Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a3a2f33322d3332203d3e20323730343137.roa
File:                     323830343a366262303a3a2f33322d3332203d3e20323730343137.roa (raw, json)
Hash identifier:          PODeU+frjaGYsUpWCNcO6OIPlxToEw+zr8GfrMa53oI=
Subject key identifier:   CE:21:F5:6B:F9:18:83:12:FD:E0:4E:7A:DB:65:B4:F6:7A:CB:C7:4B
Certificate issuer:       /CN=C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD
Certificate serial:       706E5D622B69A6373C977344FDF604168192C1F3
Authority key identifier: C2:D5:EA:1A:04:A1:54:20:BD:5D:50:11:F0:BE:F6:13:5F:B0:8E:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a3a2f33322d3332203d3e20323730343137.roa
Signing time:             Wed 06 Mar 2024 20:50:47 +0000
ROA not before:           Wed 06 Mar 2024 20:45:47 +0000
ROA not after:            Wed 05 Mar 2025 20:50:47 +0000
asID:                     270417
IP address blocks:        2804:6bb0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6e:5d:62:2b:69:a6:37:3c:97:73:44:fd:f6:04:16:81:92:c1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD
        Validity
            Not Before: Mar  6 20:45:47 2024 GMT
            Not After : Mar  5 20:50:47 2025 GMT
        Subject: CN=CE21F56BF9188312FDE04E7ADB65B4F67ACBC74B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d5:6c:d8:9b:1b:3f:88:f5:ab:36:91:37:9b:
                    b0:ea:a3:03:d0:76:9a:0d:c5:f0:ca:53:f3:03:e2:
                    58:03:28:f3:c7:76:3d:0b:4b:af:e4:fa:79:10:07:
                    95:f8:a5:e4:d6:c5:fd:44:bd:a8:d9:5f:79:8e:45:
                    90:c5:c2:7e:3a:60:02:05:9b:99:7f:36:58:79:fd:
                    89:50:c4:7e:4a:17:a4:b6:1f:1d:71:34:aa:f6:0b:
                    08:7a:14:38:98:fd:a0:bb:16:cd:33:10:2e:90:fa:
                    c1:30:62:85:59:e8:42:75:34:93:5c:9f:42:cd:26:
                    67:6e:64:cf:65:fe:14:ee:11:35:54:f4:11:0b:58:
                    53:58:fb:21:e6:5e:16:03:2e:95:b6:17:51:cd:50:
                    51:0e:a6:fd:09:40:0e:21:4b:e4:7c:12:5d:85:48:
                    3a:10:5b:0c:71:41:ad:5f:95:f0:75:2b:97:c8:b1:
                    de:df:0b:f0:56:a4:b2:89:21:d7:b6:6d:a7:f2:8a:
                    24:1c:31:24:fc:14:37:a2:aa:8b:93:69:4b:58:9f:
                    dc:25:31:1f:a0:fc:7c:68:dc:0f:72:ff:db:0e:8c:
                    c1:5f:df:7c:70:75:69:b6:0a:79:66:63:4e:50:aa:
                    74:4c:0f:1c:d8:79:8b:bd:32:13:f1:f4:77:58:92:
                    be:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:21:F5:6B:F9:18:83:12:FD:E0:4E:7A:DB:65:B4:F6:7A:CB:C7:4B
            X509v3 Authority Key Identifier:
                keyid:C2:D5:EA:1A:04:A1:54:20:BD:5D:50:11:F0:BE:F6:13:5F:B0:8E:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a3a2f33322d3332203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:a8:c2:3b:b0:52:42:e1:5e:99:78:b2:ef:fc:bb:f6:c2:0e:
         73:3b:d0:b4:91:97:f3:f2:dc:b1:2c:65:a7:56:d3:cf:c4:01:
         3d:ce:65:d0:1e:2c:f1:43:f5:a8:5f:20:b3:db:66:72:c5:56:
         63:2a:47:3e:6c:f3:da:bd:b0:e3:94:17:be:b3:da:26:52:b2:
         5d:0a:aa:65:a6:e8:79:c7:a3:cb:a5:d4:92:65:07:5a:45:b9:
         03:db:b1:23:96:c8:1f:79:40:99:87:35:a6:44:6b:da:8a:c7:
         67:8b:21:45:19:38:fc:2f:fc:80:40:11:8d:9a:4c:18:2a:43:
         4d:c5:72:3c:ca:79:6d:a8:0f:35:aa:4c:fe:c6:a5:e8:e3:13:
         e2:5e:35:c4:5a:d4:c5:e9:1a:33:38:88:ea:c4:be:ba:c1:88:
         1e:e6:8c:0a:0d:87:c2:5c:44:06:26:a6:5b:c3:e9:8e:6d:67:
         bc:4f:9b:21:5d:ce:9f:11:3f:ea:9f:5b:a2:fc:b9:78:48:7c:
         2c:ea:56:82:08:01:0f:53:a7:d7:55:53:5d:07:e2:c9:ff:1f:
         69:6e:a8:27:7b:5d:fd:9b:13:9a:0c:f4:63:88:4b:a0:cc:d2:
         d8:a9:20:dd:e5:5f:5c:e0:2a:4b:9a:fa:a6:0d:48:68:5c:4d:
         e8:2f:e5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org