Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/323830343a313539343a383030303a3a2f33332d3333203d3e20323633333936.roa
File:                     323830343a313539343a383030303a3a2f33332d3333203d3e20323633333936.roa (raw, json)
Hash identifier:          BpUewSoLjhquGg4cSpx986H+HwfQ6caQd61YOWlSlOw=
Subject key identifier:   F3:92:A8:8E:A8:44:64:A7:C9:50:C9:D5:B3:6D:97:96:6D:1F:52:87
Certificate issuer:       /CN=533B8335992AC24C92CD2553C5F62AC293DF880D
Certificate serial:       7C6F7FF74B860C888204A859899194567AEE6775
Authority key identifier: 53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533B8335992AC24C92CD2553C5F62AC293DF880D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/323830343a313539343a383030303a3a2f33332d3333203d3e20323633333936.roa
Signing time:             Thu 16 Nov 2023 13:58:30 +0000
ROA not before:           Thu 16 Nov 2023 13:53:30 +0000
ROA not after:            Thu 14 Nov 2024 13:58:30 +0000
asID:                     263396
IP address blocks:        2804:1594:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6f:7f:f7:4b:86:0c:88:82:04:a8:59:89:91:94:56:7a:ee:67:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533B8335992AC24C92CD2553C5F62AC293DF880D
        Validity
            Not Before: Nov 16 13:53:30 2023 GMT
            Not After : Nov 14 13:58:30 2024 GMT
        Subject: CN=F392A88EA84464A7C950C9D5B36D97966D1F5287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f9:2e:63:a0:6b:0c:2b:ae:4d:c3:78:dc:a8:
                    37:b9:19:a7:f9:10:a8:d3:1b:4a:2b:83:a0:f7:a9:
                    61:94:8f:0c:8a:4b:ae:05:83:bf:e7:c1:51:40:39:
                    85:92:82:69:fc:ab:10:92:0b:eb:a7:31:85:7c:0b:
                    54:1f:45:05:a1:0c:e9:d1:1b:8d:c6:71:e8:23:9e:
                    fa:7c:17:50:ea:27:a8:79:46:e9:46:23:2f:33:4a:
                    6e:ac:c6:26:46:51:c7:15:a8:4b:b9:8b:21:c7:94:
                    d3:15:62:54:3b:51:93:1e:ce:c5:a7:13:28:25:19:
                    cf:77:f8:4c:3c:27:c6:23:75:6b:a7:29:8d:b1:12:
                    25:ba:52:1f:52:3a:11:7e:36:4f:ec:52:33:4e:38:
                    d3:3c:7e:bf:64:eb:27:fa:92:34:60:c2:ad:e7:e0:
                    7f:b4:b7:13:87:64:5e:95:7b:0d:52:13:80:3b:66:
                    33:d1:d5:7c:ba:e3:2f:25:1c:a2:1a:4b:d3:00:af:
                    91:9e:49:3c:98:57:c3:f3:10:c3:40:ab:bc:4d:0d:
                    3f:8d:9e:f3:0b:00:44:41:79:68:7d:01:98:62:ff:
                    bc:60:4b:15:3f:13:ec:d5:c9:dc:1d:28:5e:a7:fb:
                    8b:01:08:e4:37:14:10:94:97:02:c1:78:40:55:48:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:92:A8:8E:A8:44:64:A7:C9:50:C9:D5:B3:6D:97:96:6D:1F:52:87
            X509v3 Authority Key Identifier:
                keyid:53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/533B8335992AC24C92CD2553C5F62AC293DF880D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533B8335992AC24C92CD2553C5F62AC293DF880D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/323830343a313539343a383030303a3a2f33332d3333203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1594:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:d2:cd:3f:4c:8c:8a:a3:6a:1f:fe:97:ad:00:fd:9c:3b:36:
         dc:9c:66:79:90:19:f3:0b:b3:7e:4a:d5:52:cf:91:4a:be:73:
         b1:ca:8b:e8:d9:2a:5b:04:d7:16:65:9d:54:06:08:b4:49:44:
         e1:78:65:28:8a:3f:31:d4:63:3e:4b:bb:6d:6e:80:5b:2c:25:
         80:27:37:ce:63:1b:b9:c3:cd:56:0d:99:b2:f1:1f:4e:44:50:
         ea:3d:26:35:41:14:08:5d:42:2c:ff:82:ef:b3:ee:4e:56:b7:
         96:b4:94:b2:98:58:c7:50:cb:de:88:50:3b:90:af:7f:7d:4a:
         ee:3b:7b:c9:1d:cb:59:f7:61:71:40:5b:e6:3f:2f:b7:5b:41:
         a3:d4:8d:2a:cf:22:06:a7:fb:87:26:20:0b:24:d1:90:a1:68:
         a4:25:8e:84:b8:6a:6c:08:53:a2:18:b5:39:80:4b:86:f6:86:
         e1:75:6e:ab:be:42:54:71:f0:35:73:44:aa:56:2a:4a:d0:c2:
         63:60:7a:7c:98:c5:25:a7:09:26:75:47:73:f3:82:57:48:a7:
         16:ad:f8:1b:9f:6b:ef:75:54:0a:57:70:53:16:19:99:2d:dd:
         70:05:b7:14:ae:72:aa:61:7c:80:6e:c7:71:b8:82:e9:26:4d:
         6a:90:2e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org