Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a383030303a3a2f33332d3333203d3e20323634313337.roa
File:                     323830343a323330343a383030303a3a2f33332d3333203d3e20323634313337.roa (raw, json)
Hash identifier:          pe+3y4bwnzYXlVPIkF5frSClcracwF56sAESNJY+hek=
Subject key identifier:   DF:B6:1A:C2:33:15:5C:AE:C2:C6:BD:B8:0D:9C:32:7D:C4:AD:6C:15
Certificate issuer:       /CN=2EC69813A49E7B20507CB65A508F14FFB1282200
Certificate serial:       3FA8EA739DDE4A4F75B60307710AEDC20644E46D
Authority key identifier: 2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a383030303a3a2f33332d3333203d3e20323634313337.roa
Signing time:             Mon 11 Dec 2023 14:05:08 +0000
ROA not before:           Mon 11 Dec 2023 14:00:08 +0000
ROA not after:            Mon 09 Dec 2024 14:05:08 +0000
asID:                     264137
IP address blocks:        2804:2304:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a8:ea:73:9d:de:4a:4f:75:b6:03:07:71:0a:ed:c2:06:44:e4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC69813A49E7B20507CB65A508F14FFB1282200
        Validity
            Not Before: Dec 11 14:00:08 2023 GMT
            Not After : Dec  9 14:05:08 2024 GMT
        Subject: CN=DFB61AC233155CAEC2C6BDB80D9C327DC4AD6C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:59:a2:26:8f:ea:0e:1a:ed:7e:43:e8:a4:
                    0a:a7:2f:29:56:8f:af:af:e8:21:6f:d1:01:ac:11:
                    d9:d4:fa:aa:d9:28:8d:cb:b7:b0:a9:bc:c7:7c:13:
                    73:a8:ce:55:11:71:77:e5:5c:52:49:d2:8b:e4:91:
                    bb:74:23:85:e3:3e:0e:46:6e:ae:ab:11:c1:7a:42:
                    12:7b:69:7d:1c:29:41:b0:5b:7c:57:6d:9d:da:9b:
                    f8:07:72:e1:72:b0:ff:5f:bc:ab:b6:4a:cc:57:e0:
                    d4:bb:57:ac:8e:6f:98:9e:da:d9:66:40:dd:61:8f:
                    ec:9e:1f:a4:31:95:69:82:9f:29:b0:0d:0e:d1:40:
                    81:23:d8:d0:8e:8d:53:73:9f:ca:e5:1c:ac:45:51:
                    4e:85:42:aa:b7:5d:7c:d1:af:c6:81:ea:e9:ea:4a:
                    58:52:3c:16:c0:02:ed:c4:4d:b5:08:31:c2:1d:0a:
                    66:5b:ec:df:04:22:5a:9e:3b:a5:7c:dd:b6:90:19:
                    62:e1:1e:4f:74:4d:f6:c0:fa:26:ce:fb:8d:58:7d:
                    0e:6b:db:f4:ce:90:6f:f7:d1:da:a4:db:c0:7c:a9:
                    f5:28:2a:4c:10:fb:30:9b:c5:24:b9:f7:51:d5:35:
                    94:5b:a5:35:97:9f:5d:93:2c:60:14:29:96:1c:db:
                    dd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B6:1A:C2:33:15:5C:AE:C2:C6:BD:B8:0D:9C:32:7D:C4:AD:6C:15
            X509v3 Authority Key Identifier:
                keyid:2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a383030303a3a2f33332d3333203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         59:51:bd:fb:84:8f:a6:5b:93:eb:fe:c4:ed:76:12:eb:fb:ae:
         22:2e:e5:76:f6:bb:2f:4d:95:68:60:bf:d1:45:3d:0c:46:74:
         03:57:ec:0c:72:7f:19:d4:6c:0c:22:7a:ce:95:8d:34:38:66:
         4e:a4:56:ba:d0:ab:1d:ab:e1:e3:19:0c:39:66:81:e8:92:b3:
         96:08:ce:a4:74:97:9d:d9:cf:eb:59:75:41:98:bf:33:17:a1:
         9e:43:cd:52:c7:9a:bc:17:73:13:84:3c:a8:f8:02:fb:8c:d6:
         e4:4d:4d:a3:ba:79:81:72:d1:ca:b0:68:88:43:59:17:21:f5:
         fe:5d:a4:e6:bd:8e:8d:dc:84:07:0a:c6:d8:ea:a8:4b:83:55:
         94:4e:fc:6d:28:a7:0c:03:71:79:a0:bb:0c:9b:78:e5:87:df:
         1b:47:b6:e9:5b:28:5c:e8:67:b9:e2:d9:37:5a:a0:d4:20:6f:
         c4:ab:48:af:c3:26:91:a7:f1:e1:c0:c6:b5:06:2a:a5:df:c7:
         e1:24:77:f1:7a:75:8e:ed:08:f4:28:7e:62:d6:33:4c:cb:f5:
         27:b6:51:1a:ff:45:91:3d:d6:53:18:0a:25:d7:ee:eb:65:e7:
         84:f0:b9:4b:4f:88:d4:eb:d4:1d:46:1c:c4:b3:8a:dc:86:ea:
         b0:e5:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org