Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33332d3333203d3e20323730383338.roa
File:                     323830343a373233303a3a2f33332d3333203d3e20323730383338.roa (raw, json)
Hash identifier:          n8tpp2yD9oP1mo9pve4ZlHpKU1WwxXRiz/zYfC8FAtk=
Subject key identifier:   67:F2:39:27:FE:07:B0:B1:72:0B:5A:26:24:EF:62:96:8A:3F:BC:03
Certificate issuer:       /CN=7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D
Certificate serial:       1834657834DEAC7611AB6D4957D3F2FC945D817D
Authority key identifier: 7C:DD:4E:6B:D1:65:23:FD:AB:1E:B7:24:CD:C2:EA:CC:A8:75:9C:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33332d3333203d3e20323730383338.roa
Signing time:             Thu 05 Oct 2023 18:53:04 +0000
ROA not before:           Thu 05 Oct 2023 18:48:04 +0000
ROA not after:            Thu 03 Oct 2024 18:53:04 +0000
asID:                     270838
IP address blocks:        2804:7230::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:34:65:78:34:de:ac:76:11:ab:6d:49:57:d3:f2:fc:94:5d:81:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D
        Validity
            Not Before: Oct  5 18:48:04 2023 GMT
            Not After : Oct  3 18:53:04 2024 GMT
        Subject: CN=67F23927FE07B0B1720B5A2624EF62968A3FBC03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:e0:42:d2:9d:c4:5e:8a:36:1a:31:cd:c5:
                    cf:2a:a6:aa:98:21:f5:c7:0e:0b:a3:7c:ef:97:55:
                    7d:65:48:48:fb:ae:9e:74:74:d5:35:71:ac:2f:ac:
                    74:ea:6f:17:cd:53:dc:5f:52:0b:4a:7e:cf:d1:cf:
                    29:cc:75:08:0a:9d:3c:24:29:40:27:69:79:91:ba:
                    df:8c:7f:8d:06:55:fc:ed:55:96:fe:5f:0c:22:3a:
                    ec:21:0e:a0:4a:f1:c7:1a:64:21:20:4e:d9:69:ac:
                    e1:c9:61:8d:06:9e:10:61:f1:81:c4:c9:50:7e:67:
                    51:a4:16:92:6a:a6:04:aa:3a:d4:87:3c:cb:1d:cd:
                    42:13:9a:81:7c:0b:e3:ab:b9:56:5e:54:d7:b9:10:
                    5d:9e:30:d2:b1:97:5a:b4:7f:a6:0c:47:a7:13:92:
                    39:2b:09:9f:8f:08:37:c9:78:4c:dd:5b:94:b6:9c:
                    35:0d:a8:25:88:f0:97:db:d2:34:8b:26:2f:44:19:
                    5a:cd:06:4e:6e:e9:5b:d3:7f:4d:1c:9f:06:a4:0b:
                    6d:fa:fb:46:e0:8b:93:26:c5:6e:74:80:19:55:48:
                    1c:20:48:c8:dc:f7:e6:21:9d:9a:59:e9:ef:50:2d:
                    45:10:b3:b5:6a:5a:88:b4:17:4c:8a:ef:34:fd:fe:
                    32:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F2:39:27:FE:07:B0:B1:72:0B:5A:26:24:EF:62:96:8A:3F:BC:03
            X509v3 Authority Key Identifier:
                keyid:7C:DD:4E:6B:D1:65:23:FD:AB:1E:B7:24:CD:C2:EA:CC:A8:75:9C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33332d3333203d3e20323730383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7230::/33

    Signature Algorithm: sha256WithRSAEncryption
         5f:cc:e5:bf:8f:4f:87:81:a9:4b:76:8f:3f:23:22:e3:91:e3:
         dd:31:5e:81:3c:18:f7:7a:18:79:47:59:c1:46:28:4e:30:44:
         87:02:96:19:1a:df:11:03:47:8b:d6:af:68:40:5c:b6:a3:02:
         5a:d9:4e:b1:96:7f:2f:38:06:2f:15:26:74:7d:5f:ed:5c:e1:
         2a:2a:6f:b7:58:9d:df:c9:55:44:1d:ca:7e:8a:72:29:dc:f3:
         99:92:ad:32:ce:7b:db:43:5f:94:23:5c:b2:5c:4c:cc:95:e0:
         ff:2f:47:aa:e6:45:26:f1:b1:9a:9c:ab:34:b0:90:6f:70:57:
         5c:49:2e:dc:00:77:9c:2a:b7:f8:6f:fc:68:f1:64:c9:83:5f:
         3d:6e:7d:8c:84:06:97:a2:7f:b2:86:bd:d4:6f:81:61:7c:5e:
         d2:73:ca:db:7c:30:5a:be:0e:3f:7c:cc:b8:9e:d4:f2:94:90:
         54:c6:a2:95:a4:42:9b:5c:99:36:41:f8:71:1d:8e:0e:ea:73:
         72:50:a7:28:25:f1:c6:c6:11:e8:a4:4c:9a:e7:8c:bc:7e:f5:
         ff:5c:5b:a8:7d:97:49:20:0c:80:9a:96:68:54:56:d9:66:32:
         b2:5b:d6:21:a8:6f:6e:9c:49:d1:13:5e:1d:bf:85:69:78:94:
         81:1d:f6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org