Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/323830343a373362343a383030303a3a2f33332d3333203d3e20323730393332.roa
File:                     323830343a373362343a383030303a3a2f33332d3333203d3e20323730393332.roa (raw, json)
Hash identifier:          6BuilcBmR/gprGNS4Yt6oim2w5LVD3y5Fv2DNeYR1nI=
Subject key identifier:   2D:EA:6C:80:A8:58:E7:8A:4A:BE:54:91:AD:3A:39:49:76:B9:4E:2B
Certificate issuer:       /CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
Certificate serial:       5DA3E4200C8EADF9357AA18B819622161427D66B
Authority key identifier: 51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/323830343a373362343a383030303a3a2f33332d3333203d3e20323730393332.roa
Signing time:             Wed 13 Mar 2024 12:03:13 +0000
ROA not before:           Wed 13 Mar 2024 11:58:13 +0000
ROA not after:            Wed 12 Mar 2025 12:03:13 +0000
asID:                     270932
IP address blocks:        2804:73b4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a3:e4:20:0c:8e:ad:f9:35:7a:a1:8b:81:96:22:16:14:27:d6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
        Validity
            Not Before: Mar 13 11:58:13 2024 GMT
            Not After : Mar 12 12:03:13 2025 GMT
        Subject: CN=2DEA6C80A858E78A4ABE5491AD3A394976B94E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:b7:7c:67:f3:97:ce:49:54:70:6f:3f:2c:
                    73:b0:47:45:35:9c:c0:32:ec:a9:9e:69:04:76:2e:
                    43:83:12:db:be:70:c6:00:c1:c4:dd:7b:79:c7:a1:
                    57:06:28:8a:6a:92:08:fb:28:5e:67:57:87:51:42:
                    eb:8f:ae:22:89:03:89:c7:e2:31:14:42:f0:ee:da:
                    ee:0a:ce:84:15:e2:64:46:ec:3f:39:24:fc:24:2e:
                    72:6b:f2:1e:fd:2e:d9:45:66:5c:36:cb:06:7e:fb:
                    56:c0:be:a8:58:0f:a5:8b:20:a5:f8:dc:cc:a2:cf:
                    42:85:f6:6e:4e:a1:61:dd:7b:40:76:44:19:ec:8e:
                    8d:9d:d4:58:dc:1d:29:f9:4e:0b:84:6f:ea:ff:3d:
                    c0:fe:ef:c4:f7:05:ad:f9:e9:e7:01:9f:8b:c2:35:
                    73:4b:41:95:7f:c8:f2:fe:7e:94:3d:3c:30:0a:41:
                    73:e3:32:4f:b9:04:66:20:f6:da:49:f1:6f:80:0b:
                    7d:11:60:f0:ef:35:c9:1c:04:3c:0b:9d:bd:24:ad:
                    e3:d0:c2:54:06:b3:78:3f:51:fa:bd:ba:8d:da:1e:
                    29:56:02:86:c5:34:20:34:a2:60:c0:a4:db:5d:47:
                    1d:b4:b7:24:d1:6f:80:76:7a:2e:8d:28:3b:68:ff:
                    01:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EA:6C:80:A8:58:E7:8A:4A:BE:54:91:AD:3A:39:49:76:B9:4E:2B
            X509v3 Authority Key Identifier:
                keyid:51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/323830343a373362343a383030303a3a2f33332d3333203d3e20323730393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73b4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         93:f1:a8:50:d9:0f:84:7a:1c:75:f2:7f:d7:64:40:26:f2:9c:
         dd:d2:b5:88:67:e6:52:d1:db:28:9a:6c:03:95:f3:28:e1:23:
         b3:65:c4:8e:5a:26:f3:ea:9c:a8:ca:5e:c9:91:2f:2d:b6:e0:
         13:99:3a:e4:85:af:da:c8:74:41:53:11:72:a4:76:61:da:6a:
         a0:05:6a:bb:8e:99:dd:48:93:d9:7b:b7:72:ee:46:c5:e6:14:
         c2:57:e0:24:0e:e9:da:2c:44:12:b5:44:ff:86:44:40:6a:46:
         66:54:e0:2c:7a:bb:04:94:74:e4:1f:0a:a9:bb:ee:f5:61:eb:
         a2:99:b1:2c:5c:49:b9:cf:ec:15:98:a8:69:7b:82:6b:08:6b:
         bb:a6:9c:a8:ef:37:41:06:ad:ab:a7:a7:fe:c9:99:59:c8:63:
         01:3d:aa:4f:2c:6e:b2:7f:89:17:ca:4a:6c:b7:df:29:92:95:
         a4:ce:2b:ad:21:17:fb:29:21:fc:82:e2:e4:c8:8b:7f:5a:b9:
         cd:bc:d5:c6:f7:ad:f7:58:a6:ae:62:7c:78:c6:82:21:5f:11:
         23:d2:bb:33:42:f0:f9:30:3d:9e:4f:d9:a3:6e:18:f3:a2:ff:
         bf:03:a8:bf:86:29:6a:95:2d:21:12:92:e2:17:8b:67:79:bc:
         4b:4d:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:24 2024 by rpki-client on console-fra.rpki-client.org