Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/323830343a323165343a343030303a3a2f33342d3334203d3e20323634353830.roa
File:                     323830343a323165343a343030303a3a2f33342d3334203d3e20323634353830.roa (raw, json)
Hash identifier:          EjuOAjw21377A3Mzz4Bgl12nFqtJ0u6gYQOArEzC9bY=
Subject key identifier:   E9:99:EE:EF:3B:4F:0F:9A:03:E0:AB:D0:C3:14:AD:28:5E:D9:DD:74
Certificate issuer:       /CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
Certificate serial:       75EA51AFB1B54EFC4A94BABEDB25E962E7CFC185
Authority key identifier: 2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/323830343a323165343a343030303a3a2f33342d3334203d3e20323634353830.roa
Signing time:             Tue 05 Dec 2023 17:37:40 +0000
ROA not before:           Tue 05 Dec 2023 17:32:40 +0000
ROA not after:            Tue 03 Dec 2024 17:37:40 +0000
asID:                     264580
IP address blocks:        2804:21e4:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ea:51:af:b1:b5:4e:fc:4a:94:ba:be:db:25:e9:62:e7:cf:c1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
        Validity
            Not Before: Dec  5 17:32:40 2023 GMT
            Not After : Dec  3 17:37:40 2024 GMT
        Subject: CN=E999EEEF3B4F0F9A03E0ABD0C314AD285ED9DD74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:dd:31:b5:c0:bb:53:4b:18:83:7a:e4:fe:
                    34:f3:0f:1d:f7:c2:e1:b4:da:6e:a4:11:5e:d9:e4:
                    32:8a:61:23:ef:35:92:dc:35:88:50:81:fe:83:3d:
                    3e:f8:f8:37:ea:4f:67:c0:06:53:75:c6:e7:ad:52:
                    82:08:b8:02:c2:5d:0e:ee:fd:ec:d1:75:e2:2f:92:
                    d3:7a:0e:bf:7e:8c:75:c2:e8:42:46:a6:a0:b0:fb:
                    2d:97:53:f2:1f:cb:6d:28:5f:0a:6f:39:cd:a0:da:
                    a6:c9:7e:ab:2c:c6:7f:ef:d8:93:95:bd:d8:70:fb:
                    37:ab:c0:da:b7:e0:d5:8e:56:b2:0d:8b:38:7e:a1:
                    5c:07:cd:53:0d:02:3d:b6:df:48:24:49:1e:18:30:
                    bb:3c:8a:59:15:98:ab:e6:94:c3:4a:06:87:95:30:
                    6b:0e:cc:91:57:fb:5f:aa:30:d6:7f:43:d1:ff:ea:
                    5d:8f:b5:93:e1:3c:6a:35:1e:0f:fb:3a:48:49:31:
                    b7:da:2d:2a:8d:72:74:1f:4b:d8:6e:f6:8f:86:0a:
                    0e:d4:ab:6d:30:cb:e9:4f:5a:b6:c9:4e:47:12:b2:
                    b1:61:3b:aa:77:60:3e:7a:ca:d7:71:08:d8:5b:02:
                    41:4d:73:c5:85:74:dc:8f:d2:b1:7e:ae:b4:ce:7b:
                    cf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:99:EE:EF:3B:4F:0F:9A:03:E0:AB:D0:C3:14:AD:28:5E:D9:DD:74
            X509v3 Authority Key Identifier:
                keyid:2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/323830343a323165343a343030303a3a2f33342d3334203d3e20323634353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21e4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3a:4d:5e:7e:26:7e:75:af:fd:27:af:44:6d:02:3d:8d:d3:1f:
         c8:9f:c7:d0:bd:3a:92:76:8f:6b:1b:60:84:ac:e6:15:38:61:
         78:96:0c:1f:c7:54:76:0a:3e:22:db:f4:28:e5:63:af:47:f3:
         39:46:c6:ac:4f:8f:93:db:b5:8b:02:7d:78:02:60:8c:85:cf:
         6b:7f:03:b4:86:30:58:e8:3b:b7:25:ca:74:bc:68:58:89:56:
         03:a1:08:24:2f:4a:fd:37:8f:2b:c0:92:2e:9f:9a:43:d8:11:
         b3:70:78:55:30:d3:e4:ac:56:93:7e:d0:6d:6e:21:2a:63:eb:
         c9:29:81:04:00:c1:08:65:d8:58:a5:ec:d4:35:ba:fc:e5:01:
         05:db:2c:51:86:1f:ec:74:e9:61:10:0e:23:8b:f0:72:52:11:
         f0:6b:ab:0a:c7:5d:9d:fe:49:5d:21:53:1c:09:56:d6:9b:1a:
         77:77:5c:24:87:61:e0:e4:c7:6c:d2:77:9e:d1:92:ac:64:e6:
         4c:e9:2d:01:5e:1c:29:6f:1f:0a:00:b5:f3:31:e8:35:22:9f:
         2e:ce:f4:24:20:bf:dd:b7:7c:4e:23:92:a2:99:8d:2a:5f:68:
         b8:72:a3:10:51:9b:a1:f8:03:60:ad:96:81:3f:32:1d:33:f4:
         02:c9:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org