Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a343030303a3a2f33352d3335203d3e20323733363036.roa
File:                     323830343a383937383a343030303a3a2f33352d3335203d3e20323733363036.roa (raw, json)
Hash identifier:          ejGoT6IM7MoMOegt2ng3xGOuVv2x6DMpLObZLSGRBE0=
Subject key identifier:   5F:B0:7F:9D:D0:E4:31:B6:EC:D2:83:B4:A7:4D:1E:91:E7:80:78:1A
Certificate issuer:       /CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
Certificate serial:       709B9C35D429FC81C6F5F303130ACBD43446C285
Authority key identifier: AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a343030303a3a2f33352d3335203d3e20323733363036.roa
Signing time:             Sat 24 Feb 2024 03:41:55 +0000
ROA not before:           Sat 24 Feb 2024 03:36:55 +0000
ROA not after:            Sat 22 Feb 2025 03:41:55 +0000
asID:                     273606
IP address blocks:        2804:8978:4000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9b:9c:35:d4:29:fc:81:c6:f5:f3:03:13:0a:cb:d4:34:46:c2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
        Validity
            Not Before: Feb 24 03:36:55 2024 GMT
            Not After : Feb 22 03:41:55 2025 GMT
        Subject: CN=5FB07F9DD0E431B6ECD283B4A74D1E91E780781A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:46:fa:0c:d0:ad:22:49:f7:cb:31:4b:81:
                    b0:32:3f:a2:0c:0a:8e:23:36:88:b2:91:76:f1:dd:
                    04:3e:c0:49:56:43:08:b1:57:8e:83:3a:58:54:96:
                    6d:8c:5d:b6:96:0f:21:73:6a:14:b0:fc:dc:fe:29:
                    b5:cd:40:14:bf:c5:15:c4:db:a1:de:fc:37:4c:8c:
                    22:e7:77:9e:e8:be:15:0f:6b:80:3c:c4:1c:43:dc:
                    42:98:9a:30:b1:c3:c7:65:69:41:d2:e4:a2:ba:35:
                    e2:d3:65:e9:a6:31:bb:60:4a:00:cd:0e:5c:ce:21:
                    f2:ea:be:da:e5:3d:83:77:b5:fa:9c:33:36:1f:98:
                    e7:26:09:ed:03:f4:b9:cc:b8:a3:f4:f1:92:cd:a2:
                    2c:e4:44:ac:7b:81:a2:a5:67:79:6c:f2:6a:0b:0d:
                    33:ac:48:4a:e5:1f:1c:84:16:e2:38:36:6f:25:ad:
                    62:96:10:78:91:d2:4a:5d:ed:75:df:36:18:59:6a:
                    fd:c6:c8:b0:ca:1c:90:f3:2c:d7:38:d4:40:22:93:
                    40:5c:6f:3d:26:cc:e9:cb:08:f5:fa:0c:96:df:6c:
                    41:77:d9:1b:1a:11:03:fc:eb:1b:68:05:01:c2:53:
                    a1:ea:c4:c7:0d:d1:62:f7:40:f6:fd:27:64:83:22:
                    63:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B0:7F:9D:D0:E4:31:B6:EC:D2:83:B4:A7:4D:1E:91:E7:80:78:1A
            X509v3 Authority Key Identifier:
                keyid:AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a343030303a3a2f33352d3335203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         85:d9:48:d5:49:db:0b:ed:85:ba:5c:b8:e2:c3:fb:bc:64:55:
         d0:55:d1:02:4e:6a:fc:5b:d1:52:0c:76:f9:73:c3:9b:4f:05:
         c9:0a:bb:c8:78:91:9d:7d:df:f2:01:97:a0:08:6e:04:d6:27:
         24:a3:df:ac:a7:14:2c:97:a4:75:95:72:69:70:98:9e:1d:dd:
         6e:fc:37:b5:e6:50:df:c7:c0:be:a8:5a:78:b0:b4:4d:08:ad:
         dc:b6:14:7b:2b:c4:76:1b:3c:2d:b0:a5:56:98:2a:74:00:01:
         c0:a8:78:6a:78:38:f3:fb:e1:ee:50:25:e8:84:ea:dd:7a:12:
         70:6f:03:30:46:e8:19:a6:c7:8a:ae:29:6d:d5:fe:e9:b4:02:
         0f:a6:a4:3a:b8:f2:fd:da:01:da:a2:a5:c4:e5:05:94:92:fc:
         4a:e1:68:be:89:1f:53:54:69:a7:8a:10:a4:ae:79:4a:c3:19:
         fe:e1:e1:40:3a:e8:42:5d:12:bb:08:54:66:e8:89:09:32:44:
         78:10:56:75:f6:e9:b3:0b:17:57:b8:1c:39:e8:eb:1e:e6:24:
         0e:6d:3a:7e:c7:fe:2d:20:fd:3e:d0:8e:3b:66:14:72:fb:a0:
         23:06:ba:ff:9e:09:48:17:bf:0e:99:c1:02:ec:70:3f:22:b8:
         c6:0e:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org