Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/323830343a333361343a3a2f33322d3332203d3e20323635343039.roa
File:                     323830343a333361343a3a2f33322d3332203d3e20323635343039.roa (raw, json)
Hash identifier:          +7xaxdpIEqmdnOXNM8MAKR+lcPUkMidRkkx8ZoyRUe8=
Subject key identifier:   5D:E0:C9:DD:43:65:9E:D5:23:C3:4B:DD:6B:BC:B9:C4:AF:4C:61:26
Certificate issuer:       /CN=A0DAA7DCDF8B78237BED95AF00752072151F0F73
Certificate serial:       14FE0104BD5CA1AB022CA160920E464E9BEA3DC2
Authority key identifier: A0:DA:A7:DC:DF:8B:78:23:7B:ED:95:AF:00:75:20:72:15:1F:0F:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DAA7DCDF8B78237BED95AF00752072151F0F73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/323830343a333361343a3a2f33322d3332203d3e20323635343039.roa
Signing time:             Tue 09 May 2023 17:44:16 +0000
ROA not before:           Tue 09 May 2023 17:39:16 +0000
ROA not after:            Tue 07 May 2024 17:44:16 +0000
asID:                     265409
IP address blocks:        2804:33a4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fe:01:04:bd:5c:a1:ab:02:2c:a1:60:92:0e:46:4e:9b:ea:3d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DAA7DCDF8B78237BED95AF00752072151F0F73
        Validity
            Not Before: May  9 17:39:16 2023 GMT
            Not After : May  7 17:44:16 2024 GMT
        Subject: CN=5DE0C9DD43659ED523C34BDD6BBCB9C4AF4C6126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:8e:66:e1:e0:86:66:fc:92:57:84:22:0b:
                    9a:7a:80:64:1e:ff:06:62:1a:10:39:fa:cf:fe:51:
                    07:52:9a:00:89:c8:21:79:94:83:12:27:12:76:97:
                    ec:2d:8b:c3:72:26:76:bb:b8:67:36:97:06:73:16:
                    64:ca:68:b4:e9:f3:aa:4c:bf:f0:24:68:a4:17:42:
                    fe:d6:b4:8d:29:b1:b7:ac:44:a6:ac:14:14:5c:d7:
                    24:0d:f8:7f:e6:a2:c3:a5:5e:33:71:14:2b:a6:f2:
                    f9:cd:70:18:cc:00:83:7a:81:af:83:7a:15:5b:89:
                    0f:91:9a:db:b9:99:60:80:14:6e:57:b8:ce:6f:09:
                    99:b6:c6:b5:85:ad:e0:c0:d5:e0:8e:1f:0f:37:4e:
                    75:6d:fa:f7:5e:45:79:82:c0:e7:5d:f1:74:3a:bb:
                    00:7b:37:3d:ff:01:77:c6:fc:3e:3d:ed:1f:be:90:
                    19:85:83:b9:f9:a1:5b:85:de:d4:ad:38:04:62:62:
                    ae:3b:51:45:a0:34:85:66:2d:91:b8:4c:04:a0:0f:
                    ce:e3:ab:eb:4a:f5:63:b2:9a:5f:d9:82:c5:63:f3:
                    13:74:1c:a7:a9:c9:f1:22:dc:be:2f:c9:21:6f:8f:
                    99:f2:d0:f2:b7:05:39:04:f0:5c:f9:be:b1:16:a4:
                    4f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E0:C9:DD:43:65:9E:D5:23:C3:4B:DD:6B:BC:B9:C4:AF:4C:61:26
            X509v3 Authority Key Identifier:
                keyid:A0:DA:A7:DC:DF:8B:78:23:7B:ED:95:AF:00:75:20:72:15:1F:0F:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/A0DAA7DCDF8B78237BED95AF00752072151F0F73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DAA7DCDF8B78237BED95AF00752072151F0F73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/323830343a333361343a3a2f33322d3332203d3e20323635343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:bf:54:e8:7e:a1:fe:31:78:64:39:94:4e:03:b0:f8:9f:ab:
         51:c3:34:c1:5c:6a:db:39:04:d3:8b:0d:5c:ae:47:f7:35:6b:
         37:b2:9c:58:63:10:45:02:b2:fd:c4:45:54:1c:0e:c6:06:41:
         8f:26:4b:04:4d:f7:d4:3f:0f:07:c7:58:05:05:ef:98:40:7b:
         08:55:2f:22:77:d4:87:1e:86:db:a5:12:80:ce:1e:3b:ba:01:
         71:62:29:35:2b:da:04:13:8d:4e:c9:8e:61:1a:d3:b0:49:ba:
         a3:f3:38:ba:d6:d0:dd:9e:36:99:96:56:39:40:7a:c5:9a:f8:
         a0:8f:94:78:84:81:cf:f2:7f:48:19:d2:dc:c8:65:aa:b6:cb:
         14:cf:c0:78:fc:41:3c:4f:2a:48:c0:c3:c6:29:a0:86:72:7d:
         c0:04:f9:dc:bb:87:ff:4f:66:74:aa:2e:f3:5d:4a:14:a3:ad:
         32:ee:95:08:32:54:f5:c4:19:90:b7:1a:52:28:da:4c:e8:20:
         51:6a:c1:4f:72:3a:c7:f4:68:d4:99:f8:87:f7:47:f4:91:dc:
         5e:d7:4a:c7:77:96:8f:51:d2:82:60:aa:fc:84:a9:05:4e:b6:
         b6:e5:7e:07:e8:00:ed:8d:ff:21:88:8b:e9:72:fe:3f:13:6c:
         f6:6e:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org