Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/323830343a376539303a3a2f33322d3332203d3e20323731363332.roa
File:                     323830343a376539303a3a2f33322d3332203d3e20323731363332.roa (raw, json)
Hash identifier:          MV2MQLoXfsizhRGP8lPBlFOAZCVKo43+I7AAeKk0B9Q=
Subject key identifier:   FD:16:56:4A:56:75:D7:41:00:FB:B3:96:D6:C6:7A:F2:21:BD:35:EC
Certificate issuer:       /CN=0363C300551869E92BAF6218A3622188861DBE67
Certificate serial:       08957E5AB3835B7445B68FCE87AD126C4980778E
Authority key identifier: 03:63:C3:00:55:18:69:E9:2B:AF:62:18:A3:62:21:88:86:1D:BE:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0363C300551869E92BAF6218A3622188861DBE67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/323830343a376539303a3a2f33322d3332203d3e20323731363332.roa
Signing time:             Mon 15 Jan 2024 22:30:45 +0000
ROA not before:           Mon 15 Jan 2024 22:25:45 +0000
ROA not after:            Mon 13 Jan 2025 22:30:45 +0000
asID:                     271632
IP address blocks:        2804:7e90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:95:7e:5a:b3:83:5b:74:45:b6:8f:ce:87:ad:12:6c:49:80:77:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0363C300551869E92BAF6218A3622188861DBE67
        Validity
            Not Before: Jan 15 22:25:45 2024 GMT
            Not After : Jan 13 22:30:45 2025 GMT
        Subject: CN=FD16564A5675D74100FBB396D6C67AF221BD35EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:e4:ab:ef:93:6f:e5:3a:c2:1b:dd:68:54:
                    a0:e1:74:93:4c:66:6e:26:bf:c5:2f:65:99:56:ee:
                    c3:0c:6d:11:b1:7d:cd:b6:d8:92:2c:4e:16:ca:0d:
                    1d:e6:59:ef:5e:46:85:a2:ee:4b:76:85:20:98:b7:
                    7f:d1:37:6e:37:5a:24:f3:17:d6:f4:f1:84:3c:e1:
                    58:1f:b9:81:19:8f:51:a1:d2:7c:d3:d9:f7:c8:66:
                    76:30:df:7a:af:58:3e:15:78:33:07:58:f5:0f:5d:
                    f5:10:b4:3a:7e:6e:b7:b2:40:f1:6b:78:be:8b:56:
                    b9:32:62:eb:16:2d:4b:e0:33:d1:aa:fe:a3:e3:ca:
                    8a:37:cf:f1:d3:b1:af:6b:33:99:84:4b:7f:e1:80:
                    62:b8:c7:cd:fc:75:d8:e7:ee:77:f4:76:44:bb:98:
                    11:a1:67:e2:94:1a:af:c0:93:9b:45:62:ec:0d:7d:
                    5a:4d:bb:2b:9f:59:e5:aa:5c:4e:14:84:e9:75:7b:
                    79:0a:b4:af:af:3f:b0:a4:2a:93:b4:b2:bb:02:7a:
                    8f:e4:50:e8:85:ae:62:6f:5f:c6:02:4a:a6:dc:88:
                    48:5c:c9:7b:5f:c0:4c:44:71:b7:30:5b:89:3f:20:
                    6f:63:80:3f:31:ae:8b:7a:2d:92:71:d0:5a:01:b1:
                    39:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:16:56:4A:56:75:D7:41:00:FB:B3:96:D6:C6:7A:F2:21:BD:35:EC
            X509v3 Authority Key Identifier:
                keyid:03:63:C3:00:55:18:69:E9:2B:AF:62:18:A3:62:21:88:86:1D:BE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/0363C300551869E92BAF6218A3622188861DBE67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0363C300551869E92BAF6218A3622188861DBE67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/323830343a376539303a3a2f33322d3332203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:10:32:63:ae:80:fe:b7:51:fc:6d:f6:42:3d:8c:7a:d6:4e:
         1a:c1:4c:84:9a:d6:b2:10:31:bf:14:a6:9b:ac:65:fb:ac:41:
         74:1d:ec:eb:0d:0b:88:0c:cf:df:85:c1:4d:2e:ef:13:95:f0:
         cd:53:f0:d4:23:a4:ee:e8:c4:db:4e:1b:a6:b9:6b:04:e4:2b:
         ea:69:54:67:84:c0:31:87:17:db:15:68:93:f9:99:4c:db:c3:
         85:f8:2e:d3:48:68:1d:66:a3:b6:49:20:73:fe:8d:dc:ff:c0:
         46:58:a0:84:8d:44:bb:40:9f:95:8e:2a:fe:0b:f4:3f:1d:78:
         64:53:51:cc:cc:1b:5e:27:54:54:1d:a5:24:3c:b9:9c:57:5a:
         96:01:32:21:80:81:68:ed:b8:3c:25:1b:ba:4a:e1:7b:96:56:
         1b:aa:df:97:a3:dc:cf:5a:f8:e1:6a:3e:76:4b:7f:6f:c3:7f:
         39:33:30:17:ab:cf:0e:e5:f4:a6:5a:75:ee:56:6c:59:95:16:
         f9:f7:02:f2:9c:d3:02:5c:f8:e7:a2:c4:34:c6:f1:ff:87:99:
         81:d2:cd:13:c0:20:69:0c:d5:a2:94:de:d7:24:b7:93:7b:30:
         f5:f6:ac:48:35:2c:8e:2a:66:2b:af:67:a2:11:34:6d:49:82:
         36:7a:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org