Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a313130303a3a2f34302d3430203d3e203238323130.roa
File:                     323830343a3536633a313130303a3a2f34302d3430203d3e203238323130.roa (raw, json)
Hash identifier:          UuNOiXOMJvT1f38Mj4lFplo0OHhCtltXwe8+NL8C0W4=
Subject key identifier:   5D:53:3C:CD:07:93:9D:E6:82:D7:38:18:06:AB:9A:57:C0:F4:83:60
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       2B58B03D888817A8E86B83852E2492F3A5CB4BC1
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a313130303a3a2f34302d3430203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:22 +0000
ROA not before:           Wed 28 Feb 2024 13:58:22 +0000
ROA not after:            Wed 26 Feb 2025 14:03:22 +0000
asID:                     28210
IP address blocks:        2804:56c:1100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:58:b0:3d:88:88:17:a8:e8:6b:83:85:2e:24:92:f3:a5:cb:4b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:22 2024 GMT
            Not After : Feb 26 14:03:22 2025 GMT
        Subject: CN=5D533CCD07939DE682D7381806AB9A57C0F48360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:70:b8:58:57:76:a6:9a:69:7a:0a:e9:e4:
                    74:e3:23:85:03:e2:10:c5:ea:38:61:14:99:ba:e0:
                    1b:44:7c:ce:24:fa:d8:ab:d5:72:50:f2:c0:ef:d6:
                    30:63:fb:23:12:48:ed:77:a3:a5:39:d5:1a:c2:36:
                    01:01:6e:7d:11:68:00:61:0d:35:ab:91:33:24:d7:
                    ae:59:28:c9:93:fc:ab:28:a5:0a:80:5e:34:19:ab:
                    a4:21:96:d3:6f:6b:e3:62:14:8a:27:75:2a:cd:fb:
                    9a:e5:55:8e:5e:d8:7a:21:a7:1d:83:f0:27:df:25:
                    82:3d:79:05:c2:d3:26:90:9e:73:c0:03:26:56:c2:
                    55:13:dd:a5:ce:18:89:d8:3d:84:97:b3:7a:2c:42:
                    56:d8:e8:56:b3:f2:17:70:b6:e5:06:24:05:23:71:
                    57:bd:a2:13:c5:71:d3:4f:56:83:43:e2:9c:1f:5e:
                    05:70:23:a0:7a:47:b1:06:99:d1:b2:ae:f8:26:a8:
                    9d:05:0f:83:5a:9d:99:33:c7:f7:f1:e0:12:45:a1:
                    2b:c2:c4:3c:d3:6b:9d:a2:de:bc:37:dd:67:d6:7c:
                    b9:e5:f1:5c:c3:05:73:36:1b:8b:55:82:27:1b:22:
                    de:5a:32:e3:bf:6e:77:23:75:8b:9b:e1:c2:82:ef:
                    46:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:53:3C:CD:07:93:9D:E6:82:D7:38:18:06:AB:9A:57:C0:F4:83:60
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a313130303a3a2f34302d3430203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         ee:8f:62:05:c6:81:fa:bb:ab:80:7c:87:b1:8a:1b:9e:23:80:
         fa:06:4f:04:f3:3b:67:55:e5:b7:77:9d:c7:36:19:ad:8a:45:
         7d:f6:28:14:d9:a0:93:09:e2:6d:d1:ad:6b:26:7f:f0:a4:82:
         20:3b:6f:52:c4:dc:f9:90:d0:b9:1f:f5:78:47:7a:7e:02:d2:
         7c:1a:f5:12:c7:2a:4b:f8:b6:84:ee:ca:60:ae:fa:98:da:90:
         3d:be:21:08:d0:32:45:e5:18:20:1b:f4:f4:19:a3:ad:71:4b:
         2b:71:ce:e5:73:a2:98:cc:77:aa:b2:33:4a:2f:7d:68:c2:6d:
         66:71:9b:b0:94:00:42:b6:70:b7:21:13:b2:80:6d:58:ab:bf:
         78:28:b5:97:0e:d9:6e:d8:ee:d6:86:02:76:d7:6a:33:bc:dd:
         66:68:2f:76:b9:20:4b:b1:13:32:17:28:00:32:d5:b7:ec:87:
         e9:02:15:5f:0c:ac:2e:49:68:4c:bf:98:af:70:ac:6b:07:e3:
         d8:d4:11:d5:03:d1:05:a9:1d:1f:c9:1a:91:7b:4c:46:66:11:
         07:79:34:7e:66:1e:9c:73:55:c3:5f:92:c9:6f:46:90:33:44:
         f7:c2:c4:4d:c1:f1:df:43:64:af:0a:b8:26:ea:4b:a9:cd:46:
         d8:f3:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org