Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a383030303a3a2f33332d3333203d3e20323638323438.roa
File:                     323830343a346533633a383030303a3a2f33332d3333203d3e20323638323438.roa (raw, json)
Hash identifier:          CHDHQVoQ1z4JQbvqLVs8sPQ1+zuRMNIkwGfQNvvO2Zo=
Subject key identifier:   7A:9F:1E:5E:10:6B:90:1A:17:07:00:CB:99:50:BE:E8:35:ED:76:30
Certificate issuer:       /CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
Certificate serial:       3DE365E7C555E1C8ED942047DE57388FB250524B
Authority key identifier: E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a383030303a3a2f33332d3333203d3e20323638323438.roa
Signing time:             Thu 04 Apr 2024 07:14:13 +0000
ROA not before:           Thu 04 Apr 2024 07:09:13 +0000
ROA not after:            Thu 03 Apr 2025 07:14:13 +0000
asID:                     268248
IP address blocks:        2804:4e3c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e3:65:e7:c5:55:e1:c8:ed:94:20:47:de:57:38:8f:b2:50:52:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
        Validity
            Not Before: Apr  4 07:09:13 2024 GMT
            Not After : Apr  3 07:14:13 2025 GMT
        Subject: CN=7A9F1E5E106B901A170700CB9950BEE835ED7630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:ab:fd:3f:6c:d1:2e:b1:f3:ca:45:c5:45:
                    70:d9:6b:09:1e:9d:d0:b8:11:9c:f4:63:e4:85:f9:
                    e1:71:fb:c0:22:f0:6a:1d:1d:2c:07:8c:b4:8a:f5:
                    4a:c2:a1:6e:45:7f:fc:8e:a4:a4:a7:eb:2e:1d:bf:
                    4e:e3:68:ab:ad:4a:f8:84:c7:d9:ab:36:99:7d:b3:
                    a3:b2:a5:a1:c6:fb:d0:bf:eb:64:7c:af:d0:c9:cf:
                    f0:16:e2:77:77:d2:f8:06:cc:6a:30:9c:ee:40:08:
                    f1:6e:cc:5d:d2:5b:46:f4:ea:f0:f4:7a:9f:fc:ec:
                    f9:fd:22:aa:3c:ed:61:c1:af:ab:7f:b6:67:42:68:
                    1e:69:e1:52:ff:78:44:fc:c4:3e:89:d4:14:58:85:
                    92:79:08:9d:63:bd:1b:c8:69:5a:48:e2:8e:6d:8a:
                    5a:cd:5e:da:ad:d0:6e:b7:b0:d3:73:a4:e7:81:39:
                    2e:82:7e:7c:ec:6e:09:c3:1d:64:0e:ce:6e:37:85:
                    28:35:02:ee:f4:de:79:52:91:b8:e7:57:5a:b7:8f:
                    95:b9:e9:ce:bd:e8:e3:71:54:0a:61:9d:ff:a4:3b:
                    26:1e:05:18:df:52:00:5e:68:b0:b1:89:bd:03:b3:
                    24:1a:0f:20:35:20:5c:6c:15:d0:39:f3:13:96:46:
                    1e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9F:1E:5E:10:6B:90:1A:17:07:00:CB:99:50:BE:E8:35:ED:76:30
            X509v3 Authority Key Identifier:
                keyid:E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a383030303a3a2f33332d3333203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e3c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         73:27:d6:15:3b:14:81:1c:15:31:be:9c:ac:e6:0f:b4:6d:3f:
         0d:53:5f:7e:37:b4:18:cc:91:71:02:bc:4a:f5:9b:10:79:89:
         ee:c4:a1:d1:ca:2e:bf:db:1b:38:ff:1f:ba:84:0f:74:89:fb:
         4d:a7:ab:85:f9:be:db:58:17:78:6b:e7:f5:62:f7:7d:ac:f5:
         c8:50:5b:4f:ee:2c:6e:46:d2:29:a5:9d:b1:2c:df:81:50:9f:
         62:d5:91:04:99:e7:22:bd:7b:26:d8:ed:f9:a8:37:e9:fd:7f:
         50:73:db:df:7f:46:4e:a0:a9:6f:81:3c:c6:98:0e:bf:71:d4:
         48:15:45:77:a0:8f:26:68:63:d0:d6:93:c6:7f:06:d2:b1:82:
         dd:16:9c:2c:02:38:5a:91:aa:e5:02:da:af:54:25:c9:b1:1e:
         4f:fd:46:10:23:53:92:02:54:14:44:f1:ae:bf:ee:f0:28:d7:
         e8:9a:62:4e:b5:1c:7a:9a:49:60:2c:0a:5c:32:d6:d7:2f:70:
         ca:7e:bb:63:a4:71:09:bb:50:b2:d2:95:19:05:d0:68:07:d8:
         3f:41:25:82:37:06:b7:57:24:14:c9:44:02:fd:2e:fa:0f:e4:
         32:af:5c:21:af:9e:8e:3a:a9:68:1c:2b:a1:c0:3e:64:c9:05:
         2a:7d:2b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org