Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/0/323830343a323838633a3a2f33322d3438203d3e20323633393638.roa
File:                     323830343a323838633a3a2f33322d3438203d3e20323633393638.roa (raw, json)
Hash identifier:          qZT+Abin+ix3qzdFq6JtNuUX3pC3UXHpPwH271YGacQ=
Subject key identifier:   9C:74:0A:27:D9:3A:BF:64:F0:29:CD:0E:A8:87:FC:A9:50:B6:0B:67
Certificate issuer:       /CN=677D21939268558A590BDAF3CCF9128F3678673B
Certificate serial:       3DB88EE786D896041EC0F7BD928D656D28D251C4
Authority key identifier: 67:7D:21:93:92:68:55:8A:59:0B:DA:F3:CC:F9:12:8F:36:78:67:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/677D21939268558A590BDAF3CCF9128F3678673B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/0/323830343a323838633a3a2f33322d3438203d3e20323633393638.roa
Signing time:             Fri 15 Sep 2023 17:36:28 +0000
ROA not before:           Fri 15 Sep 2023 17:31:28 +0000
ROA not after:            Fri 13 Sep 2024 17:36:28 +0000
asID:                     263968
IP address blocks:        2804:288c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b8:8e:e7:86:d8:96:04:1e:c0:f7:bd:92:8d:65:6d:28:d2:51:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677D21939268558A590BDAF3CCF9128F3678673B
        Validity
            Not Before: Sep 15 17:31:28 2023 GMT
            Not After : Sep 13 17:36:28 2024 GMT
        Subject: CN=9C740A27D93ABF64F029CD0EA887FCA950B60B67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:9f:1e:5c:7e:79:24:ed:ee:78:ec:93:f8:
                    b4:b5:40:1d:f3:f9:9d:fe:12:bd:00:c1:d9:e7:76:
                    f4:1b:36:3f:fd:44:1e:0d:6f:2c:6f:f8:c2:8c:9b:
                    c4:99:41:3c:d4:80:20:67:17:df:90:fc:35:33:d6:
                    78:14:03:03:d5:c0:73:a0:72:54:89:6c:6c:38:b4:
                    aa:e6:04:09:5f:02:a5:1f:ee:68:11:07:e9:07:fd:
                    1d:f3:e1:33:3b:d3:9d:77:fd:0c:f4:70:08:f4:bf:
                    30:0b:91:30:4f:5f:ef:7c:c9:54:2a:39:27:51:4d:
                    ec:17:d5:30:5a:68:d8:4b:47:4c:c7:a0:02:5c:c7:
                    89:22:23:51:68:3c:1e:4b:5d:76:ad:56:35:61:fe:
                    31:a3:0e:4e:26:c8:3f:74:2c:6d:14:4b:2c:d3:f5:
                    45:f6:2f:83:80:d9:cc:7f:f9:76:d1:55:58:70:12:
                    10:03:d3:64:3b:e6:96:42:56:45:f4:6e:b1:a8:eb:
                    2f:09:47:df:3c:e1:6e:0e:87:13:24:14:ab:14:ea:
                    c8:27:29:fd:02:cc:5c:14:d6:09:8b:8a:74:c3:32:
                    be:89:81:d2:44:10:e2:f3:06:60:98:a7:b2:8f:c5:
                    88:7a:8e:52:3a:22:30:d3:d4:f7:4a:69:1f:76:57:
                    86:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:74:0A:27:D9:3A:BF:64:F0:29:CD:0E:A8:87:FC:A9:50:B6:0B:67
            X509v3 Authority Key Identifier:
                keyid:67:7D:21:93:92:68:55:8A:59:0B:DA:F3:CC:F9:12:8F:36:78:67:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/0/677D21939268558A590BDAF3CCF9128F3678673B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/677D21939268558A590BDAF3CCF9128F3678673B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/0/323830343a323838633a3a2f33322d3438203d3e20323633393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:288c::/32

    Signature Algorithm: sha256WithRSAEncryption
         d4:f1:3b:9e:7b:51:c1:aa:be:b9:9e:a2:10:03:ca:19:a7:06:
         c3:b8:41:bf:a3:29:e6:59:9b:b0:d1:4a:65:d3:57:06:32:96:
         08:04:4c:1d:da:64:ca:4c:cf:b5:a0:9d:cc:f0:21:22:cc:85:
         c7:8a:34:d5:48:fd:e7:e5:48:c8:21:d7:02:e0:3a:1a:dc:a1:
         32:4a:b0:c5:cf:7f:ee:1b:d3:73:be:0b:25:aa:05:df:07:52:
         f8:07:11:08:2f:96:d3:54:dc:00:df:9a:1b:86:13:e5:5c:f3:
         4d:9f:6b:af:21:15:1a:b9:bd:96:e2:e4:87:62:a8:73:8c:57:
         aa:d0:ae:6d:0a:5b:51:01:91:ed:ea:11:53:29:43:55:9c:4e:
         f7:70:5d:e7:7b:a2:98:0c:4e:ad:53:fc:14:1b:b7:62:1c:e2:
         7d:1a:26:9a:16:78:ac:dd:c2:23:e6:a2:96:ef:6a:39:3d:38:
         0e:9a:0a:43:cf:c0:04:46:b4:db:71:d9:31:e4:7a:5d:2b:55:
         33:50:76:db:97:b9:49:44:7d:0c:87:e0:68:2b:a7:9e:05:ee:
         02:3d:cf:21:64:e7:8f:25:54:cf:2f:d2:52:cf:9c:ef:47:7a:
         98:1c:7c:9b:39:70:9b:4f:fb:56:7a:98:09:5c:9a:6c:7f:2b:
         86:21:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org