Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a633030303a3a2f33342d3334203d3e20323637313238.roa
File:                     323830343a343838633a633030303a3a2f33342d3334203d3e20323637313238.roa (raw, json)
Hash identifier:          rR2Ey8GPZqT0M8ropmCqufHpFalseT4Nc6lxOUKIydY=
Subject key identifier:   D0:9C:AA:E9:54:74:C8:91:FD:38:BB:7A:57:10:89:36:86:51:1A:61
Certificate issuer:       /CN=F53D745990071B2CCEF5F48CBFA053605498A66A
Certificate serial:       16AD58F6F7584F9AFD4092CCC57427CFDC3ABD8D
Authority key identifier: F5:3D:74:59:90:07:1B:2C:CE:F5:F4:8C:BF:A0:53:60:54:98:A6:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F53D745990071B2CCEF5F48CBFA053605498A66A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a633030303a3a2f33342d3334203d3e20323637313238.roa
Signing time:             Tue 05 Dec 2023 14:00:00 +0000
ROA not before:           Tue 05 Dec 2023 13:55:00 +0000
ROA not after:            Tue 03 Dec 2024 14:00:00 +0000
asID:                     267128
IP address blocks:        2804:488c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ad:58:f6:f7:58:4f:9a:fd:40:92:cc:c5:74:27:cf:dc:3a:bd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F53D745990071B2CCEF5F48CBFA053605498A66A
        Validity
            Not Before: Dec  5 13:55:00 2023 GMT
            Not After : Dec  3 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:87:26:44:52:fd:b0:f6:3c:a8:59:b2:76:
                    bb:e3:06:e8:fd:e1:e2:a4:f5:85:b3:f3:f4:4f:c1:
                    61:cd:23:f1:be:a7:85:c6:09:f1:e9:90:96:ad:44:
                    dd:e4:ab:74:e5:23:b7:17:9a:84:1d:1b:34:50:81:
                    b8:c6:e7:d1:cd:eb:81:4f:36:aa:c7:81:5b:c1:96:
                    93:37:54:42:52:69:44:14:8f:b9:03:48:fd:a7:6b:
                    c9:bb:9d:b1:68:f8:a4:7c:c7:b1:ce:c1:2d:c9:04:
                    b3:06:1f:66:6b:50:e8:ed:0f:7e:61:6f:cd:5f:8c:
                    f4:35:f6:3f:72:55:6e:8c:5a:e5:18:24:1d:60:54:
                    0a:a7:bc:0b:27:0e:b7:8e:fe:62:a1:88:69:cb:4e:
                    4c:e7:85:f5:b8:b1:99:91:8d:8e:c7:1f:fa:4b:bf:
                    71:1a:3e:c5:06:5f:59:24:b8:9b:f2:99:25:ec:9f:
                    d1:a4:ee:2e:a0:98:63:2e:da:a2:71:e7:4f:41:bc:
                    74:f0:63:f8:53:ff:4e:a3:28:b5:4a:03:f5:fe:7c:
                    be:63:07:91:aa:6c:26:b5:4b:91:35:01:0c:37:6c:
                    8a:94:6e:81:50:aa:30:0b:50:74:d0:6f:4c:f1:dc:
                    79:8e:4e:d7:6f:2b:f0:4b:cc:d3:34:84:15:9a:b5:
                    a5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9C:AA:E9:54:74:C8:91:FD:38:BB:7A:57:10:89:36:86:51:1A:61
            X509v3 Authority Key Identifier:
                keyid:F5:3D:74:59:90:07:1B:2C:CE:F5:F4:8C:BF:A0:53:60:54:98:A6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/F53D745990071B2CCEF5F48CBFA053605498A66A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F53D745990071B2CCEF5F48CBFA053605498A66A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a633030303a3a2f33342d3334203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:488c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         18:1c:72:8c:58:8d:73:7d:11:23:f3:0a:69:1e:62:36:26:90:
         c5:64:08:bb:e5:98:1d:7a:d0:78:b4:b8:3d:24:9b:06:d9:b9:
         3d:d9:70:28:8e:6e:30:af:54:29:3a:b7:1b:b5:4e:da:81:67:
         c9:11:27:8b:b0:18:39:27:85:78:40:7d:b5:cd:75:12:82:ae:
         9a:af:0c:b5:d6:7d:75:a4:0f:58:30:ad:e0:ed:68:dc:dd:8c:
         90:35:23:03:28:5d:6b:8a:f0:d0:55:52:49:03:55:6d:8b:89:
         fd:81:e5:96:11:e7:11:73:f0:80:f2:38:71:6c:ca:20:66:44:
         f5:76:6e:c1:9d:cb:66:c2:1a:c5:c6:9f:f4:94:f9:ca:0d:9f:
         93:63:0c:94:b1:0b:f7:58:5f:15:14:16:d3:ea:ab:b5:f7:a5:
         38:6e:44:a0:27:06:b3:cd:72:94:12:14:aa:c0:7d:31:ca:1b:
         05:b9:b5:24:02:2d:5d:74:5e:cc:b0:91:dd:48:34:35:cd:9e:
         81:05:89:73:e7:19:37:b7:dc:44:c0:dd:c3:be:dc:58:e2:17:
         d3:ac:4c:cd:78:0d:57:1a:a5:ce:bb:2b:4c:90:8e:f0:50:f5:
         9e:83:22:68:84:23:48:7e:c8:87:58:c8:03:d5:99:f0:28:15:
         e9:a5:b7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org