Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a3a2f33332d3333203d3e20323634313337.roa
File:                     323830343a323330343a3a2f33332d3333203d3e20323634313337.roa (raw, json)
Hash identifier:          IhzRrid2weI0jwoeIZNhrQx9v4/awlIrUHNOfVVsFxk=
Subject key identifier:   87:F3:24:A3:0A:EC:A7:35:44:CA:3F:A7:4B:57:85:52:96:25:AE:DF
Certificate issuer:       /CN=2EC69813A49E7B20507CB65A508F14FFB1282200
Certificate serial:       41399B54D0E7E07124A20873EB1FEA4C1D406C22
Authority key identifier: 2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a3a2f33332d3333203d3e20323634313337.roa
Signing time:             Mon 11 Dec 2023 14:05:01 +0000
ROA not before:           Mon 11 Dec 2023 14:00:01 +0000
ROA not after:            Mon 09 Dec 2024 14:05:01 +0000
asID:                     264137
IP address blocks:        2804:2304::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:39:9b:54:d0:e7:e0:71:24:a2:08:73:eb:1f:ea:4c:1d:40:6c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC69813A49E7B20507CB65A508F14FFB1282200
        Validity
            Not Before: Dec 11 14:00:01 2023 GMT
            Not After : Dec  9 14:05:01 2024 GMT
        Subject: CN=87F324A30AECA73544CA3FA74B5785529625AEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:6b:37:29:17:d5:84:eb:21:75:aa:c6:5d:
                    60:78:55:ee:fe:15:3c:16:22:e6:b4:d8:06:c9:fe:
                    3e:09:56:86:02:e6:91:3c:14:26:b0:6a:0f:6d:05:
                    91:23:1d:3a:4c:3e:5c:bd:46:ad:4d:18:1e:30:5a:
                    40:11:80:87:15:f7:36:e0:41:68:b6:42:2c:53:8c:
                    c8:a7:e4:1d:cf:dd:fa:5b:74:48:e6:3f:a9:eb:d3:
                    8f:45:6b:aa:7f:d8:f9:41:12:b2:3b:7e:2a:ed:04:
                    9a:60:6b:32:43:9c:8c:38:3f:d9:4c:e1:d2:81:35:
                    53:0e:66:80:17:5d:0c:5e:c5:b6:a6:ae:cb:d0:79:
                    77:cb:42:00:df:15:7c:1c:8e:3c:7c:61:12:16:6a:
                    c4:9c:15:ab:93:3a:71:18:b9:59:de:63:0f:30:07:
                    29:56:f2:89:bd:dc:b9:06:d6:90:ef:bc:51:e4:20:
                    a8:4a:10:a7:69:62:55:f0:4e:b3:13:dd:11:69:e2:
                    42:46:69:22:45:ef:d8:62:9e:9b:85:2f:b4:5a:6d:
                    8d:d9:a7:b9:8d:0d:b7:b3:5d:e8:11:ce:5d:af:61:
                    be:a1:95:72:62:42:f3:d9:21:32:78:c6:f1:a3:b7:
                    5a:da:e6:75:85:80:84:41:61:49:0c:33:5e:3a:cd:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F3:24:A3:0A:EC:A7:35:44:CA:3F:A7:4B:57:85:52:96:25:AE:DF
            X509v3 Authority Key Identifier:
                keyid:2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a3a2f33332d3333203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304::/33

    Signature Algorithm: sha256WithRSAEncryption
         1e:11:63:95:89:5a:6e:ef:4a:1b:46:21:bd:7b:76:c9:af:e3:
         47:b9:dc:e8:50:1a:e2:e3:26:bc:7e:89:43:ac:c8:1c:47:c2:
         30:2c:80:cc:b7:1c:9d:b2:dc:b3:ff:75:14:12:91:92:f1:c3:
         67:42:f4:d8:98:23:38:55:2f:bb:f3:33:c5:ad:7a:66:ca:3a:
         35:db:a4:5d:da:88:9f:e6:4d:0a:6e:64:5c:6c:32:21:7f:5c:
         43:db:1a:aa:cd:16:5b:8b:6b:47:5a:5c:7f:db:e9:65:c4:8e:
         a7:f3:01:3e:e6:75:01:3e:ce:2a:cc:8b:0e:d4:b0:1d:d4:5e:
         34:55:bf:8b:92:7e:0e:62:7d:e4:4d:08:e1:c2:88:30:e8:1b:
         51:1d:88:65:10:58:de:ee:da:8b:53:17:97:4a:d2:1f:79:28:
         86:85:91:87:69:95:af:49:a3:9e:06:0d:52:5a:28:cb:14:d6:
         bd:14:eb:b8:70:cf:5d:62:a8:e9:f4:1e:51:fc:7d:c8:c0:86:
         b0:36:7a:c4:b7:57:94:5c:0a:56:bd:29:ed:75:72:e1:47:54:
         6d:90:13:8a:c9:4b:f1:e2:75:08:31:2f:ac:c1:29:e6:6c:6b:
         d3:38:2c:f9:e3:36:e9:36:28:c8:a0:e3:35:bb:d5:4a:7f:eb:
         78:11:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org