Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/323830343a353464343a3530303a3a2f34302d3430203d3e20323638363732.roa
File:                     323830343a353464343a3530303a3a2f34302d3430203d3e20323638363732.roa (raw, json)
Hash identifier:          LPZSQykSqu3YBIAb6IIzJ+73oJME4B7AJgmOyudgQr0=
Subject key identifier:   D8:23:45:C2:97:44:DA:FD:83:D3:25:0A:8D:88:51:70:38:95:3D:CF
Certificate issuer:       /CN=7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8
Certificate serial:       4D4107F43E9CB2AB06E3273503C5805ACBF8AD63
Authority key identifier: 75:68:E6:A2:7B:4C:E8:B4:EB:D5:A3:30:59:2B:70:A2:0F:BF:6B:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/323830343a353464343a3530303a3a2f34302d3430203d3e20323638363732.roa
Signing time:             Tue 26 Mar 2024 13:00:00 +0000
ROA not before:           Tue 26 Mar 2024 12:55:00 +0000
ROA not after:            Tue 25 Mar 2025 13:00:00 +0000
asID:                     268672
IP address blocks:        2804:54d4:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:41:07:f4:3e:9c:b2:ab:06:e3:27:35:03:c5:80:5a:cb:f8:ad:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8
        Validity
            Not Before: Mar 26 12:55:00 2024 GMT
            Not After : Mar 25 13:00:00 2025 GMT
        Subject: CN=3082010A0282010100AC9757FADF2A0724FFDF2DC92E3C8DADE8EBDF15D37F317F25C58C589FBC0347283F7DEA69CE7C6BDB70C470EE4C6A3D0031228267D23B2B12A0E21F5EE1CC34B98AD2E375AA247F5338085B066DD9CAF5FF78EEC0CA9CF05C35BFA250C046148F5770F8B30053504D5656C3A8F379893F4E345154F76A570FFFD42B6531ABFFC8684563BFD1740F946C90C8F616A832AD6F7DF36D8CA0C2402D1856F102B184F523B6CEAAB0FADD61AD211827FBCC4913F8681F451CC4ADCD1B1E44D3D4B3A3CF736FEA6F1FEF6DC28D4C56B62776B9AE9DC5BE63A56EE4900B927B4285024F915F2EE5AFFDEB1F309A3DD24E8E0DF6EFE5ABDF20B02AE29D9027EAEE7752B90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:57:fa:df:2a:07:24:ff:df:2d:c9:2e:3c:
                    8d:ad:e8:eb:df:15:d3:7f:31:7f:25:c5:8c:58:9f:
                    bc:03:47:28:3f:7d:ea:69:ce:7c:6b:db:70:c4:70:
                    ee:4c:6a:3d:00:31:22:82:67:d2:3b:2b:12:a0:e2:
                    1f:5e:e1:cc:34:b9:8a:d2:e3:75:aa:24:7f:53:38:
                    08:5b:06:6d:d9:ca:f5:ff:78:ee:c0:ca:9c:f0:5c:
                    35:bf:a2:50:c0:46:14:8f:57:70:f8:b3:00:53:50:
                    4d:56:56:c3:a8:f3:79:89:3f:4e:34:51:54:f7:6a:
                    57:0f:ff:d4:2b:65:31:ab:ff:c8:68:45:63:bf:d1:
                    74:0f:94:6c:90:c8:f6:16:a8:32:ad:6f:7d:f3:6d:
                    8c:a0:c2:40:2d:18:56:f1:02:b1:84:f5:23:b6:ce:
                    aa:b0:fa:dd:61:ad:21:18:27:fb:cc:49:13:f8:68:
                    1f:45:1c:c4:ad:cd:1b:1e:44:d3:d4:b3:a3:cf:73:
                    6f:ea:6f:1f:ef:6d:c2:8d:4c:56:b6:27:76:b9:ae:
                    9d:c5:be:63:a5:6e:e4:90:0b:92:7b:42:85:02:4f:
                    91:5f:2e:e5:af:fd:eb:1f:30:9a:3d:d2:4e:8e:0d:
                    f6:ef:e5:ab:df:20:b0:2a:e2:9d:90:27:ea:ee:77:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:23:45:C2:97:44:DA:FD:83:D3:25:0A:8D:88:51:70:38:95:3D:CF
            X509v3 Authority Key Identifier:
                keyid:75:68:E6:A2:7B:4C:E8:B4:EB:D5:A3:30:59:2B:70:A2:0F:BF:6B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/323830343a353464343a3530303a3a2f34302d3430203d3e20323638363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54d4:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:a8:9b:0d:d3:c4:49:6f:bd:1f:16:fe:10:83:d6:ad:da:b7:
         64:48:d7:29:d3:ae:f9:c3:eb:56:6e:a3:bb:05:47:aa:1c:50:
         1c:17:2a:d7:8a:38:6e:9f:4a:89:37:65:12:51:24:26:e6:52:
         2f:3a:ab:f8:bd:8e:01:14:49:3c:77:95:5e:06:18:1f:98:1e:
         07:09:56:fa:b9:84:ef:71:45:22:42:7f:93:82:b5:31:b9:17:
         ec:e3:e0:9c:dd:b5:ff:cc:41:24:2e:b4:14:25:57:ac:23:02:
         95:c5:2f:df:b6:65:75:ce:00:19:55:20:31:5b:11:c1:39:da:
         ba:4f:f2:ea:0a:12:f6:8c:f9:e2:58:b3:da:99:71:6c:cc:44:
         90:26:f7:f8:45:78:8b:92:66:65:a7:f7:2e:bf:32:31:f9:69:
         28:de:7b:21:96:e7:3b:a1:67:28:95:7e:a2:af:a2:3c:43:e1:
         b1:c9:1b:05:b7:10:ec:6c:d8:23:fd:89:a4:cf:af:93:0a:1b:
         e0:5b:3a:66:29:92:49:8d:fc:09:7a:0c:e6:00:5f:e9:8f:96:
         3b:69:5f:54:d1:05:ba:c8:23:eb:ee:1e:41:f6:3c:74:6b:c7:
         a5:06:fa:60:a0:dd:24:32:9f:cf:7e:74:13:8d:e3:35:de:db:
         eb:28:23:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org