Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/323830343a333761633a3a2f33322d3332203d3e20323636343237.roa
File:                     323830343a333761633a3a2f33322d3332203d3e20323636343237.roa (raw, json)
Hash identifier:          WGwuN2zAy6AU94aL5afFujIAKZYkw/BekBin8wW0UMw=
Subject key identifier:   CD:E1:86:3B:97:33:B7:F9:B7:BB:97:13:19:7C:04:40:24:23:EF:87
Certificate issuer:       /CN=721116431679FAB6BE0B0061F03C820E31FF5333
Certificate serial:       6B4B6F07A175BF6CF4B7EC1621DB9BDCBBC15FA8
Authority key identifier: 72:11:16:43:16:79:FA:B6:BE:0B:00:61:F0:3C:82:0E:31:FF:53:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/721116431679FAB6BE0B0061F03C820E31FF5333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/323830343a333761633a3a2f33322d3332203d3e20323636343237.roa
Signing time:             Tue 07 Nov 2023 13:02:37 +0000
ROA not before:           Tue 07 Nov 2023 12:57:37 +0000
ROA not after:            Tue 05 Nov 2024 13:02:37 +0000
asID:                     266427
IP address blocks:        2804:37ac::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4b:6f:07:a1:75:bf:6c:f4:b7:ec:16:21:db:9b:dc:bb:c1:5f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721116431679FAB6BE0B0061F03C820E31FF5333
        Validity
            Not Before: Nov  7 12:57:37 2023 GMT
            Not After : Nov  5 13:02:37 2024 GMT
        Subject: CN=CDE1863B9733B7F9B7BB9713197C04402423EF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5e:1e:5d:19:c6:a7:22:de:34:2d:ee:f2:13:
                    c9:11:d2:72:3c:38:c8:5a:18:b6:bd:3e:18:1b:91:
                    c5:46:c9:4a:56:56:0e:fa:b2:38:9e:49:13:30:90:
                    56:fb:f8:e8:58:2e:95:66:73:bf:14:e0:e2:82:22:
                    78:96:8c:83:aa:81:24:4c:73:7a:3a:b4:a9:52:5e:
                    da:28:15:45:75:96:85:57:30:83:eb:ea:6e:c9:96:
                    d0:ea:0e:7b:48:88:d9:45:43:60:f0:88:09:21:28:
                    f6:64:b9:87:77:65:bf:8f:9e:2c:be:bb:be:0d:99:
                    f1:56:d7:89:b4:32:14:0a:7c:5f:06:55:56:17:b4:
                    48:ea:78:cc:03:17:f3:81:5d:4f:bb:8f:39:90:5e:
                    03:c8:35:41:b1:8b:ed:b9:dd:fe:3d:99:82:36:80:
                    a0:f7:85:14:d6:fb:e2:9c:92:8c:f8:9f:48:66:a9:
                    98:14:fd:99:34:68:d5:3f:12:f8:c5:7a:ee:20:aa:
                    7c:8e:eb:f0:4c:2f:c0:da:b1:7c:97:ad:40:bb:7a:
                    21:c2:21:90:87:4e:bc:c8:2c:f7:f7:6f:c7:90:6e:
                    86:ce:0f:a9:c6:f6:b6:de:bf:a1:2e:d1:8a:fa:e2:
                    80:dd:94:fe:6d:bd:a6:cf:f5:2e:3c:7f:dd:b6:a0:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E1:86:3B:97:33:B7:F9:B7:BB:97:13:19:7C:04:40:24:23:EF:87
            X509v3 Authority Key Identifier:
                keyid:72:11:16:43:16:79:FA:B6:BE:0B:00:61:F0:3C:82:0E:31:FF:53:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/721116431679FAB6BE0B0061F03C820E31FF5333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/721116431679FAB6BE0B0061F03C820E31FF5333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/323830343a333761633a3a2f33322d3332203d3e20323636343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:a5:a7:e2:64:0e:19:b2:56:6c:42:72:16:d9:68:55:45:77:
         f5:1e:29:8b:37:28:02:61:c2:57:16:f2:81:c1:5b:d6:71:95:
         a2:59:c8:6c:c3:d7:f7:08:29:34:98:42:55:f0:10:f3:c4:f9:
         2a:46:34:be:74:96:83:a9:9f:33:bf:ea:ec:e4:a1:f1:b1:3e:
         69:da:65:7d:dd:61:41:64:c1:14:e0:02:b1:37:72:08:38:f3:
         c2:aa:76:d3:c7:cc:66:81:20:b5:1b:bd:73:d3:8c:67:3d:47:
         d3:1a:86:5b:4b:67:67:27:25:45:e0:1b:9c:95:cd:30:24:9b:
         b4:02:a7:b4:e5:81:cb:e9:f0:ef:3b:c1:e5:a8:5a:76:1d:8b:
         02:ef:5a:a0:0d:75:17:00:25:1a:0b:10:e0:ee:ae:16:7b:3a:
         da:c9:30:df:03:eb:7c:ea:c2:2b:b0:d7:02:71:b2:83:b6:9f:
         da:bf:ae:81:08:1d:b1:d5:ef:0b:f8:77:58:d5:b0:b0:08:26:
         26:96:ab:55:fc:64:0c:53:60:c4:dc:70:0a:10:cf:1a:65:5b:
         8e:a8:a9:34:cb:ed:10:9f:54:86:c7:bc:90:fe:ef:1f:f5:1a:
         e0:ff:9b:74:d0:b8:15:90:65:f9:d9:d8:77:71:31:da:82:12:
         03:11:16:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org