Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33332d3333203d3e20323733363036.roa
File:                     323830343a383937383a3a2f33332d3333203d3e20323733363036.roa (raw, json)
Hash identifier:          2Z8YTvH0ZFktG9BI5ZiOxOdYMTqda7PJPOYJHmPya7c=
Subject key identifier:   A3:82:63:10:A6:8F:5C:DE:91:3D:27:CE:16:3D:D6:FC:3F:88:1C:B0
Certificate issuer:       /CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
Certificate serial:       72BC1C39CDAC163333A50FB4ED70A5790217EB07
Authority key identifier: AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33332d3333203d3e20323733363036.roa
Signing time:             Sat 24 Feb 2024 03:41:53 +0000
ROA not before:           Sat 24 Feb 2024 03:36:53 +0000
ROA not after:            Sat 22 Feb 2025 03:41:53 +0000
asID:                     273606
IP address blocks:        2804:8978::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bc:1c:39:cd:ac:16:33:33:a5:0f:b4:ed:70:a5:79:02:17:eb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
        Validity
            Not Before: Feb 24 03:36:53 2024 GMT
            Not After : Feb 22 03:41:53 2025 GMT
        Subject: CN=A3826310A68F5CDE913D27CE163DD6FC3F881CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:5a:bb:ab:f2:af:aa:a2:bf:c9:c7:e5:dd:
                    08:f6:c4:33:ff:e0:fa:50:ea:85:73:58:63:2c:ee:
                    bb:cb:4e:81:3d:c6:da:19:7a:01:d2:03:39:81:58:
                    e7:39:04:7e:b5:8a:3c:92:39:45:73:48:6d:96:be:
                    8e:c7:3b:95:c6:d2:c4:f5:95:7a:01:41:15:93:30:
                    8d:10:47:c5:3d:d0:58:99:c3:e7:ee:3d:06:2a:33:
                    9d:11:a2:c1:18:0f:bc:56:21:50:dc:6b:2c:9c:fc:
                    ce:2c:d9:0e:a4:bf:85:4b:ad:c0:aa:ce:86:6a:50:
                    33:be:0b:ff:dc:89:f2:44:91:2c:03:87:71:0c:e2:
                    8b:2e:c9:e5:6d:d1:ad:4c:b7:85:cb:ab:64:60:f1:
                    cf:df:fe:f7:96:aa:af:ab:76:61:8b:0a:00:62:ca:
                    d2:0d:b0:b3:53:0f:8c:dc:e4:54:ca:cd:84:33:83:
                    6f:33:7c:a3:a9:e5:b1:71:08:8d:60:93:ad:98:df:
                    27:90:9a:4f:fb:e1:ce:cc:31:24:15:1b:94:83:6f:
                    47:7b:e9:eb:8c:4a:e2:26:90:ff:b7:d9:31:19:cc:
                    ef:45:3e:a4:7f:b1:4d:b7:5e:fa:27:e0:ad:a0:52:
                    49:71:71:8d:b8:09:08:f5:88:13:85:29:28:fa:7c:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:82:63:10:A6:8F:5C:DE:91:3D:27:CE:16:3D:D6:FC:3F:88:1C:B0
            X509v3 Authority Key Identifier:
                keyid:AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33332d3333203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978::/33

    Signature Algorithm: sha256WithRSAEncryption
         57:00:ff:fd:47:32:e1:ad:07:5b:75:95:a9:39:f6:dc:6b:d1:
         7a:45:6e:7e:4d:ac:af:16:8f:20:48:fe:00:0b:24:8d:5a:ff:
         02:60:10:39:27:2b:4b:95:98:12:c3:31:12:68:05:67:8b:84:
         e9:d6:bc:87:d0:12:a8:d1:89:da:b4:35:4a:92:b3:4a:dc:fb:
         74:ba:50:55:fe:c6:cc:3f:1a:e3:93:38:b1:6d:df:8b:d2:d6:
         fa:f3:a5:55:6f:23:16:13:b8:9d:cd:7e:f6:02:12:29:f9:5e:
         a1:14:5a:16:7f:d4:63:eb:e5:1d:51:ca:28:3d:20:2e:47:e3:
         40:a1:45:f0:22:d8:d2:a0:eb:27:a6:19:f3:bd:cd:e8:2c:86:
         49:53:88:cd:a3:a3:6e:58:dd:d0:d7:f1:24:f8:cd:b8:fe:f4:
         e0:fa:34:1b:aa:5f:bb:1a:b1:f5:03:59:0c:b2:9c:92:e0:22:
         e3:ed:60:38:91:a5:a9:96:eb:7d:4d:59:f2:ca:d0:4c:e1:cc:
         43:60:12:f6:04:12:47:3f:b8:dc:1f:7d:04:17:6c:94:c3:2b:
         c6:fd:db:5d:64:51:ef:51:1a:4b:97:5b:18:69:0b:63:68:c7:
         c6:a3:04:84:30:0b:6d:c2:f3:8b:01:f0:33:fc:0c:01:6c:f4:
         c9:a5:35:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org