Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33322d3335203d3e20323638313036.roa
File:                     323830343a353831383a3a2f33322d3335203d3e20323638313036.roa (raw, json)
Hash identifier:          zjYoURKd4ennymoxYzzFGojUKCWGqICHCsX/Divgb+U=
Subject key identifier:   3F:AA:F3:41:5F:FD:AD:D0:AC:5D:8B:EC:B2:30:7B:34:A2:0E:20:7F
Certificate issuer:       /CN=A66DDA8A5EEDDF69630CFBB6B041152978397596
Certificate serial:       042576784A4B327A6DF201386E919BFC494CFE85
Authority key identifier: A6:6D:DA:8A:5E:ED:DF:69:63:0C:FB:B6:B0:41:15:29:78:39:75:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A66DDA8A5EEDDF69630CFBB6B041152978397596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33322d3335203d3e20323638313036.roa
Signing time:             Tue 05 Dec 2023 14:44:31 +0000
ROA not before:           Tue 05 Dec 2023 14:39:31 +0000
ROA not after:            Tue 03 Dec 2024 14:44:31 +0000
asID:                     268106
IP address blocks:        2804:5818::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:25:76:78:4a:4b:32:7a:6d:f2:01:38:6e:91:9b:fc:49:4c:fe:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A66DDA8A5EEDDF69630CFBB6B041152978397596
        Validity
            Not Before: Dec  5 14:39:31 2023 GMT
            Not After : Dec  3 14:44:31 2024 GMT
        Subject: CN=3FAAF3415FFDADD0AC5D8BECB2307B34A20E207F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5f:26:c5:e1:dd:71:bc:58:9e:e3:1b:f6:91:
                    53:3b:d9:1d:83:d6:34:48:68:02:39:6d:13:89:a6:
                    fc:5c:27:3f:16:9c:02:aa:c8:32:79:d4:8c:de:fc:
                    3e:bb:ea:89:19:d8:fe:ab:19:b2:79:34:33:f5:e2:
                    96:c3:47:15:28:c5:4b:6f:c8:b5:31:d9:1f:98:0c:
                    9e:51:d0:8e:58:22:5f:a5:2a:ad:48:ac:9b:1e:f1:
                    6a:9c:57:58:7c:a1:6b:cc:22:be:0a:72:18:b3:0a:
                    a3:4a:bd:0a:8b:5d:15:fc:85:49:db:dc:ea:39:97:
                    7f:a4:be:c2:21:e8:79:26:89:ce:5f:8c:8f:1f:05:
                    c4:45:00:b2:82:bb:27:ac:a3:85:1e:8c:f0:14:d7:
                    c4:d2:92:28:fd:cc:2f:3b:db:e3:70:42:8f:ca:7a:
                    e9:dd:29:58:36:e5:36:53:a4:4a:6a:8a:62:73:f7:
                    2f:cd:af:7d:ee:49:80:1c:08:87:4c:a1:de:3d:d6:
                    aa:c6:e5:76:db:47:ce:c5:da:d0:b1:c7:53:05:5d:
                    bc:5f:e7:16:b0:ee:f4:fc:86:85:69:c5:b6:6a:60:
                    70:a8:c8:36:91:f5:3a:77:dd:5e:9a:4c:62:99:9f:
                    3d:4c:4f:93:63:bc:85:e6:9b:a2:71:68:c3:71:33:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AA:F3:41:5F:FD:AD:D0:AC:5D:8B:EC:B2:30:7B:34:A2:0E:20:7F
            X509v3 Authority Key Identifier:
                keyid:A6:6D:DA:8A:5E:ED:DF:69:63:0C:FB:B6:B0:41:15:29:78:39:75:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/A66DDA8A5EEDDF69630CFBB6B041152978397596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A66DDA8A5EEDDF69630CFBB6B041152978397596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33322d3335203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5818::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:0b:e9:93:35:88:c4:ab:63:ce:a2:01:b0:bb:28:52:cc:3d:
         dc:2e:7a:62:e2:fa:44:80:b8:65:fa:b1:31:a2:2e:85:d6:bd:
         30:f3:04:09:72:87:6e:8e:2e:cd:53:88:84:61:0a:29:b6:11:
         fd:7c:d3:d4:a4:45:8a:73:8c:e5:b9:9b:2c:8c:c1:89:42:15:
         13:c8:5d:17:1e:80:4c:b4:55:0f:23:ae:2d:51:ff:16:28:be:
         6a:f9:9b:5c:5e:45:a7:c9:9d:6f:dd:89:4d:89:60:d9:7e:73:
         07:22:1c:0e:67:e5:20:4f:07:a3:c8:35:aa:76:6c:fa:a7:33:
         ae:15:73:e3:a7:10:d2:bd:39:c1:7e:b1:b8:b7:a3:69:ed:76:
         a4:75:e4:84:5a:4f:a6:87:52:e2:c3:c7:a3:69:5d:dc:c8:0d:
         9b:5b:a1:b8:fe:93:d4:a5:71:44:3a:35:9d:b2:11:c8:88:f2:
         1a:db:65:4e:ef:6b:25:c2:cf:fc:2a:c0:bb:55:3e:19:82:4b:
         b5:e9:57:73:cc:2b:71:cf:49:c2:52:11:4b:d3:d0:9f:1e:b4:
         bd:99:ac:98:54:99:b7:92:db:e8:b6:d9:29:ea:a8:6d:e5:b1:
         a5:e0:cd:a7:fe:7e:be:37:97:de:9d:24:ed:8d:f1:8e:2b:20:
         15:b1:c7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org