Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/323830343a326534633a383030303a3a2f33332d3333203d3e20323635333337.roa
File:                     323830343a326534633a383030303a3a2f33332d3333203d3e20323635333337.roa (raw, json)
Hash identifier:          Kdsqz+UCaVzrLj/tTg/jqB0XFUW4iZt18ABZe+GzvBA=
Subject key identifier:   F1:B4:32:51:19:72:91:6E:A4:88:A5:70:34:E0:CE:64:41:9F:7D:BE
Certificate issuer:       /CN=2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8
Certificate serial:       616F40212502F638A64964CA399A4FC263E3412F
Authority key identifier: 2B:42:6F:B5:76:C4:4D:9F:52:DC:A8:6B:26:EE:5A:1C:B7:EB:D1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/323830343a326534633a383030303a3a2f33332d3333203d3e20323635333337.roa
Signing time:             Wed 06 Sep 2023 01:56:20 +0000
ROA not before:           Wed 06 Sep 2023 01:51:20 +0000
ROA not after:            Wed 04 Sep 2024 01:56:20 +0000
asID:                     265337
IP address blocks:        2804:2e4c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6f:40:21:25:02:f6:38:a6:49:64:ca:39:9a:4f:c2:63:e3:41:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8
        Validity
            Not Before: Sep  6 01:51:20 2023 GMT
            Not After : Sep  4 01:56:20 2024 GMT
        Subject: CN=F1B432511972916EA488A57034E0CE64419F7DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bc:c7:f0:94:b6:eb:0e:18:d0:e1:15:18:43:
                    b7:f9:51:25:30:43:60:6e:0a:4b:66:ad:e5:c9:fb:
                    92:cd:e3:22:a5:9e:0a:ed:54:bd:5a:98:11:27:d7:
                    0c:63:db:e2:23:70:eb:33:e7:af:6a:3f:7e:e5:39:
                    4e:82:87:04:1d:70:76:9d:9a:d2:83:76:56:83:b6:
                    04:5b:9a:00:52:24:c1:b0:37:10:f2:1d:48:c6:05:
                    1f:9c:89:2a:3e:5f:9f:f8:08:35:d8:d1:a3:5a:92:
                    d4:0b:fe:27:79:bc:c3:3a:7d:ce:88:dc:5f:19:85:
                    e2:0d:e9:c9:03:47:65:21:1e:a9:74:93:e6:f1:4b:
                    2e:d9:db:42:30:6c:07:2c:e8:7f:7e:cd:38:01:80:
                    58:9e:fb:3e:d0:c0:99:6d:5f:40:48:12:f1:fb:b0:
                    ce:bd:a8:d4:0d:99:62:c1:ba:2b:6b:22:e4:bc:4c:
                    c9:65:6b:f4:20:19:4c:3f:04:09:10:37:e2:57:9a:
                    e8:e3:8f:c8:e7:66:84:ce:98:e7:41:72:70:26:77:
                    95:50:c6:30:d1:be:43:04:a8:99:6e:8e:4c:03:eb:
                    ff:11:c2:7e:b9:a4:46:66:65:19:91:46:b1:be:b6:
                    89:24:c5:e7:9a:be:10:2c:4d:a9:e4:18:b8:1e:ee:
                    24:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B4:32:51:19:72:91:6E:A4:88:A5:70:34:E0:CE:64:41:9F:7D:BE
            X509v3 Authority Key Identifier:
                keyid:2B:42:6F:B5:76:C4:4D:9F:52:DC:A8:6B:26:EE:5A:1C:B7:EB:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/323830343a326534633a383030303a3a2f33332d3333203d3e20323635333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e4c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         42:90:64:60:f8:85:6b:57:61:2d:db:0c:c8:37:8f:42:75:6a:
         12:4c:1d:de:93:51:1b:2f:d5:5d:d8:99:a8:60:80:c6:ea:c0:
         7d:0d:3f:24:c7:0c:9b:29:69:81:85:32:12:d4:b8:77:68:8c:
         85:17:45:69:5d:63:95:b6:a5:7a:fc:72:67:59:0f:ff:e2:38:
         9e:eb:8a:84:1c:3d:57:89:0b:c4:0a:7c:4d:c9:83:f3:fd:b1:
         cf:9b:d2:21:1e:64:f9:90:7c:64:33:82:a8:8e:eb:cf:b5:bf:
         84:42:21:6d:e8:82:ed:e4:73:eb:f0:2c:a1:0d:fe:05:21:61:
         2f:34:e6:20:09:61:ad:81:65:c0:0f:51:de:9f:2d:64:90:8c:
         70:7d:8d:ff:f5:64:33:b5:b5:20:36:fb:75:81:55:84:3c:b5:
         56:94:e8:d5:16:ee:d7:43:87:7e:fb:b2:49:cc:99:fa:88:e3:
         d3:6e:b3:4b:b5:7b:ca:62:67:76:99:5d:e5:8d:4c:25:92:60:
         88:1a:8e:cf:3d:c4:cf:dd:60:ea:79:e2:c2:ec:04:ee:d3:75:
         87:c0:1c:37:1f:fe:cc:3c:e1:71:d3:29:32:d9:2e:5d:01:19:
         db:ba:de:f0:ad:45:54:61:01:21:98:4a:0a:1e:69:10:b3:a4:
         01:73:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:24 2024 by rpki-client on console-fra.rpki-client.org