Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/323830343a313462343a3a2f33322d3336203d3e20323633333435.roa
File:                     323830343a313462343a3a2f33322d3336203d3e20323633333435.roa (raw, json)
Hash identifier:          WKYIron1kBNzll/3A/a5jr6IdzXAwf5Ife2vYm70cxQ=
Subject key identifier:   AF:CA:5F:74:D5:3B:36:3B:B0:E7:54:23:96:2E:CE:1A:BC:C1:DB:1C
Certificate issuer:       /CN=DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1
Certificate serial:       5A5CC0819B4889A04A460A3B4BB7962DDEEC86C0
Authority key identifier: DD:5E:42:67:AF:37:77:DC:ED:3F:61:42:2A:AC:5A:FF:1F:1A:4B:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/323830343a313462343a3a2f33322d3336203d3e20323633333435.roa
Signing time:             Sat 15 Apr 2023 21:56:04 +0000
ROA not before:           Sat 15 Apr 2023 21:51:04 +0000
ROA not after:            Sat 13 Apr 2024 21:56:04 +0000
asID:                     263345
IP address blocks:        2804:14b4::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5c:c0:81:9b:48:89:a0:4a:46:0a:3b:4b:b7:96:2d:de:ec:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1
        Validity
            Not Before: Apr 15 21:51:04 2023 GMT
            Not After : Apr 13 21:56:04 2024 GMT
        Subject: CN=AFCA5F74D53B363BB0E75423962ECE1ABCC1DB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:e7:22:05:6f:aa:9a:02:26:54:f9:30:ef:
                    80:bb:bb:18:f0:e8:c8:96:f6:af:1c:ea:c8:a3:0e:
                    ae:c5:9d:71:e0:ad:fc:97:9a:6a:98:18:98:d7:98:
                    5f:2a:25:55:e0:79:7a:cf:07:bc:9e:f2:37:df:4a:
                    f4:bf:42:48:49:33:cd:89:65:be:9c:45:96:20:87:
                    81:f4:d2:7a:a6:f3:05:26:5f:42:36:84:10:d7:f8:
                    c4:76:e5:62:08:06:11:48:69:23:09:70:7b:43:1f:
                    23:a9:d7:a5:2d:52:54:a2:ca:38:dd:90:45:a1:0f:
                    c3:bd:b8:3d:70:23:a2:8b:71:6e:25:d3:6a:b8:f0:
                    f5:06:2e:13:63:3a:c1:1e:a4:c8:26:0d:0a:37:e5:
                    67:6d:29:9b:92:c8:32:1a:38:7a:9e:17:5e:bf:4f:
                    81:25:b8:3d:2b:40:3a:9d:c3:7e:b6:41:f5:29:af:
                    ab:2b:02:38:47:b3:ab:45:38:e3:2a:0f:6e:a1:a1:
                    3f:05:1e:87:37:38:7f:9c:2a:97:a1:bf:9f:50:12:
                    08:09:a3:fc:dd:bf:d5:04:fa:8e:d0:0c:fd:4b:1c:
                    63:0b:de:3a:25:ac:fe:a3:e9:11:df:07:4e:e3:f0:
                    ba:91:7f:85:a8:2a:00:7a:55:8b:11:f8:f7:e6:d0:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CA:5F:74:D5:3B:36:3B:B0:E7:54:23:96:2E:CE:1A:BC:C1:DB:1C
            X509v3 Authority Key Identifier:
                keyid:DD:5E:42:67:AF:37:77:DC:ED:3F:61:42:2A:AC:5A:FF:1F:1A:4B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/323830343a313462343a3a2f33322d3336203d3e20323633333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:27:ed:f8:ad:72:75:87:f0:6d:31:83:cc:5c:e1:f0:31:4a:
         1f:33:6b:30:94:d0:dd:58:3a:cc:87:d4:fb:33:e8:75:d1:7f:
         23:31:15:94:20:d8:5b:c5:2b:ce:0d:c4:1c:5b:c7:d3:ba:b2:
         22:3e:f4:3b:80:8a:68:a4:a5:81:5a:e5:cc:9c:14:5a:eb:2e:
         eb:6a:c9:8d:6b:fa:c2:86:40:85:f5:be:90:28:07:a0:19:6d:
         eb:0d:23:2b:38:ec:d5:b1:a6:50:32:6d:2c:75:be:cf:73:3e:
         c2:ec:ab:1c:cd:35:57:27:b8:65:f8:05:6b:59:71:14:7b:4d:
         cf:76:23:93:1f:99:ab:17:ed:b6:e2:4e:62:78:93:55:45:7d:
         18:0b:35:b8:22:a9:71:ac:5e:53:1e:0c:81:47:c3:f5:d6:3c:
         1b:92:b9:d9:9b:07:ad:85:33:6e:56:43:53:8d:87:42:8e:e4:
         38:14:ca:15:ed:51:40:25:89:5c:f6:b5:66:ef:6e:cb:23:3a:
         9b:42:f7:6a:67:1c:99:ea:d1:80:fd:d2:9b:85:cf:e1:7b:49:
         41:ba:f8:29:f8:ab:ed:55:11:5e:19:bc:12:2e:e5:0d:b4:72:
         d0:e8:c2:df:ee:be:4b:8e:5c:1e:a8:4c:8f:37:05:c7:bc:6b:
         bc:89:64:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org