Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa
File:                     323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa (raw, json)
Hash identifier:          Z7vq69R1+TxQvSLufsTh7WvBAVz0FNRAKsjIestsO60=
Subject key identifier:   20:5A:B4:40:D6:F5:B2:09:72:21:A4:93:A3:56:FB:88:DD:36:EC:22
Certificate issuer:       /CN=B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228
Certificate serial:       2CE00354D4848DC71E54252E1E2B664E351BBE3B
Authority key identifier: B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa
Signing time:             Tue 12 Mar 2024 18:02:57 +0000
ROA not before:           Tue 12 Mar 2024 17:57:57 +0000
ROA not after:            Tue 11 Mar 2025 18:02:57 +0000
asID:                     264879
IP address blocks:        2804:2f3c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e0:03:54:d4:84:8d:c7:1e:54:25:2e:1e:2b:66:4e:35:1b:be:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228
        Validity
            Not Before: Mar 12 17:57:57 2024 GMT
            Not After : Mar 11 18:02:57 2025 GMT
        Subject: CN=205AB440D6F5B2097221A493A356FB88DD36EC22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2e:f8:c4:41:c4:7b:60:56:87:c4:51:99:8f:
                    64:71:6a:65:d2:e4:56:9c:0f:8e:94:e7:00:15:23:
                    6c:98:6f:11:f5:d8:45:70:0c:a2:9c:0b:54:bc:c2:
                    c4:74:ba:4d:38:ae:b1:75:ee:b5:88:0b:bf:9e:f8:
                    ba:55:9b:db:0d:5f:38:b1:f3:05:2b:ea:99:06:d5:
                    fc:36:f6:72:65:46:f0:10:f6:58:05:fc:da:85:65:
                    df:da:eb:c2:a5:1b:25:dc:41:8b:ec:70:ef:f0:8e:
                    7b:4a:c6:3b:4c:9e:c3:50:01:9b:95:4e:7a:23:bf:
                    d1:61:fc:7c:b1:0c:5b:9d:bb:e4:10:ae:4e:b9:68:
                    c1:56:c6:ad:ed:6f:36:42:c6:8a:59:6e:82:0d:87:
                    6f:bf:49:d2:d5:36:d2:c9:19:3d:42:c2:8a:e7:8a:
                    c5:5a:40:8e:9f:d7:79:da:81:11:ad:08:4e:6e:63:
                    41:5b:c1:1a:37:02:80:df:5a:1e:b3:45:de:32:c5:
                    99:ec:4e:43:87:c7:6a:89:b0:57:02:e7:92:20:5e:
                    7c:dc:11:4b:06:6e:3d:e7:91:ce:73:35:aa:3f:c2:
                    5a:5c:cd:e1:3a:4b:13:9f:ab:95:8d:d1:85:4e:e1:
                    88:fb:c1:36:0e:55:06:9d:3b:59:a4:0c:c3:19:e7:
                    fd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5A:B4:40:D6:F5:B2:09:72:21:A4:93:A3:56:FB:88:DD:36:EC:22
            X509v3 Authority Key Identifier:
                keyid:B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f3c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b8:07:3b:16:7f:56:05:9c:fc:4f:02:27:0a:30:43:31:a9:63:
         1f:f3:19:c4:dd:ce:47:45:ab:2f:18:db:79:18:77:80:fb:17:
         c6:4c:2e:bc:33:0d:1c:87:65:11:5d:4a:15:4d:cf:8f:cd:0c:
         98:48:cc:df:c2:a5:71:2b:39:f6:9d:0b:d4:bb:8f:cc:e0:a4:
         26:41:1d:b3:e5:69:8e:df:e0:77:89:26:66:39:1a:85:de:89:
         8f:7b:fa:89:6a:b3:79:18:44:54:7a:d1:c9:7c:8f:c0:86:cd:
         98:54:62:9f:1e:57:8a:13:30:27:cb:1a:d1:39:23:05:a1:45:
         47:63:d4:f5:0e:98:ba:2e:4a:9d:c0:30:20:19:15:15:2e:20:
         7d:c7:4c:d7:a2:22:b3:43:bd:26:cb:97:28:58:12:c7:c0:83:
         0a:f8:1d:65:72:76:1f:e1:65:91:ef:a5:4a:4c:7c:87:d8:25:
         01:99:f1:68:aa:dd:63:bb:53:d5:7c:7f:4a:04:4e:56:2b:51:
         91:59:a1:8f:34:73:af:71:c1:72:b5:25:4a:58:ab:52:c5:fe:
         47:5f:72:31:90:d7:b2:c3:5e:c3:5a:d7:f8:29:89:2a:0e:7f:
         a0:5a:c6:ea:3e:b2:0b:d4:97:09:06:57:85:43:68:13:3f:bb:
         0e:2f:37:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org