Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a383030303a3a2f33332d3333203d3e20323635333238.roa
File:                     323830343a326532383a383030303a3a2f33332d3333203d3e20323635333238.roa (raw, json)
Hash identifier:          nPPjOgTy1G+KX93f5DiSezR05k88GX8A9OO3ZCzOlTw=
Subject key identifier:   F5:EC:A0:3B:B0:E0:AF:74:3E:68:94:E0:30:00:C8:9E:B8:2B:6B:91
Certificate issuer:       /CN=77947C88DBADADCA74224F342BBB9D3AE9B34D31
Certificate serial:       70FE4D3BB60A9531AE1C7A9892CEF8B28E0CE463
Authority key identifier: 77:94:7C:88:DB:AD:AD:CA:74:22:4F:34:2B:BB:9D:3A:E9:B3:4D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a383030303a3a2f33332d3333203d3e20323635333238.roa
Signing time:             Fri 29 Sep 2023 17:23:52 +0000
ROA not before:           Fri 29 Sep 2023 17:18:52 +0000
ROA not after:            Fri 27 Sep 2024 17:23:52 +0000
asID:                     265328
IP address blocks:        2804:2e28:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fe:4d:3b:b6:0a:95:31:ae:1c:7a:98:92:ce:f8:b2:8e:0c:e4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77947C88DBADADCA74224F342BBB9D3AE9B34D31
        Validity
            Not Before: Sep 29 17:18:52 2023 GMT
            Not After : Sep 27 17:23:52 2024 GMT
        Subject: CN=F5ECA03BB0E0AF743E6894E03000C89EB82B6B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:88:f1:e3:5f:bf:6c:b1:d1:ed:5a:b0:ba:6c:
                    7c:92:2a:7e:b1:81:a4:aa:55:91:d8:ed:65:d3:3c:
                    bc:6b:7e:b6:b6:dd:06:37:41:b1:12:00:6c:03:20:
                    c8:67:2f:65:c3:88:f9:88:a1:9c:8a:3a:69:fd:71:
                    a3:7c:4c:d3:4e:1b:e6:d9:bf:47:d4:2b:6f:f4:d9:
                    f4:cd:9e:ac:37:6d:45:e1:7d:5d:72:62:9c:80:2a:
                    52:27:cd:28:d5:fd:15:ea:75:68:f2:96:70:93:a6:
                    ed:ab:fe:44:3c:b2:a2:02:8f:af:63:c1:97:a5:b5:
                    d0:7d:8d:d0:ce:79:96:bf:26:36:f1:77:92:99:3f:
                    af:17:c1:9a:db:3d:0f:dd:d8:22:5a:91:08:05:6e:
                    ff:33:79:0c:80:c6:20:b7:96:89:10:ef:3a:42:40:
                    c0:d8:64:5f:70:be:e3:93:1f:85:51:7b:36:eb:2d:
                    e2:36:f5:c6:31:24:9f:00:ac:dc:08:4c:3b:8e:5a:
                    d4:78:6f:6d:3d:38:fe:a7:be:08:be:ff:63:ce:8a:
                    e2:28:4d:26:e5:a5:2b:99:7b:70:65:f4:d2:c4:73:
                    80:10:cb:06:ba:b2:9e:2a:df:8b:71:32:ec:fe:34:
                    78:a5:25:ba:87:1c:65:03:cd:44:b7:27:66:d1:18:
                    17:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EC:A0:3B:B0:E0:AF:74:3E:68:94:E0:30:00:C8:9E:B8:2B:6B:91
            X509v3 Authority Key Identifier:
                keyid:77:94:7C:88:DB:AD:AD:CA:74:22:4F:34:2B:BB:9D:3A:E9:B3:4D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a383030303a3a2f33332d3333203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e28:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         71:05:e7:79:b3:53:82:fb:24:dd:ca:cf:e2:38:ab:1e:11:41:
         7d:21:6f:2b:00:6d:24:97:4c:1d:25:69:6a:a6:6f:f7:d6:a7:
         f9:61:c7:fd:de:2d:9b:1d:bc:54:23:ef:5e:61:9f:b4:57:4e:
         c1:72:85:6f:62:d3:98:87:89:21:cb:00:0d:4b:d2:eb:fd:35:
         61:11:2c:08:82:aa:7e:a4:4f:10:86:35:2f:14:d5:cf:8c:4e:
         56:5e:92:8d:f6:11:f4:6d:c7:00:48:f1:17:4d:03:8f:4d:fb:
         20:9b:0e:0b:d5:30:ad:94:7f:39:17:68:ee:4f:78:4d:47:8d:
         6f:49:57:54:08:cb:1d:49:ab:a5:73:6c:6a:ce:4f:8b:f8:79:
         67:e7:4c:9f:83:96:7c:e2:5b:a9:93:79:55:6d:b3:55:8f:93:
         92:54:fd:34:9a:f0:01:f7:0c:47:c2:ee:fc:f2:c5:50:c0:ca:
         84:ec:8e:6e:a3:c5:09:c7:2b:db:51:79:24:5a:28:fa:fc:76:
         dd:2e:6b:c9:c6:6d:23:09:26:b1:af:3b:55:4f:0a:b9:d8:87:
         e5:cb:66:a7:f5:fd:0f:5f:34:1e:d2:50:73:b2:81:b7:e2:cc:
         bc:cc:e4:6e:af:47:b8:f1:be:31:4b:b8:0b:08:8f:44:d0:a8:
         19:11:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org