Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/323830343a323864303a3a2f33322d3438203d3e20323633393832.roa
File:                     323830343a323864303a3a2f33322d3438203d3e20323633393832.roa (raw, json)
Hash identifier:          VnRe3AbNp/kQoiwPGG0YAu4YHfRy4PF/8wN5wwazKXA=
Subject key identifier:   47:D8:A0:BC:89:29:B9:2B:0D:E9:60:55:6F:40:CD:B0:09:73:45:1B
Certificate issuer:       /CN=010DADE301A8E5F8BF09DE2295BF9D0645BF819A
Certificate serial:       3EA5E4CC30C2D1DE511E0CDC40C3117AC5BEF32F
Authority key identifier: 01:0D:AD:E3:01:A8:E5:F8:BF:09:DE:22:95:BF:9D:06:45:BF:81:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/010DADE301A8E5F8BF09DE2295BF9D0645BF819A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/323830343a323864303a3a2f33322d3438203d3e20323633393832.roa
Signing time:             Mon 26 Jun 2023 14:00:00 +0000
ROA not before:           Mon 26 Jun 2023 13:55:00 +0000
ROA not after:            Mon 24 Jun 2024 14:00:00 +0000
asID:                     263982
IP address blocks:        2804:28d0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a5:e4:cc:30:c2:d1:de:51:1e:0c:dc:40:c3:11:7a:c5:be:f3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=010DADE301A8E5F8BF09DE2295BF9D0645BF819A
        Validity
            Not Before: Jun 26 13:55:00 2023 GMT
            Not After : Jun 24 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:d2:93:43:07:59:91:c7:8e:f0:a8:47:d3:
                    b4:9c:f5:72:95:4d:55:c4:1f:ad:86:6f:82:d3:eb:
                    8d:85:71:cd:16:66:af:05:60:c1:ce:03:81:c7:99:
                    b0:92:ce:f0:de:11:92:f3:c9:67:46:49:f7:9d:a5:
                    f7:aa:0e:35:26:a7:3e:11:8e:77:0b:a7:53:4c:31:
                    ab:a9:46:de:24:78:96:b2:87:10:f2:d5:64:ea:80:
                    65:46:f5:64:04:76:e5:f6:b6:2c:c1:dd:99:ea:af:
                    5e:83:ee:22:bd:8b:7b:d4:b2:86:3b:45:47:8f:86:
                    47:45:b4:66:59:a5:fb:ba:bf:f5:8c:6f:4f:bf:81:
                    0d:7c:12:9d:89:fa:fd:fe:55:64:de:6c:46:7d:b1:
                    6c:40:f0:83:c8:09:0a:eb:37:98:0d:f2:b6:0c:6d:
                    5d:be:c0:f5:44:43:5d:d5:be:0f:00:9f:e4:9b:7b:
                    30:21:f2:a6:e4:24:3a:36:3e:6b:7f:ea:86:09:be:
                    ef:bb:58:e0:4c:f0:5a:d9:be:dd:01:4a:7d:37:11:
                    75:fe:49:4c:43:e7:5a:ef:81:e9:04:2e:19:14:2d:
                    02:10:02:d1:26:6f:9b:08:74:c4:20:60:5c:a4:14:
                    7b:50:be:29:d0:d0:5f:15:f4:ed:84:75:23:d6:45:
                    88:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D8:A0:BC:89:29:B9:2B:0D:E9:60:55:6F:40:CD:B0:09:73:45:1B
            X509v3 Authority Key Identifier:
                keyid:01:0D:AD:E3:01:A8:E5:F8:BF:09:DE:22:95:BF:9D:06:45:BF:81:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/010DADE301A8E5F8BF09DE2295BF9D0645BF819A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/010DADE301A8E5F8BF09DE2295BF9D0645BF819A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/323830343a323864303a3a2f33322d3438203d3e20323633393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:6e:a0:31:dd:f5:a0:4d:43:ae:3f:2a:f4:cd:b1:5a:79:d5:
         6b:67:54:62:5d:6a:8f:fe:0d:90:e2:6a:36:f6:34:01:74:d0:
         6b:96:6f:30:62:77:6f:16:ec:dd:85:2f:1e:d3:b3:34:6c:1e:
         73:c0:c5:78:37:97:eb:26:74:ec:18:35:76:39:1d:29:05:6b:
         77:1b:f9:ed:27:a1:01:ca:06:bb:41:fb:e8:44:31:c3:de:14:
         8c:8b:98:31:f5:88:7d:bf:65:be:a8:82:a8:57:01:21:26:73:
         63:61:94:2a:2d:4e:ec:17:1e:45:fa:0f:10:35:95:74:3f:13:
         eb:34:96:97:6f:8d:ca:28:c7:56:b2:82:cb:a7:cd:f0:7d:19:
         93:c9:d7:2b:fe:00:40:14:a8:dc:fd:0a:ce:59:4c:3f:13:d9:
         86:16:72:38:d3:a5:7e:08:84:27:2a:ca:c0:cc:b9:11:26:f6:
         a4:a9:1c:28:77:d4:1b:3f:06:e4:b1:98:a2:d4:81:a9:19:62:
         d9:67:dc:40:fd:28:3a:3b:32:40:d3:83:06:4e:21:d3:46:99:
         a8:38:5a:e7:f7:f0:89:28:25:f1:d8:96:2b:a3:b7:47:59:44:
         1b:51:a4:0a:a6:2e:07:50:a0:e1:d4:86:36:25:6b:10:b6:08:
         f9:50:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org