Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a3a2f33322d3332203d3e20323731353536.roa
File:                     323830343a376435633a3a2f33322d3332203d3e20323731353536.roa (raw, json)
Hash identifier:          9HbaIoWBv83taJKjmZRm07SRkjoA69FSlMR21LRWA9I=
Subject key identifier:   33:C3:AA:68:56:0A:40:12:58:69:62:6B:8C:7F:27:99:3E:7F:51:E8
Certificate issuer:       /CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
Certificate serial:       5E814A4AD3E61F397476CD37BB38862029B350F4
Authority key identifier: C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a3a2f33322d3332203d3e20323731353536.roa
Signing time:             Wed 03 Apr 2024 18:58:28 +0000
ROA not before:           Wed 03 Apr 2024 18:53:28 +0000
ROA not after:            Wed 02 Apr 2025 18:58:28 +0000
asID:                     271556
IP address blocks:        2804:7d5c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:81:4a:4a:d3:e6:1f:39:74:76:cd:37:bb:38:86:20:29:b3:50:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
        Validity
            Not Before: Apr  3 18:53:28 2024 GMT
            Not After : Apr  2 18:58:28 2025 GMT
        Subject: CN=33C3AA68560A40125869626B8C7F27993E7F51E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:e4:25:48:44:a1:f3:12:b9:fa:d2:9f:83:
                    a2:df:3f:cc:af:96:25:0a:26:af:09:d2:bb:f3:5d:
                    87:12:c2:b5:5b:82:67:8a:cd:5a:e3:c2:a7:d3:a4:
                    6c:11:f4:31:6d:52:88:a0:8f:b7:e4:e1:65:13:0d:
                    08:2e:47:16:2e:1c:30:d3:63:e9:a6:00:bb:78:94:
                    24:46:39:34:ff:8b:1f:54:be:87:a9:cb:49:3e:d8:
                    ab:5b:e2:57:f8:4f:67:ab:f6:be:66:ca:6e:ed:ef:
                    cc:0c:61:38:91:49:ab:7f:94:5a:39:8c:d2:dc:cd:
                    2a:28:2b:d6:0d:e5:e0:91:ea:7b:37:0f:5c:10:e0:
                    73:57:44:a5:61:a4:39:01:a1:bd:ae:ec:b4:16:ee:
                    36:ea:63:c9:5f:d1:e4:6d:a9:c1:9c:8d:1c:91:76:
                    eb:55:7d:4b:de:9c:5b:0b:6a:3e:6b:28:47:12:6f:
                    9f:88:59:e6:80:8e:c1:b8:23:c5:45:e4:89:ed:d6:
                    05:77:e8:7c:c7:42:6c:2c:ee:77:b7:01:5f:6d:e3:
                    9f:bb:65:63:8c:41:a2:5c:48:c4:b2:d7:2f:a6:aa:
                    21:1c:ea:7c:b3:80:f0:dc:ce:be:7b:c8:e6:dc:b0:
                    8c:b2:d9:7e:ce:11:eb:fe:22:e6:cc:55:51:84:50:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C3:AA:68:56:0A:40:12:58:69:62:6B:8C:7F:27:99:3E:7F:51:E8
            X509v3 Authority Key Identifier:
                keyid:C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a3a2f33322d3332203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:58:15:f8:2a:53:cc:72:48:4c:8e:5a:92:3b:2d:12:f7:f7:
         6e:f1:b5:1a:b8:6b:8e:33:9d:4c:70:fc:5b:9b:50:10:6b:b8:
         ae:df:ad:12:cd:65:44:7d:55:34:f7:97:5d:b6:fb:ec:a1:3f:
         06:2b:a4:af:d1:b3:65:10:8c:48:b3:13:4e:01:b2:45:cb:10:
         7d:f0:14:40:28:76:64:fa:8e:44:5e:9f:88:03:f7:54:3e:e8:
         61:c1:58:b0:db:b2:42:fc:be:ab:94:aa:8a:e8:21:5d:46:01:
         27:a5:86:dd:cf:f8:46:26:21:d6:b6:e5:be:ab:8b:3a:07:0f:
         3f:69:bb:d5:97:22:6c:27:1e:3a:bf:ed:68:12:fa:5c:d8:77:
         ba:c0:f8:25:be:21:2d:1b:dc:50:94:1a:be:91:3b:ff:29:c6:
         a4:96:6e:d6:98:71:4b:f4:df:37:a5:0a:a2:c9:e3:f3:f2:94:
         c2:b6:bb:c0:0a:9f:4f:08:39:03:00:9b:0b:a9:0c:2c:09:10:
         78:d5:09:80:7a:34:9e:cf:05:10:d0:c4:12:d4:03:02:a4:dd:
         9c:61:9e:36:92:39:d0:7f:23:d7:df:f1:ba:d8:c8:ab:b8:fc:
         40:ba:d4:e1:1b:7b:1d:a3:9c:02:d1:76:44:78:93:27:77:54:
         c4:50:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org