Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          9RF+b0jQD5YoHQvaHgJjlssxg3tSyLduO6w6Q/jKc+o=
Subject key identifier:   D5:72:A3:E5:DD:78:56:B3:9F:1E:6C:FA:7D:1A:44:3F:88:EB:51:BC
Certificate issuer:       /CN=EC682C741A777F706745E6705BE4FAC8CE53C496
Certificate serial:       242440C99D2279C3C3773AEA798B8D995AE62737
Authority key identifier: EC:68:2C:74:1A:77:7F:70:67:45:E6:70:5B:E4:FA:C8:CE:53:C4:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC682C741A777F706745E6705BE4FAC8CE53C496.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Mon 29 Jan 2024 22:13:16 +0000
ROA not before:           Mon 29 Jan 2024 22:08:16 +0000
ROA not after:            Mon 27 Jan 2025 22:13:16 +0000
asID:                     265393
IP address blocks:        2804:3364:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:24:40:c9:9d:22:79:c3:c3:77:3a:ea:79:8b:8d:99:5a:e6:27:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC682C741A777F706745E6705BE4FAC8CE53C496
        Validity
            Not Before: Jan 29 22:08:16 2024 GMT
            Not After : Jan 27 22:13:16 2025 GMT
        Subject: CN=D572A3E5DD7856B39F1E6CFA7D1A443F88EB51BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:fd:37:e8:53:78:99:c4:cf:58:51:6f:c6:
                    0e:a6:41:a7:75:77:4c:04:f0:e9:a4:1f:ea:fa:7d:
                    79:28:0b:5a:c3:b0:a3:50:9f:85:73:91:00:ef:bb:
                    11:8b:51:70:65:bc:96:54:de:d7:e3:c4:29:3c:da:
                    df:e3:cd:03:6b:7e:bb:c3:0b:f9:c3:33:cb:b7:1a:
                    22:2c:e5:b0:15:24:df:91:da:81:34:da:63:0f:a2:
                    b1:9e:75:ac:44:bc:10:04:ec:42:5c:e8:84:66:54:
                    ed:3f:65:92:44:06:b3:f3:3d:69:af:b6:64:e3:3b:
                    df:17:a6:e3:ef:88:99:2f:ff:57:1c:6c:13:a0:01:
                    b9:dd:cf:3b:7b:53:35:77:b7:f8:41:36:88:72:67:
                    36:33:c4:9f:ec:64:68:c1:6b:ac:d2:66:86:07:2a:
                    71:68:b6:e5:cf:ec:55:12:23:84:70:ac:30:86:fa:
                    f4:6e:c0:e6:a1:88:3c:63:51:1f:ee:bf:1d:0e:99:
                    19:36:92:13:1a:77:c7:6e:9b:28:3c:0b:d7:8a:0c:
                    9a:c1:ea:d6:32:6e:ea:d7:5a:d8:5c:a9:7f:b6:5b:
                    4e:b7:8d:5e:be:05:4e:dd:33:2c:38:86:f6:1b:c2:
                    93:93:22:84:ea:98:86:e5:91:08:86:e2:91:f4:0b:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:72:A3:E5:DD:78:56:B3:9F:1E:6C:FA:7D:1A:44:3F:88:EB:51:BC
            X509v3 Authority Key Identifier:
                keyid:EC:68:2C:74:1A:77:7F:70:67:45:E6:70:5B:E4:FA:C8:CE:53:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/EC682C741A777F706745E6705BE4FAC8CE53C496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC682C741A777F706745E6705BE4FAC8CE53C496.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:53:93:26:6e:14:b4:ff:f6:14:9a:5a:24:88:36:9e:91:3b:
         e0:88:47:68:17:c9:44:8f:f6:f0:75:3f:1b:be:db:fb:f6:79:
         ad:60:cf:c5:27:4c:4b:11:f1:0d:cc:79:81:e3:d4:91:24:55:
         de:d7:93:3a:c8:ab:5b:a0:cc:fa:13:eb:a4:05:da:6d:ee:4c:
         46:98:71:f0:1d:18:ee:32:1c:39:51:30:56:44:57:b6:f7:3c:
         5c:2d:ea:71:e4:ea:62:23:8a:3c:3a:ee:27:b3:d7:88:db:20:
         1b:c5:49:69:f1:5b:d1:07:65:e9:d0:07:70:86:2c:35:67:16:
         a3:27:68:a2:fc:27:1f:be:3b:8c:c9:0a:48:45:f7:3b:db:83:
         c6:a5:82:7d:f3:d5:0b:e8:ac:1c:2f:e1:4e:cc:d0:90:28:04:
         77:be:ed:71:a0:60:6f:56:91:ce:cb:ac:7e:4a:be:9f:3d:dc:
         38:4e:d1:bd:33:a1:94:51:6d:92:c6:22:b0:d1:e1:7b:fe:f3:
         ca:0a:35:f5:75:11:01:15:59:a4:78:dc:e4:ff:71:f1:db:5c:
         5f:e8:e9:a9:2a:2a:72:4d:ba:0b:2d:d7:12:d6:c1:13:02:41:
         18:d7:ad:5e:64:44:9e:f4:1c:51:47:76:bd:10:f5:57:89:e2:
         58:d2:30:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org