Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/323830343a363637633a3a2f33332d3333203d3e20323639353633.roa
File:                     323830343a363637633a3a2f33332d3333203d3e20323639353633.roa (raw, json)
Hash identifier:          OZc0pbPb6h/fSI+1lm/A8gI0IRzqsztwJecbTSpmSEc=
Subject key identifier:   ED:EB:D6:37:2C:FA:83:F1:A4:38:29:8E:6C:F1:91:62:A7:F0:78:B9
Certificate issuer:       /CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
Certificate serial:       4E3FC34D7EB4293E7CBD970987217F8D8C3711A6
Authority key identifier: 9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/323830343a363637633a3a2f33332d3333203d3e20323639353633.roa
Signing time:             Tue 02 Jan 2024 16:29:44 +0000
ROA not before:           Tue 02 Jan 2024 16:24:44 +0000
ROA not after:            Tue 31 Dec 2024 16:29:44 +0000
asID:                     269563
IP address blocks:        2804:667c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3f:c3:4d:7e:b4:29:3e:7c:bd:97:09:87:21:7f:8d:8c:37:11:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
        Validity
            Not Before: Jan  2 16:24:44 2024 GMT
            Not After : Dec 31 16:29:44 2024 GMT
        Subject: CN=EDEBD6372CFA83F1A438298E6CF19162A7F078B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fb:6d:9a:a1:bc:4e:df:48:89:36:98:9e:6d:
                    ab:96:12:3f:2f:6b:66:8d:a7:e3:09:65:01:af:ad:
                    f6:2c:a6:b8:5e:ec:4b:28:88:da:f4:0a:91:ea:8f:
                    4b:ca:b0:05:c9:b6:4c:5b:f6:d5:4f:7b:1f:ee:a9:
                    cb:ff:38:84:55:eb:00:9d:c8:68:60:46:d2:0a:26:
                    ee:d4:0a:ad:43:83:f1:f0:b4:34:0e:49:34:1d:00:
                    71:ed:8e:6f:f7:ff:37:df:25:bf:5d:7d:3e:7b:3f:
                    d4:66:15:dc:ad:77:1f:39:b3:95:7f:63:b9:3a:b1:
                    9c:dd:fd:c6:65:23:a4:a4:42:4a:dd:28:a8:0b:1a:
                    4c:5b:96:50:45:45:ab:f9:80:28:18:36:42:2b:f4:
                    40:e1:7c:83:ba:e5:4e:b7:6c:02:aa:b7:7c:e9:4d:
                    19:ff:d1:7a:dd:c5:ac:ab:fe:38:23:11:a9:94:f9:
                    56:d5:9c:6d:bd:e0:23:76:80:93:dd:90:7f:45:95:
                    2c:79:57:2d:7c:dd:19:61:3f:cc:13:b3:fa:56:4c:
                    ad:49:6e:52:2a:f5:13:67:98:b4:90:a6:95:b9:f8:
                    0f:6a:af:a2:e1:bc:b5:86:62:b7:f6:18:d1:dc:61:
                    fb:e0:aa:5e:cb:43:fa:50:5b:78:0b:5a:af:5b:a1:
                    38:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EB:D6:37:2C:FA:83:F1:A4:38:29:8E:6C:F1:91:62:A7:F0:78:B9
            X509v3 Authority Key Identifier:
                keyid:9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/323830343a363637633a3a2f33332d3333203d3e20323639353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:667c::/33

    Signature Algorithm: sha256WithRSAEncryption
         57:0f:b1:88:a4:01:40:8c:2d:9c:e6:9f:72:48:89:c0:2b:5f:
         3e:3a:c2:9c:ef:3f:41:b1:c8:db:1b:34:5d:72:d7:78:f7:34:
         14:53:15:8d:b3:8b:bc:0e:5c:8a:f8:67:4d:0a:4e:05:dc:01:
         6a:4d:f0:69:f9:f3:62:c1:50:00:4d:28:ac:4f:d8:03:66:93:
         7d:02:ac:4d:3c:4b:31:5c:e7:55:22:ae:ee:5a:e0:a4:80:d8:
         8a:71:40:3c:37:0a:d3:a0:8c:e1:ba:97:6a:8f:52:5a:9d:33:
         bc:0c:b2:d6:93:6f:9f:50:92:20:f8:f0:0c:31:ff:96:85:22:
         f3:15:bc:ab:58:38:5f:05:bd:55:bd:43:e2:fd:3e:79:31:68:
         59:28:bd:b3:d2:15:a5:3a:38:34:7e:d6:51:2d:fe:59:c5:74:
         07:38:85:59:b9:24:81:c6:84:39:7b:c9:4b:9b:7b:71:f8:83:
         3f:ca:16:b3:3f:01:c9:88:84:30:34:c0:81:fd:ed:ba:86:58:
         bf:63:a8:e5:61:1d:68:0f:52:cb:bc:9d:b4:85:0e:90:39:25:
         50:84:d1:bd:96:00:0f:7a:ad:4a:56:8a:26:62:7e:1b:79:65:
         75:7b:5e:a6:22:8f:b7:29:24:c2:55:d1:73:d8:d4:39:61:96:
         3d:13:62:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org