Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/323830343a323062383a3a2f33322d3332203d3e20323634353130.roa
File:                     323830343a323062383a3a2f33322d3332203d3e20323634353130.roa (raw, json)
Hash identifier:          p6LLuuxajiO8asBBjmih7kJ+dEGJ8cWgzgtIIkwI1Rs=
Subject key identifier:   93:3A:60:7E:31:B8:FE:58:96:1A:42:1D:5A:D9:C3:9E:CE:73:20:AB
Certificate issuer:       /CN=67E19ECE95F8080219ADF0EBA93A317A18815FBF
Certificate serial:       695349F6C932A68CD8FA74FCE763764C06D76374
Authority key identifier: 67:E1:9E:CE:95:F8:08:02:19:AD:F0:EB:A9:3A:31:7A:18:81:5F:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67E19ECE95F8080219ADF0EBA93A317A18815FBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/323830343a323062383a3a2f33322d3332203d3e20323634353130.roa
Signing time:             Sun 29 Oct 2023 04:56:33 +0000
ROA not before:           Sun 29 Oct 2023 04:51:33 +0000
ROA not after:            Sun 27 Oct 2024 04:56:33 +0000
asID:                     264510
IP address blocks:        2804:20b8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:53:49:f6:c9:32:a6:8c:d8:fa:74:fc:e7:63:76:4c:06:d7:63:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E19ECE95F8080219ADF0EBA93A317A18815FBF
        Validity
            Not Before: Oct 29 04:51:33 2023 GMT
            Not After : Oct 27 04:56:33 2024 GMT
        Subject: CN=933A607E31B8FE58961A421D5AD9C39ECE7320AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:20:f5:9d:42:ad:f4:ee:56:6b:4a:ae:bf:
                    34:87:b5:64:4d:7a:01:d4:06:a4:64:21:01:e6:7f:
                    cc:dc:7c:79:56:13:a9:7b:76:09:8c:bb:42:f7:4e:
                    72:2c:f3:8c:c0:c0:13:10:58:ef:50:4a:fd:0e:df:
                    97:d4:14:07:a9:28:22:e3:6b:97:10:e3:f8:57:2c:
                    0d:ed:a9:c8:39:f1:61:b1:b4:d9:b6:92:84:45:92:
                    45:f5:49:9a:91:cb:55:8b:a3:05:01:4d:d1:a6:79:
                    b9:56:88:b0:95:f9:58:1d:f1:96:d2:7e:d9:8c:8f:
                    b0:a4:1c:88:88:be:9a:e7:65:a7:9e:91:33:5f:87:
                    e6:b9:ed:e2:a9:53:a3:5d:4c:fd:a8:70:8c:cd:1c:
                    0d:e4:78:9b:35:36:f9:e2:4e:96:27:82:2e:07:22:
                    80:4a:56:01:bb:69:db:8c:00:58:93:7a:aa:bc:0e:
                    fe:d1:dd:13:9a:cb:d8:6c:92:80:05:c2:90:e9:be:
                    a9:9b:23:70:3b:95:83:e7:ca:3d:45:09:e7:a0:48:
                    b1:c9:27:2e:a1:12:16:c6:4d:2f:21:57:e0:44:16:
                    2e:6a:9b:8c:02:f9:1d:8b:d4:45:12:13:12:82:80:
                    c5:cc:3e:eb:f1:5c:37:f2:56:8e:f8:0e:a7:12:6c:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3A:60:7E:31:B8:FE:58:96:1A:42:1D:5A:D9:C3:9E:CE:73:20:AB
            X509v3 Authority Key Identifier:
                keyid:67:E1:9E:CE:95:F8:08:02:19:AD:F0:EB:A9:3A:31:7A:18:81:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/67E19ECE95F8080219ADF0EBA93A317A18815FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67E19ECE95F8080219ADF0EBA93A317A18815FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/323830343a323062383a3a2f33322d3332203d3e20323634353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:8f:cf:bc:53:22:06:87:c2:c6:c1:bb:d9:af:f2:61:1b:ce:
         40:34:4f:70:99:9a:62:29:0a:c1:1f:1a:40:19:39:33:dd:af:
         a8:57:bc:4d:0c:21:db:6e:d3:5e:a9:b6:a4:a9:1d:28:ab:da:
         ca:1c:08:8b:8c:33:e6:f6:1d:fe:e1:f8:0e:9b:33:b0:06:8a:
         55:93:f9:39:2d:61:7b:43:1a:ac:27:f1:0d:ef:41:23:ee:8c:
         c9:b6:33:94:0b:c4:d1:05:2b:e6:53:3a:b3:5e:50:37:9e:cc:
         77:47:47:13:46:e8:df:e9:88:4a:5c:b0:2b:f9:06:b4:2e:e8:
         f1:12:79:fd:75:fb:1f:c3:26:d6:dc:46:d5:50:06:b6:74:20:
         25:66:0a:6c:77:06:ae:f1:d4:66:2f:2e:e3:98:a5:e5:66:30:
         e2:6c:22:cd:9b:b6:ff:4a:ad:1f:8e:b0:20:53:72:50:ce:4a:
         23:a7:ed:a8:c1:dd:26:95:f6:93:bf:90:d1:d9:bd:ee:60:b1:
         0e:89:18:1a:02:19:33:ab:5b:dc:68:39:9e:1e:95:cf:18:25:
         91:9b:7e:a6:62:51:74:bc:c4:31:98:1b:98:e3:fe:25:b3:61:
         7f:52:4d:5d:58:7b:1e:72:8d:a3:81:58:c8:59:0b:1b:0e:e5:
         82:0b:b9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org