Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/323830343a336538633a383030303a3a2f33332d3333203d3e20323636363035.roa
File:                     323830343a336538633a383030303a3a2f33332d3333203d3e20323636363035.roa (raw, json)
Hash identifier:          PfH322KDmfqbF2YlMQGe2Ti7CNXxFXVTlHBoWpUqGm0=
Subject key identifier:   2D:3A:B9:2A:16:DD:F5:2D:51:06:A6:FB:48:3A:C8:D5:C1:5F:97:62
Certificate issuer:       /CN=72D873FAFB0393C93F1E89BAE1E171F762DA38F1
Certificate serial:       48AD55BA63F1179160FBA3DDF43C7A093BA54BF8
Authority key identifier: 72:D8:73:FA:FB:03:93:C9:3F:1E:89:BA:E1:E1:71:F7:62:DA:38:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/323830343a336538633a383030303a3a2f33332d3333203d3e20323636363035.roa
Signing time:             Wed 03 May 2023 14:47:46 +0000
ROA not before:           Wed 03 May 2023 14:42:46 +0000
ROA not after:            Wed 01 May 2024 14:47:46 +0000
asID:                     266605
IP address blocks:        2804:3e8c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ad:55:ba:63:f1:17:91:60:fb:a3:dd:f4:3c:7a:09:3b:a5:4b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D873FAFB0393C93F1E89BAE1E171F762DA38F1
        Validity
            Not Before: May  3 14:42:46 2023 GMT
            Not After : May  1 14:47:46 2024 GMT
        Subject: CN=2D3AB92A16DDF52D5106A6FB483AC8D5C15F9762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:61:30:74:97:f8:d3:a3:e1:1e:7b:b7:90:86:
                    0c:41:3a:35:d2:10:5e:7e:5a:31:05:06:7a:8d:0d:
                    62:a2:e0:6c:eb:ae:ee:7d:bb:cb:f2:67:f4:7f:d0:
                    0b:37:b4:f3:a5:1b:a6:03:f4:5b:95:a9:82:bc:8c:
                    c8:af:9c:ea:b5:84:d6:b4:71:d2:dd:f3:ea:b8:5a:
                    a9:97:3d:d0:40:e9:7d:ca:67:fd:40:60:1f:51:2f:
                    03:b5:c5:9b:06:ff:ea:0a:39:f4:24:eb:c8:ad:2f:
                    1d:b1:9c:b5:f1:82:ec:f4:49:98:5d:60:a9:cb:90:
                    93:23:4d:e5:09:54:cb:e3:64:be:fe:5f:a9:33:3c:
                    5a:15:19:49:47:f7:e3:47:78:22:48:93:3c:18:46:
                    c1:fe:07:90:7f:82:fa:9d:ee:1a:a4:87:4c:8c:f2:
                    8a:33:92:7f:c8:92:51:2a:e9:27:42:25:ff:5b:86:
                    f8:a7:95:5d:74:5e:de:58:d0:6a:1b:fd:26:38:e1:
                    83:22:84:ec:be:58:e2:43:ec:64:1f:f0:d7:33:01:
                    00:11:92:7b:44:19:82:45:e9:30:7a:cb:53:e8:e2:
                    ff:62:c8:57:22:08:ed:a2:78:24:65:b7:08:c2:33:
                    4b:d5:ea:a7:16:c1:3f:a3:e5:37:d6:80:b8:73:76:
                    9c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3A:B9:2A:16:DD:F5:2D:51:06:A6:FB:48:3A:C8:D5:C1:5F:97:62
            X509v3 Authority Key Identifier:
                keyid:72:D8:73:FA:FB:03:93:C9:3F:1E:89:BA:E1:E1:71:F7:62:DA:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/323830343a336538633a383030303a3a2f33332d3333203d3e20323636363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e8c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         21:1e:bd:ab:2b:1a:eb:11:d9:18:72:e8:7c:4e:25:76:df:f6:
         14:f2:0b:5c:0d:8e:9e:29:a1:41:3f:86:19:c3:3e:20:6e:2c:
         2c:6a:2c:e6:c1:d2:d6:7a:f1:d7:06:ef:be:d1:5d:4f:2f:91:
         00:a1:a9:27:b5:af:c0:f9:bc:76:9d:49:29:83:c8:3f:72:d2:
         c0:3c:6d:1f:25:5b:74:c0:d6:94:ea:31:3a:6d:89:06:59:8d:
         53:24:f7:1f:35:cb:e5:1f:f9:86:38:2a:c3:74:92:c8:ca:30:
         93:78:7c:b2:44:01:5d:3c:61:39:f8:fd:77:f4:0c:6b:6f:28:
         a4:15:80:e4:6b:64:34:d6:81:7c:3a:d0:7a:85:36:f0:41:99:
         82:65:78:6b:69:6a:2f:09:05:a2:83:1d:f6:c6:58:58:e2:6d:
         b4:8d:24:da:cc:14:85:8e:36:54:95:b2:97:00:ce:e4:f9:bd:
         8e:8d:9e:59:c9:fd:03:87:bf:b6:78:57:3a:d3:5c:c9:72:08:
         50:df:39:a4:e3:b0:61:74:59:01:dd:57:d8:74:2d:7c:1e:34:
         55:a8:81:89:bb:f0:40:d9:7a:bb:af:e4:db:e1:80:75:96:f8:
         c0:4b:c8:ea:c0:df:3a:6b:88:1e:e6:8a:f1:96:88:7d:c2:a6:
         0e:10:d5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org