Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/323830343a343564343a3a2f33332d3333203d3e20323636393532.roa
File:                     323830343a343564343a3a2f33332d3333203d3e20323636393532.roa (raw, json)
Hash identifier:          oJSqA4xBlySwQe7OPvK8eHIpBURE2/0g9nAe+Dt2Tp0=
Subject key identifier:   4F:94:8F:B1:29:ED:CE:AB:33:F8:0C:17:90:18:25:A8:DA:1A:C6:E3
Certificate issuer:       /CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
Certificate serial:       57A895998E9D274986A3286339C57BFA6BE3D44E
Authority key identifier: 67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/323830343a343564343a3a2f33332d3333203d3e20323636393532.roa
Signing time:             Mon 08 Apr 2024 16:22:40 +0000
ROA not before:           Mon 08 Apr 2024 16:17:40 +0000
ROA not after:            Mon 07 Apr 2025 16:22:40 +0000
asID:                     266952
IP address blocks:        2804:45d4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a8:95:99:8e:9d:27:49:86:a3:28:63:39:c5:7b:fa:6b:e3:d4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
        Validity
            Not Before: Apr  8 16:17:40 2024 GMT
            Not After : Apr  7 16:22:40 2025 GMT
        Subject: CN=4F948FB129EDCEAB33F80C17901825A8DA1AC6E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:94:ef:de:dd:1e:fc:68:75:e7:20:18:e4:
                    e8:56:3e:c1:9e:72:41:f6:d4:36:84:c8:ac:f3:58:
                    d7:4c:4d:18:2c:b6:45:75:e8:4c:8c:6b:07:14:a8:
                    39:eb:aa:cb:7d:f9:0c:b8:1a:c9:17:a7:c6:34:84:
                    f8:f1:b9:17:6f:55:03:4d:7d:51:d0:4c:e1:05:1a:
                    cc:00:0e:49:e8:d3:b7:95:78:63:01:12:72:41:c6:
                    eb:3a:49:23:c7:39:a2:9b:9c:dd:08:bb:4b:ed:45:
                    3b:6a:4c:ac:33:99:98:b3:11:ee:97:e6:22:93:36:
                    22:0f:f9:88:53:ce:46:29:cc:61:91:74:ae:80:0a:
                    e5:29:2e:3c:27:4a:24:5a:dd:cf:ce:96:9b:2d:d5:
                    95:39:83:86:30:29:e4:67:e8:4d:9e:02:1b:a2:85:
                    e8:5c:ec:fd:99:ad:31:85:75:4b:90:0f:e6:ae:6c:
                    38:7e:6b:39:d2:24:11:23:d4:35:1a:44:08:8d:16:
                    d5:28:fe:f8:1e:21:5e:75:3a:44:cd:9b:34:b0:df:
                    b3:01:3e:68:0c:6f:ea:81:23:cf:12:04:4a:e6:39:
                    d8:45:c3:03:31:41:42:88:a6:3a:64:ab:7f:c6:6f:
                    2c:6b:ee:d9:31:87:1e:fb:75:d0:d9:1a:98:0c:7c:
                    91:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:94:8F:B1:29:ED:CE:AB:33:F8:0C:17:90:18:25:A8:DA:1A:C6:E3
            X509v3 Authority Key Identifier:
                keyid:67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/323830343a343564343a3a2f33332d3333203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         8a:f7:55:d0:1b:f2:6b:57:91:c3:e1:58:c8:04:af:b8:9a:6c:
         a5:8d:24:d9:14:7f:e7:01:77:42:ff:5f:14:df:38:94:7e:36:
         5a:21:b7:59:ac:91:ee:32:ad:c8:a0:d7:69:5e:1f:eb:26:58:
         72:e0:30:d3:cb:af:9f:73:b5:f3:be:8d:89:93:84:89:01:0b:
         3f:09:80:98:6a:27:20:c5:f9:b6:0e:9b:71:9a:56:14:fb:7e:
         40:fd:83:d1:aa:2b:28:2e:b7:87:ea:32:31:ae:3e:3e:14:2f:
         ec:87:29:fc:06:68:cb:56:ff:74:d4:46:65:87:6f:a6:17:96:
         ce:40:ed:e0:3c:02:e3:90:87:38:60:bc:d8:bf:33:f4:e7:a8:
         bc:e5:6e:e9:02:55:5c:c4:7d:71:11:47:c9:27:12:28:8f:cb:
         a0:51:ef:4d:e7:32:b5:f6:28:8d:60:aa:47:92:db:2b:3a:db:
         d0:ac:54:12:78:71:ee:9d:24:16:72:fc:d1:f6:a1:57:53:94:
         b9:f4:00:e9:54:c5:55:ae:cb:4b:7c:16:0f:4a:58:1d:51:0d:
         ad:d3:53:c1:dc:b4:a8:1e:61:06:c8:76:04:ad:50:53:21:ff:
         9f:5e:9f:3c:4e:a7:60:76:94:21:ce:e1:2a:ca:c6:0a:df:e0:
         6e:26:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org