Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a383030303a3a2f33342d3334203d3e20323637313238.roa
File:                     323830343a343838633a383030303a3a2f33342d3334203d3e20323637313238.roa (raw, json)
Hash identifier:          cJ8z9G0l1qGdm42cyNec5xmosYTIClmGhJlaWZnOWYs=
Subject key identifier:   7C:91:4D:79:60:EF:A5:66:76:8A:E5:76:7D:A9:41:A9:4B:D9:AB:2F
Certificate issuer:       /CN=F53D745990071B2CCEF5F48CBFA053605498A66A
Certificate serial:       7B5E5A7201B3E7BE351EB08A9F3DCBF9AA6A20FA
Authority key identifier: F5:3D:74:59:90:07:1B:2C:CE:F5:F4:8C:BF:A0:53:60:54:98:A6:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F53D745990071B2CCEF5F48CBFA053605498A66A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a383030303a3a2f33342d3334203d3e20323637313238.roa
Signing time:             Tue 05 Dec 2023 14:00:00 +0000
ROA not before:           Tue 05 Dec 2023 13:55:00 +0000
ROA not after:            Tue 03 Dec 2024 14:00:00 +0000
asID:                     267128
IP address blocks:        2804:488c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5e:5a:72:01:b3:e7:be:35:1e:b0:8a:9f:3d:cb:f9:aa:6a:20:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F53D745990071B2CCEF5F48CBFA053605498A66A
        Validity
            Not Before: Dec  5 13:55:00 2023 GMT
            Not After : Dec  3 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9d:5f:e2:c5:8c:f5:fb:4d:50:dd:ea:fb:df:
                    45:0f:a1:d8:ba:87:07:92:9c:37:22:c0:32:69:64:
                    a1:22:15:9b:b2:68:65:97:8a:62:cc:1d:57:af:39:
                    75:02:c1:59:21:4a:e6:df:0f:d1:28:a9:51:b6:7e:
                    99:f3:31:c1:c8:1c:e4:eb:1e:5b:f1:17:7e:87:7a:
                    1d:6d:76:0b:34:27:fa:72:13:65:c6:31:0c:8d:41:
                    db:d7:5b:20:e4:ee:1d:f7:30:bc:e4:1d:de:20:44:
                    7c:b4:8c:33:47:a1:83:94:e9:a9:e6:3c:0a:13:16:
                    6d:e5:88:35:f9:15:d2:98:96:b2:c9:73:2d:24:7a:
                    d7:70:19:93:e1:46:a0:70:c7:b4:32:a2:15:eb:46:
                    0d:07:86:e6:c2:d7:ec:75:87:43:c8:2a:a1:f1:94:
                    80:8c:23:e2:55:55:68:4f:ef:ac:09:14:3a:f7:dd:
                    b6:9e:c0:98:57:b3:88:68:25:ae:b8:1c:f1:c2:d8:
                    a5:3c:d1:1c:41:61:da:99:96:b2:f6:05:85:58:d1:
                    f7:f8:dc:c7:87:0b:74:c6:6c:d7:b2:58:10:bb:99:
                    8b:a1:ea:7c:d7:e2:dd:71:b6:6e:3e:80:5a:b7:fb:
                    2f:ea:d0:25:57:b2:d8:39:45:97:46:f2:cf:1a:40:
                    6f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:91:4D:79:60:EF:A5:66:76:8A:E5:76:7D:A9:41:A9:4B:D9:AB:2F
            X509v3 Authority Key Identifier:
                keyid:F5:3D:74:59:90:07:1B:2C:CE:F5:F4:8C:BF:A0:53:60:54:98:A6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/F53D745990071B2CCEF5F48CBFA053605498A66A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F53D745990071B2CCEF5F48CBFA053605498A66A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a383030303a3a2f33342d3334203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:488c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:2a:00:62:6d:de:08:26:9b:d7:e2:cd:b2:5a:05:0f:9a:15:
         36:3c:ea:0d:6d:cd:14:8b:ec:24:bd:ff:59:9e:ae:97:12:cc:
         c4:b4:cd:f8:ec:3c:a1:88:4a:85:e1:6c:ab:06:63:74:4a:ee:
         34:3f:26:28:f2:9a:22:6e:a0:4e:33:7c:a8:c4:bb:d1:08:8c:
         58:23:e5:f8:6b:8f:c4:4c:22:c9:5e:f6:bc:b7:8e:e3:db:06:
         f1:c6:8a:54:7c:12:88:f1:ff:1e:b5:7a:fc:fa:b5:6a:9b:a2:
         99:e6:8e:b1:0b:28:eb:87:dc:23:e3:67:66:1d:b2:d3:21:c8:
         13:48:b3:5f:1c:b7:2b:51:eb:4c:6d:2d:17:21:82:30:b8:d8:
         12:a3:42:94:40:2a:38:a0:02:e1:2c:18:84:14:82:60:40:fa:
         5d:64:97:54:93:38:ec:f7:c3:15:4a:a8:d5:97:bb:28:5f:74:
         48:54:ed:92:62:03:98:fa:20:e5:83:e2:aa:92:e3:81:69:b8:
         fa:d3:ee:53:49:d2:13:14:6c:af:ee:0f:8f:e3:fb:ee:96:e1:
         c4:70:02:c3:19:ea:26:b6:04:b4:99:31:bc:97:8c:63:c0:96:
         1b:ad:c4:79:2d:4f:4c:56:51:f3:59:b7:c0:c3:94:dc:f3:88:
         48:97:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org