Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/323830343a346336383a3a2f33332d3333203d3e20323637333639.roa
File:                     323830343a346336383a3a2f33332d3333203d3e20323637333639.roa (raw, json)
Hash identifier:          mpXb0jRzOIOzU5p6c6o0jABZWHd/Pn+9hb7ChEeZdIs=
Subject key identifier:   86:BE:00:AF:CC:82:D8:76:E8:FB:55:CC:19:79:EA:83:7B:3C:43:4A
Certificate issuer:       /CN=DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90
Certificate serial:       3C6FE24BB1EBAFF1FC97D9509CB7AD0F04726BF1
Authority key identifier: DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/323830343a346336383a3a2f33332d3333203d3e20323637333639.roa
Signing time:             Thu 21 Sep 2023 11:26:45 +0000
ROA not before:           Thu 21 Sep 2023 11:21:45 +0000
ROA not after:            Thu 19 Sep 2024 11:26:45 +0000
asID:                     267369
IP address blocks:        2804:4c68::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6f:e2:4b:b1:eb:af:f1:fc:97:d9:50:9c:b7:ad:0f:04:72:6b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90
        Validity
            Not Before: Sep 21 11:21:45 2023 GMT
            Not After : Sep 19 11:26:45 2024 GMT
        Subject: CN=86BE00AFCC82D876E8FB55CC1979EA837B3C434A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:14:99:19:d5:6e:83:e7:e2:ae:25:3d:ce:8d:
                    58:79:fa:da:e4:92:68:45:e6:fd:13:b3:8a:8d:c4:
                    ae:49:63:fe:23:40:9c:0b:84:5e:f6:7d:7d:f3:54:
                    ea:bd:8a:f6:1e:1c:3e:50:81:b4:cd:3f:d1:83:e7:
                    4f:fc:e0:05:97:fa:30:32:7f:e5:dc:c5:70:fd:e2:
                    7c:56:6f:dd:4e:c2:ae:ae:bd:1b:6d:d8:4b:61:be:
                    d2:9b:db:b8:fa:59:3a:5a:75:0f:5b:10:8c:49:d3:
                    4a:d0:81:26:64:23:c3:b3:14:b3:b5:a3:a3:89:f5:
                    61:4e:a0:b9:a8:6b:f9:0d:66:24:7d:0a:8b:0d:a1:
                    cd:e1:8e:16:20:d6:22:eb:79:81:36:8a:13:4f:f0:
                    55:a3:d7:4d:76:64:ba:03:6e:34:2e:a8:bf:cc:a7:
                    cd:c1:b1:92:98:64:bc:37:36:39:f7:98:38:26:a9:
                    93:5d:39:a7:cf:76:a2:20:8e:58:05:66:5b:09:56:
                    a8:53:08:5c:af:b0:4c:c8:04:eb:f1:fa:45:b0:cf:
                    d1:3e:e4:12:6c:fb:8c:29:73:00:0a:21:17:3b:23:
                    24:67:8d:8c:2d:3e:df:1a:a8:51:c3:0e:f5:bc:81:
                    27:df:70:f1:4e:32:6c:28:cd:cb:91:cf:da:8c:4a:
                    fb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BE:00:AF:CC:82:D8:76:E8:FB:55:CC:19:79:EA:83:7B:3C:43:4A
            X509v3 Authority Key Identifier:
                keyid:DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/323830343a346336383a3a2f33332d3333203d3e20323637333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c68::/33

    Signature Algorithm: sha256WithRSAEncryption
         7f:20:72:fa:c0:69:b4:7d:f0:8b:fe:70:04:ab:e7:42:41:3f:
         48:b4:76:71:08:e3:bc:69:22:f0:09:03:69:59:c2:6e:99:86:
         af:70:a7:6c:c8:33:58:7b:71:52:09:ad:e4:59:35:b1:a1:a0:
         91:c8:c4:ce:7a:71:94:b4:82:13:fb:4b:81:20:82:77:eb:bc:
         ca:ca:62:32:cc:c5:fb:81:22:4f:94:e4:0b:bb:af:0e:0b:01:
         65:56:b4:71:c3:d5:cd:a7:91:42:43:b1:36:63:41:2b:45:e6:
         7b:79:60:f7:23:4d:c6:7f:f8:e1:c2:3b:33:78:2f:60:f2:a3:
         20:06:49:20:12:c1:29:02:a5:d4:a3:4f:f8:04:c3:19:57:85:
         5e:f0:6f:f7:f4:c8:88:80:3e:4f:4e:86:d2:25:ec:53:51:0e:
         07:98:6d:b3:3e:2a:61:d6:d4:c6:69:e3:74:00:41:40:19:50:
         33:6f:1d:69:07:57:03:c0:db:bf:7c:d1:88:63:ec:7c:03:5a:
         6c:fb:09:71:9d:d8:4c:00:b6:27:b3:d0:bb:23:ff:e3:70:24:
         d0:61:26:d9:23:ad:1e:6b:d4:03:16:65:29:fc:a9:c5:0b:2b:
         d7:12:c6:8f:d3:ad:03:22:b5:83:02:38:98:d0:de:43:04:b8:
         87:3c:c4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org