Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a383030303a3a2f33332d3333203d3e20323639363731.roa
File:                     323830343a363832343a383030303a3a2f33332d3333203d3e20323639363731.roa (raw, json)
Hash identifier:          ne6zT+BIt8SztjhSh7cmSjb+oO+awGbKEX4CNXYpIuU=
Subject key identifier:   D0:5B:C6:3D:F0:76:7C:D6:B5:78:AE:90:FC:EC:A5:91:5C:3C:33:88
Certificate issuer:       /CN=205E11FC057208BD35A389938A30DF75B51DBE05
Certificate serial:       0E767C206F34429320A71BBF45DA8AE48D8E20E0
Authority key identifier: 20:5E:11:FC:05:72:08:BD:35:A3:89:93:8A:30:DF:75:B5:1D:BE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/205E11FC057208BD35A389938A30DF75B51DBE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a383030303a3a2f33332d3333203d3e20323639363731.roa
Signing time:             Mon 16 Jan 2023 13:49:01 +0000
ROA not before:           Mon 16 Jan 2023 13:44:01 +0000
ROA not after:            Mon 15 Jan 2024 13:49:01 +0000
asID:                     269671
IP address blocks:        2804:6824:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:76:7c:20:6f:34:42:93:20:a7:1b:bf:45:da:8a:e4:8d:8e:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=205E11FC057208BD35A389938A30DF75B51DBE05
        Validity
            Not Before: Jan 16 13:44:01 2023 GMT
            Not After : Jan 15 13:49:01 2024 GMT
        Subject: CN=D05BC63DF0767CD6B578AE90FCECA5915C3C3388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:ce:ca:5e:5e:ca:99:72:a5:1b:91:c4:a6:
                    f0:aa:8d:92:30:1a:ab:a5:e1:d9:5f:45:2a:a1:09:
                    a8:56:5e:92:85:21:71:bf:6f:53:06:66:ca:2d:72:
                    63:bc:79:84:65:ed:b7:ce:e6:7c:03:25:75:f8:1e:
                    8a:0e:af:21:5b:7b:54:e1:58:d1:3b:7b:7c:ef:eb:
                    fd:7c:6a:86:86:01:ac:56:24:ce:d6:e4:86:24:c4:
                    b3:e9:3d:e2:f9:f3:84:c1:f3:40:0a:99:01:ec:e2:
                    0d:d7:61:ed:81:02:71:ae:22:95:11:85:ad:bf:e0:
                    31:e5:d9:03:00:51:8f:8b:7f:14:a7:d2:92:66:bb:
                    e7:83:7b:bd:07:4f:64:65:ab:0d:7f:18:52:9f:75:
                    8e:01:5a:68:cc:39:f2:05:52:60:30:b7:89:c0:0f:
                    f4:1e:84:05:2b:d9:22:8c:08:77:2d:93:16:8a:1a:
                    29:2a:0b:c7:fa:00:f4:69:8c:e7:84:0c:ea:6d:e5:
                    5f:88:69:17:76:01:c1:c8:fc:60:08:e9:98:45:fc:
                    d3:f6:43:31:50:e4:97:93:31:1e:de:b8:1e:5a:0c:
                    ed:e3:2d:c8:82:4f:a1:5c:5d:18:7e:c3:08:76:8b:
                    4e:98:f6:9e:3b:9e:b3:68:27:bb:b0:9f:eb:62:08:
                    ad:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5B:C6:3D:F0:76:7C:D6:B5:78:AE:90:FC:EC:A5:91:5C:3C:33:88
            X509v3 Authority Key Identifier:
                keyid:20:5E:11:FC:05:72:08:BD:35:A3:89:93:8A:30:DF:75:B5:1D:BE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/205E11FC057208BD35A389938A30DF75B51DBE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/205E11FC057208BD35A389938A30DF75B51DBE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a383030303a3a2f33332d3333203d3e20323639363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6824:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8f:b5:cf:7e:e7:2a:b2:48:a6:32:2d:10:6d:f7:4f:5b:9a:f2:
         03:8c:09:a7:44:79:8b:38:ae:fc:3a:4e:41:e0:25:a6:a4:d8:
         44:72:cc:50:0f:9e:ed:c0:b0:55:94:2d:a2:31:bd:c9:4b:61:
         c4:2e:45:3a:ca:19:8e:a4:97:64:3f:7f:f9:59:2d:34:a0:aa:
         13:20:ca:09:93:ad:f2:b3:45:94:6a:fe:5d:70:29:87:4e:78:
         f4:05:c5:b1:b8:8d:25:fa:7c:25:f3:e2:54:14:04:a0:08:ce:
         7e:c1:28:b5:41:33:57:09:8b:c1:83:f1:ec:35:c8:25:0a:14:
         37:43:e4:37:bf:c1:fc:e1:e6:13:b7:0e:da:e4:8b:7d:59:71:
         af:3c:82:fc:c5:96:f2:bd:f4:91:9b:d3:f7:e0:a3:3f:84:fd:
         39:af:78:c0:aa:3c:af:0b:e2:f7:7c:2a:4f:69:ba:b8:81:a2:
         6d:a4:28:73:7d:85:06:c6:24:aa:c8:1d:fe:c0:a4:f8:d4:39:
         0c:70:19:46:22:43:c8:58:0b:49:76:d3:b2:0d:bb:6d:9f:d6:
         72:dc:a7:f4:e0:a0:1b:0f:d1:5c:71:85:c3:a4:64:59:6d:fa:
         dd:bf:d8:c3:24:c5:76:83:58:05:41:b5:d0:24:9f:df:a5:af:
         b3:11:d5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org