f:3b:37:73:
         3d:81:39:f5:28:92:9f:3d:62:c6:de:ee:45:f4:5d:5a:2a:7d:
         5d:4b:ea:2e:c3:02:55:ae:21:36:42:29:ae:1c:e9:92:ca:51:
         e7:e0:8a:22:dc:0b:5b:56:ac:76:3f:13:24:32:85:55:78:77:
         4d:2b:6c:26:db:31:68:22:91:df:f5:02:b4:33:ef:df:63:d9:
         ed:90:0d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org