Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/323830343a356631633a3a2f33332d3333203d3e20323639303737.roa
File:                     323830343a356631633a3a2f33332d3333203d3e20323639303737.roa (raw, json)
Hash identifier:          Sob2A2jG2vdDwOqgDT2U5p5iaw7Unz6O9bl+q2FqJ1Y=
Subject key identifier:   20:3E:23:B8:DF:21:55:1C:26:89:27:80:41:AC:C7:8F:F7:74:FE:E6
Certificate issuer:       /CN=E3456EBCA0328BC292A95D7115EAC65C1AE357FE
Certificate serial:       7BF4BE4DA197057BB6E0F6220CE3A71EE4BE5319
Authority key identifier: E3:45:6E:BC:A0:32:8B:C2:92:A9:5D:71:15:EA:C6:5C:1A:E3:57:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/323830343a356631633a3a2f33332d3333203d3e20323639303737.roa
Signing time:             Mon 18 Dec 2023 20:21:08 +0000
ROA not before:           Mon 18 Dec 2023 20:16:08 +0000
ROA not after:            Mon 16 Dec 2024 20:21:08 +0000
asID:                     269077
IP address blocks:        2804:5f1c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f4:be:4d:a1:97:05:7b:b6:e0:f6:22:0c:e3:a7:1e:e4:be:53:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3456EBCA0328BC292A95D7115EAC65C1AE357FE
        Validity
            Not Before: Dec 18 20:16:08 2023 GMT
            Not After : Dec 16 20:21:08 2024 GMT
        Subject: CN=203E23B8DF21551C2689278041ACC78FF774FEE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c8:5a:ab:bd:b3:ed:40:ae:48:46:94:3f:f0:
                    6b:13:40:da:15:f2:21:e0:20:d6:32:49:4c:f2:46:
                    34:ad:6f:4b:5b:e6:e9:fe:64:aa:80:70:15:8c:88:
                    31:6d:c7:38:c9:6e:3c:09:1e:c0:fb:96:2e:1c:0a:
                    a5:4b:67:b7:fc:49:33:d7:f3:7f:86:2a:be:03:5e:
                    24:ca:a0:4d:e3:83:8c:ce:c6:e2:a8:96:09:0c:bf:
                    3d:0f:01:97:b4:2f:6a:41:a9:02:37:e1:e9:5c:1b:
                    f7:d7:fe:03:8d:00:bb:c2:ea:32:c0:f9:ff:d5:a3:
                    b2:26:98:d3:bb:c7:e7:91:64:5f:71:53:ff:d9:03:
                    c6:db:ae:54:1d:ee:ea:d7:1b:ec:75:7f:f1:1e:35:
                    f5:14:f5:73:d8:f7:3c:23:de:b4:23:bc:d7:eb:e5:
                    10:2d:2f:e2:84:4a:4f:ba:5c:23:3e:83:8f:ee:50:
                    6e:44:5a:c0:78:f8:6a:40:d3:d0:b9:4d:5b:ac:95:
                    20:f8:43:80:53:b3:eb:11:31:03:a1:27:0d:09:c2:
                    0b:16:1e:62:70:9e:5c:58:58:a1:af:41:1f:d6:ff:
                    1e:f3:9b:ef:fa:87:9b:7d:9e:1a:a1:fa:7c:a6:c3:
                    dc:c8:a2:b1:f2:db:fa:b4:c9:af:2b:ba:6f:67:80:
                    7b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3E:23:B8:DF:21:55:1C:26:89:27:80:41:AC:C7:8F:F7:74:FE:E6
            X509v3 Authority Key Identifier:
                keyid:E3:45:6E:BC:A0:32:8B:C2:92:A9:5D:71:15:EA:C6:5C:1A:E3:57:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/323830343a356631633a3a2f33332d3333203d3e20323639303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f1c::/33

    Signature Algorithm: sha256WithRSAEncryption
         89:d8:f4:a3:c6:4e:d1:36:d0:90:97:6f:af:ca:72:cc:77:ff:
         b4:04:11:cb:2a:13:8b:e5:24:43:c0:cf:d5:25:58:b8:d3:24:
         a7:30:c0:e1:bc:fc:34:f6:80:5d:68:bc:1e:ba:dd:84:31:8e:
         e7:c0:cf:0a:f2:38:15:64:c5:53:a5:89:ad:f2:c2:69:6a:45:
         38:21:40:cb:c5:35:c8:84:ec:44:21:27:e5:b7:a9:54:e7:95:
         0a:73:48:b0:ad:22:c1:38:a0:3f:32:fb:4c:41:93:c8:63:7e:
         9d:39:75:2d:cf:07:ba:0f:e8:ed:5c:55:73:5a:d7:d6:67:84:
         9e:5b:26:05:74:99:8f:cc:82:9a:f9:ec:f8:ea:d9:9a:19:4b:
         3b:4a:aa:41:72:78:7a:ea:1a:18:69:e8:7e:7c:12:72:d7:35:
         2d:2d:8b:83:2a:23:8a:f8:2e:38:31:ce:18:73:eb:02:b4:e5:
         12:7c:ec:fd:ea:61:2c:c4:23:af:0c:8a:3e:72:c5:cb:d1:1a:
         4c:1a:f8:4f:ed:86:9a:82:0f:52:b6:2c:e9:cf:43:3a:96:20:
         47:f2:b2:07:fe:eb:41:51:fb:6b:11:6a:8c:94:5e:33:d5:f4:
         f7:b6:8f:e8:09:c6:b2:9f:ed:98:0e:47:89:36:b5:56:47:7d:
         0d:97:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org