Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/323830343a353764303a3a2f33332d3333203d3e20323638303838.roa
File:                     323830343a353764303a3a2f33332d3333203d3e20323638303838.roa (raw, json)
Hash identifier:          g0nAcFdTN6EmCWAXltG5z+NFb38r9PK8knLeOp7wVwU=
Subject key identifier:   21:1B:87:96:87:73:26:C0:73:FA:3C:2D:BC:35:E9:96:E5:21:F7:A1
Certificate issuer:       /CN=94A3DB62B012EF07C9AFE1762646CC714080A576
Certificate serial:       066DE17A0F26B9211EE1D7799DA033E659115B91
Authority key identifier: 94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/323830343a353764303a3a2f33332d3333203d3e20323638303838.roa
Signing time:             Fri 27 Oct 2023 15:56:52 +0000
ROA not before:           Fri 27 Oct 2023 15:51:52 +0000
ROA not after:            Fri 25 Oct 2024 15:56:52 +0000
asID:                     268088
IP address blocks:        2804:57d0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6d:e1:7a:0f:26:b9:21:1e:e1:d7:79:9d:a0:33:e6:59:11:5b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A3DB62B012EF07C9AFE1762646CC714080A576
        Validity
            Not Before: Oct 27 15:51:52 2023 GMT
            Not After : Oct 25 15:56:52 2024 GMT
        Subject: CN=211B8796877326C073FA3C2DBC35E996E521F7A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:98:58:10:7a:91:5a:d4:cd:49:22:ed:86:5e:
                    9c:d5:11:09:54:b5:68:21:22:7b:9b:59:4b:46:07:
                    66:48:5e:56:4f:93:cd:c2:30:a1:d2:9a:6f:fc:c8:
                    41:ad:fb:31:01:fa:a4:e2:fd:f4:90:32:fd:e0:c0:
                    12:88:21:d9:9d:15:4f:c1:33:01:b6:fe:62:1e:11:
                    55:4c:95:8a:f5:17:52:80:95:a5:52:b0:ba:44:ca:
                    f4:f7:5f:a4:ac:86:ae:bf:9b:00:3a:69:f4:65:a6:
                    73:05:ab:8e:00:9e:97:33:33:66:e0:cc:17:84:9b:
                    1d:a5:c6:b3:af:8a:29:02:46:57:e3:36:84:56:61:
                    90:2b:ae:7e:52:4d:75:89:c1:71:13:ad:04:56:9a:
                    57:2a:a9:9d:80:c4:bd:ce:a4:6c:9b:17:7f:76:db:
                    4a:03:85:89:27:d2:5c:cf:b8:80:e9:2b:43:e4:55:
                    f3:45:da:bd:50:3e:04:26:58:f4:f6:bf:ca:8a:6a:
                    f9:33:77:29:30:9f:a0:69:c6:6f:32:14:c9:e8:15:
                    6f:c3:50:0e:f7:fc:ad:93:2f:f9:1d:4d:15:ec:e8:
                    88:47:fb:12:c6:0f:cb:b5:9b:1a:24:11:fa:ba:de:
                    72:f9:15:e3:0e:f9:f3:d9:15:74:2f:51:bf:dc:2e:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1B:87:96:87:73:26:C0:73:FA:3C:2D:BC:35:E9:96:E5:21:F7:A1
            X509v3 Authority Key Identifier:
                keyid:94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/94A3DB62B012EF07C9AFE1762646CC714080A576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/323830343a353764303a3a2f33332d3333203d3e20323638303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57d0::/33

    Signature Algorithm: sha256WithRSAEncryption
         a7:ce:55:87:93:b2:28:4a:ac:a7:ac:57:32:f3:62:e6:63:63:
         21:0a:a5:a8:53:c4:90:85:0c:26:d7:d6:d5:40:92:e1:99:e2:
         5d:1a:c6:8a:71:c3:ac:d2:fb:87:2e:6e:3b:56:15:ca:b5:0b:
         f2:41:89:cd:bb:33:63:22:e9:73:43:e7:56:18:e7:9d:4a:b2:
         bd:83:4b:99:a5:ab:76:3a:01:a7:bd:64:41:b2:b0:23:80:70:
         86:4f:e8:77:d0:35:a8:47:ab:a4:83:5b:70:0b:dc:01:0f:54:
         28:56:15:6a:a6:0b:2a:17:aa:13:1f:f9:0c:2d:34:3d:78:96:
         27:b7:9b:fe:aa:44:b7:73:4c:20:e3:fb:bf:e0:be:98:85:9d:
         58:26:76:6f:a2:50:34:d7:2e:28:a5:13:3e:44:0f:27:35:6d:
         b8:dd:8b:48:45:fe:54:01:ef:09:cb:2b:7c:95:b4:79:1f:cd:
         0a:80:8a:8a:38:c1:5b:b2:b5:e2:e0:25:18:95:73:1b:c5:73:
         08:fc:61:19:17:dd:e7:43:2d:fc:4e:d0:2d:48:4b:42:e3:a5:
         2c:7b:f5:95:ee:5f:24:02:74:3c:dd:6e:b9:3d:c0:88:1c:2d:
         5c:08:eb:a1:8c:47:5e:6c:d6:2d:ab:61:99:1f:19:8e:08:4e:
         8f:eb:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org