Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/323830343a3134303a3a2f33322d3430203d3e203533313338.roa
File:                     323830343a3134303a3a2f33322d3430203d3e203533313338.roa (raw, json)
Hash identifier:          7odl5OV5R2m7OT2RUb/S3T6ZmYKNTr8If3Nx76YKvd8=
Subject key identifier:   E0:22:63:FB:2E:B4:D2:A8:E3:D0:E1:22:22:28:7B:E4:AD:79:29:9F
Certificate issuer:       /CN=9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3
Certificate serial:       24D216606088893DA08AC7DC55F494C3BC8D053C
Authority key identifier: 9F:7B:B8:1C:7C:61:11:73:1D:1A:97:D3:C8:F3:93:5E:48:48:C3:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/323830343a3134303a3a2f33322d3430203d3e203533313338.roa
Signing time:             Mon 23 May 2022 18:22:52 +0000
ROA not before:           Mon 23 May 2022 18:17:52 +0000
ROA not after:            Mon 22 May 2023 18:22:52 +0000
asID:                     53138
IP address blocks:        2804:140::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d2:16:60:60:88:89:3d:a0:8a:c7:dc:55:f4:94:c3:bc:8d:05:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3
        Validity
            Not Before: May 23 18:17:52 2022 GMT
            Not After : May 22 18:22:52 2023 GMT
        Subject: CN=E02263FB2EB4D2A8E3D0E12222287BE4AD79299F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:4f:45:c1:f1:34:ba:bf:b2:ac:62:01:b7:
                    fe:09:42:f1:3e:58:2d:30:a2:80:20:ff:f9:e5:81:
                    b3:23:e8:e9:61:26:b9:9e:68:eb:a9:68:ae:01:34:
                    3f:34:b1:46:20:80:79:79:27:64:eb:04:b9:b8:06:
                    39:94:d5:e9:42:da:24:fb:62:f5:94:00:50:8c:6d:
                    76:1a:35:07:71:6d:62:da:68:38:b7:70:7e:25:78:
                    8a:aa:fd:25:2e:74:a6:40:79:63:87:7b:ab:3e:ea:
                    4b:df:0a:96:da:dc:26:d9:82:21:d0:87:20:36:28:
                    3b:83:b5:53:bc:98:15:95:59:74:0b:0a:bf:43:bc:
                    d1:0e:ff:b0:f8:49:9e:2f:eb:45:1a:e2:a6:9b:d5:
                    58:f4:94:fb:80:00:d7:75:21:b3:a1:93:76:60:73:
                    a0:af:7a:be:82:3e:4a:39:8a:35:2e:9c:ee:91:50:
                    03:6a:87:73:9d:65:0d:32:12:82:a5:c3:10:53:af:
                    b4:98:37:9c:36:04:94:33:d0:cc:d8:6f:59:85:c2:
                    d4:d5:6c:bc:98:5a:4d:1d:a9:a1:cb:87:87:3c:ba:
                    50:f0:52:e6:ee:2a:25:ca:1a:88:1d:b5:20:60:a6:
                    87:e0:99:ea:1a:90:c0:b0:86:a9:16:65:7f:97:42:
                    4a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:22:63:FB:2E:B4:D2:A8:E3:D0:E1:22:22:28:7B:E4:AD:79:29:9F
            X509v3 Authority Key Identifier:
                keyid:9F:7B:B8:1C:7C:61:11:73:1D:1A:97:D3:C8:F3:93:5E:48:48:C3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/323830343a3134303a3a2f33322d3430203d3e203533313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:140::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:be:b0:5f:f5:95:e4:73:5a:cd:06:9b:26:47:ca:1d:f8:07:
         54:e7:c4:63:bf:7c:78:11:da:7d:ed:d1:35:50:9d:85:92:a5:
         14:6f:f9:9a:1f:47:45:59:09:f2:e5:47:b9:51:de:31:19:32:
         70:fb:dd:44:ce:2d:a4:7b:1f:80:e7:ea:27:08:b5:4b:5a:4f:
         00:2a:a0:39:6d:1b:80:23:c8:03:6b:e0:28:1a:29:9c:4a:9d:
         dd:16:c7:30:be:79:01:31:66:70:47:71:29:34:13:12:8c:5e:
         79:7e:21:dc:5c:35:26:18:2b:d3:60:d0:b4:ca:8a:d7:9c:58:
         ff:1f:e6:c3:dc:a9:ac:df:a5:e3:3a:e2:03:dd:6f:61:b7:60:
         cf:3e:64:3b:37:50:61:1e:46:7d:b3:0d:0e:42:01:79:55:08:
         df:5b:9a:1f:82:09:b2:cf:6a:2e:ba:8d:de:88:eb:73:34:2d:
         ca:ff:c0:4f:fc:e8:71:22:52:dd:a0:4d:62:94:66:61:08:e0:
         4c:a9:32:93:73:7e:0e:86:97:24:26:27:c9:33:b0:1d:63:d9:
         ca:4c:48:52:5a:fe:49:71:5e:a9:5a:9c:78:d9:9c:89:68:d7:
         69:2f:64:25:5b:8a:cc:3f:fa:cd:88:3b:14:66:7d:9a:dd:97:
         83:4e:c7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org