Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a383030303a3a2f33332d3333203d3e20323730383338.roa
File:                     323830343a373233303a383030303a3a2f33332d3333203d3e20323730383338.roa (raw, json)
Hash identifier:          O8FKI7leI0PKKOJx6tsGfoIaea/EoQDiBk77zbW1Sfw=
Subject key identifier:   59:3E:22:BD:C6:BF:4E:DA:80:FC:F5:A4:A7:0B:C6:1E:A6:F8:00:E6
Certificate issuer:       /CN=7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D
Certificate serial:       467F425177671E7CF069B3B182682EF72542697B
Authority key identifier: 7C:DD:4E:6B:D1:65:23:FD:AB:1E:B7:24:CD:C2:EA:CC:A8:75:9C:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a383030303a3a2f33332d3333203d3e20323730383338.roa
Signing time:             Thu 05 Oct 2023 18:53:09 +0000
ROA not before:           Thu 05 Oct 2023 18:48:09 +0000
ROA not after:            Thu 03 Oct 2024 18:53:09 +0000
asID:                     270838
IP address blocks:        2804:7230:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7f:42:51:77:67:1e:7c:f0:69:b3:b1:82:68:2e:f7:25:42:69:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D
        Validity
            Not Before: Oct  5 18:48:09 2023 GMT
            Not After : Oct  3 18:53:09 2024 GMT
        Subject: CN=593E22BDC6BF4EDA80FCF5A4A70BC61EA6F800E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:fe:d8:b6:ed:c7:0d:50:5b:f5:3b:d8:6b:
                    b5:a7:ac:53:de:7b:8e:e3:32:84:8e:32:3a:bf:99:
                    ae:f0:97:39:71:a8:4a:33:15:b9:14:1b:7a:99:b6:
                    f4:96:b9:b7:b8:77:44:02:34:2e:43:ba:2f:ef:07:
                    b2:1b:e7:c6:ad:92:1e:54:18:68:fc:bf:4f:a3:45:
                    3c:45:7c:31:35:c7:f7:f4:8a:6a:7b:df:a0:4a:37:
                    14:11:3b:40:7f:2f:10:f1:47:38:60:47:eb:97:e1:
                    ba:a1:cd:24:07:59:d6:e5:07:41:ac:51:56:82:2f:
                    6d:a4:1b:78:6e:41:fc:f6:eb:04:5e:fe:b9:54:33:
                    23:e2:d8:4c:08:1c:c4:58:c8:46:dc:bb:62:ed:c2:
                    1f:02:93:cd:f2:80:38:f4:41:7a:7d:bf:13:ea:46:
                    dc:86:36:b7:23:82:4f:cd:b6:63:0f:e5:1b:97:16:
                    34:52:f1:59:91:0f:f5:5d:b7:78:f6:91:e5:99:4d:
                    fa:42:b4:dc:c4:d8:e1:a3:51:27:f5:41:bc:1f:fc:
                    1d:7c:02:d9:b8:e9:cd:49:99:ff:80:67:03:8a:a2:
                    8c:14:eb:28:09:80:83:fa:95:fe:1e:09:fd:f8:8e:
                    0d:02:30:66:61:f7:db:81:49:2d:ec:33:5a:3d:e2:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3E:22:BD:C6:BF:4E:DA:80:FC:F5:A4:A7:0B:C6:1E:A6:F8:00:E6
            X509v3 Authority Key Identifier:
                keyid:7C:DD:4E:6B:D1:65:23:FD:AB:1E:B7:24:CD:C2:EA:CC:A8:75:9C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a383030303a3a2f33332d3333203d3e20323730383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7230:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         c7:ff:2c:f2:9a:2e:54:88:48:d9:0c:c7:15:de:a2:03:d8:f2:
         35:ae:49:bf:0f:d0:cd:26:49:23:85:6c:24:61:45:db:20:b7:
         0b:42:e1:ab:52:cb:3f:ff:6a:cc:2f:ae:d2:52:c4:55:67:62:
         1a:35:e1:06:7e:1e:7c:77:e9:04:e5:d6:81:09:4d:8a:27:00:
         e8:f3:70:86:ae:66:92:06:03:8a:d9:5e:81:3b:5d:ef:46:3f:
         bd:aa:f1:2e:c2:c3:93:0b:8a:eb:5f:db:31:e9:d5:37:ff:65:
         81:f6:8a:b8:73:b8:8a:ea:24:d8:bb:6d:5a:f7:7f:ee:e7:78:
         e0:17:e4:dd:5a:7e:53:c0:84:7c:6f:9a:48:4c:e7:be:41:ad:
         30:8b:cf:e2:ff:33:8c:e8:9e:62:63:0f:b2:15:bd:5b:0c:e4:
         46:2b:7e:d5:34:f6:21:13:07:e4:71:7c:cd:69:73:db:37:22:
         da:b8:33:c3:16:16:d2:3a:7d:bc:56:67:c7:e2:99:d0:9d:82:
         4a:41:fd:b3:e5:1c:98:93:c4:aa:bb:0b:f3:2e:02:ee:ea:28:
         cb:d3:bc:8f:2f:15:40:ec:7e:97:c3:99:28:bf:29:9d:e8:8f:
         0d:0d:cc:d2:02:5a:d5:cf:35:79:c5:3a:5c:68:df:28:80:f7:
         27:c5:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org