Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa
File:                     323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa (raw, json)
Hash identifier:          2ATyTLgpQ4R1m9ZUZHVrWZu8el3PwixS3vioiaQP9/4=
Subject key identifier:   78:44:30:E2:36:AA:8B:8D:88:82:3A:7D:BC:4E:C6:71:8C:F5:A2:35
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       75F0FFA9C5C391370C3276F672431A5497C24872
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:22 +0000
ROA not before:           Wed 28 Feb 2024 13:58:22 +0000
ROA not after:            Wed 26 Feb 2025 14:03:22 +0000
asID:                     28210
IP address blocks:        2804:56c:2120::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f0:ff:a9:c5:c3:91:37:0c:32:76:f6:72:43:1a:54:97:c2:48:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:22 2024 GMT
            Not After : Feb 26 14:03:22 2025 GMT
        Subject: CN=784430E236AA8B8D88823A7DBC4EC6718CF5A235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:e6:3b:82:30:56:de:93:5f:16:06:38:d5:
                    12:b2:bf:20:06:a7:da:c3:c5:3a:6a:17:74:fa:0a:
                    90:4b:51:5c:d8:6d:7f:bf:7f:9c:bc:49:13:a6:85:
                    25:83:a3:29:63:6c:91:19:a8:35:cf:97:e2:4b:35:
                    b8:c3:09:be:72:26:93:76:cd:c0:b1:f9:a3:ec:5b:
                    15:5c:b9:ce:5e:e6:88:fa:27:dd:1c:d9:24:1f:e2:
                    98:97:77:dd:45:c7:e6:ca:c4:e1:34:ec:09:c5:83:
                    b6:d5:55:0e:cd:d3:1f:11:93:44:cc:b5:31:ab:2d:
                    5a:1a:89:68:88:6c:13:ef:f6:40:a3:80:b7:6b:73:
                    3b:ab:c2:b9:3f:ac:d5:87:11:e9:56:40:be:d7:62:
                    28:38:09:7f:77:08:35:52:5b:bf:c8:af:43:25:9d:
                    ed:94:5d:4c:6c:85:1d:7e:8a:0f:43:80:b8:4d:be:
                    f7:61:54:e2:89:ec:1e:e0:eb:f7:75:77:c9:ec:54:
                    85:c0:6e:cf:d8:36:1a:02:f5:0b:e7:16:25:86:de:
                    c8:e3:03:e6:0f:e2:55:fc:08:94:00:ee:df:3a:3e:
                    cb:a6:27:57:83:88:a1:5a:9c:3a:66:1f:97:07:ac:
                    4d:30:f6:7a:97:ca:49:2c:74:ae:9a:e0:aa:13:88:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:44:30:E2:36:AA:8B:8D:88:82:3A:7D:BC:4E:C6:71:8C:F5:A2:35
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:2120::/43

    Signature Algorithm: sha256WithRSAEncryption
         44:72:76:c2:35:8b:ce:d9:34:66:e1:e5:7b:f6:2c:a4:2a:50:
         09:ae:91:bd:a0:fc:63:8c:b4:ef:55:0b:b0:46:8d:fc:a6:dc:
         5d:e3:59:22:d0:e1:10:6b:23:60:26:99:a2:99:6b:82:43:33:
         fa:b8:b2:19:e6:5f:46:36:58:29:2d:ed:1b:8c:44:0a:51:be:
         c6:6a:65:46:7c:2c:5b:42:3a:49:a5:31:35:5a:5f:f7:9f:0d:
         e3:17:06:80:ed:f9:9d:b3:fe:86:f0:48:13:f7:35:f1:b1:22:
         9e:27:0c:b4:24:d8:3b:80:82:33:f5:1d:57:96:33:11:09:b7:
         4a:6a:6b:30:7d:3d:5a:37:77:21:87:e6:b4:71:75:32:b0:8a:
         70:16:63:05:a8:c2:a9:d5:76:13:47:6c:9f:16:07:6e:1c:57:
         7b:b6:82:e9:af:5a:c0:ad:16:90:6c:46:9d:b9:66:0d:24:be:
         6e:8a:a2:64:e1:15:4e:1b:6d:42:9e:8c:48:ee:99:ed:9d:90:
         d5:ac:29:d9:e8:4c:3a:0c:c1:47:52:69:b5:9e:ac:60:d5:b3:
         85:80:9f:35:8f:54:66:84:1a:d7:8b:fe:97:51:7c:24:b3:42:
         9e:a5:c7:85:ce:90:0b:52:3b:96:8b:c8:ec:79:5c:f6:9f:f0:
         a7:24:75:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org