Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/323830343a3136633a336330303a3a2f34302d3430203d3e203238333039.roa
File:                     323830343a3136633a336330303a3a2f34302d3430203d3e203238333039.roa (raw, json)
Hash identifier:          lHj4g8xto8VVeu44dW+7ewNUidfrnxV2uE3nt5oQiBI=
Subject key identifier:   33:B1:AE:3C:C3:EE:0D:1D:41:91:6B:58:12:02:29:21:A8:54:FA:D2
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       742656DA8F7A1AD91BDFD8895DC10C2DEE936A2D
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/323830343a3136633a336330303a3a2f34302d3430203d3e203238333039.roa
Signing time:             Fri 03 Nov 2023 20:28:29 +0000
ROA not before:           Fri 03 Nov 2023 20:23:29 +0000
ROA not after:            Fri 01 Nov 2024 20:28:29 +0000
asID:                     28309
IP address blocks:        2804:16c:3c00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:26:56:da:8f:7a:1a:d9:1b:df:d8:89:5d:c1:0c:2d:ee:93:6a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Nov  3 20:23:29 2023 GMT
            Not After : Nov  1 20:28:29 2024 GMT
        Subject: CN=33B1AE3CC3EE0D1D41916B5812022921A854FAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:72:c8:c7:27:33:ca:85:df:4b:6f:cf:64:2b:
                    36:f9:8b:8d:a7:fa:1e:c4:eb:08:95:5c:36:9a:0a:
                    56:d9:65:6a:d3:3f:2d:82:5b:68:36:bd:4e:1e:2d:
                    b6:6b:ff:ac:61:42:f6:65:45:68:25:88:39:9a:24:
                    fb:21:1f:c4:65:96:68:aa:26:c6:e8:9e:2b:b9:8c:
                    f2:40:19:6e:94:f5:bd:92:ea:bc:e2:cc:40:22:a6:
                    4d:07:78:40:b5:67:84:b2:a3:d3:91:04:b1:21:34:
                    77:df:ea:4f:c3:91:6d:dc:97:7d:b6:3f:5d:6f:f1:
                    95:43:f1:f0:03:97:f9:52:17:73:18:4f:0b:5f:f7:
                    4f:16:7e:e3:cb:6c:c2:2c:bf:d5:f7:62:6d:42:c8:
                    14:74:00:27:60:dc:3a:8a:96:8b:93:7e:d7:cc:d4:
                    8c:a3:5c:aa:a6:e2:ae:bc:8c:9d:1d:03:3e:f0:c7:
                    6a:1b:d3:d7:c6:d4:0e:a8:98:6e:73:77:4d:ac:4e:
                    fa:5a:2a:3d:38:ed:2a:fd:fa:f3:dc:df:82:aa:b9:
                    0b:c2:12:0b:41:3d:16:d6:8c:ed:af:90:ca:10:5a:
                    4c:4e:ef:d3:d3:20:99:fa:26:7a:8d:58:78:f2:2a:
                    d5:71:1f:ef:e5:46:07:fc:41:51:bf:b9:cb:45:a3:
                    13:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B1:AE:3C:C3:EE:0D:1D:41:91:6B:58:12:02:29:21:A8:54:FA:D2
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/323830343a3136633a336330303a3a2f34302d3430203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16c:3c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:19:11:45:b9:cd:bb:d3:b0:2c:32:01:56:32:92:f2:e3:30:
         cd:ec:8a:f7:53:0e:c4:7f:23:37:94:68:4c:00:56:e1:bc:79:
         b8:89:24:a3:08:04:91:66:f1:66:4c:5d:71:b1:56:31:3b:64:
         68:dd:fd:9c:15:99:13:72:3b:8b:b1:22:0f:0a:43:01:1a:a9:
         44:1f:67:f7:c7:e3:95:4b:75:11:3d:b0:36:2f:ff:b4:75:4d:
         02:9a:54:75:aa:e2:0e:14:3f:ac:f5:0b:19:ad:47:02:ea:94:
         24:c8:f9:47:f5:fc:fd:a3:32:ed:88:34:f1:f5:ea:f5:80:6c:
         0b:26:9d:7f:dc:e9:67:83:ef:15:8e:9b:99:cb:7e:2e:d7:8f:
         8b:9d:d6:4a:8a:69:00:95:cb:9e:56:76:97:15:0e:9a:8e:83:
         6b:6e:4f:c5:e1:ec:07:d7:20:bd:dc:85:f8:72:49:55:9e:6b:
         32:60:f8:fc:e0:1b:29:97:c0:67:b2:19:c5:2c:8f:bb:aa:49:
         1d:95:d0:13:95:df:95:86:08:1d:04:aa:01:4d:e3:02:5a:d5:
         39:2b:9b:29:8a:98:09:bf:61:cc:47:02:00:8b:c3:59:f6:40:
         60:ca:e0:39:32:76:ba:30:56:94:d7:67:05:9d:7f:4c:7f:eb:
         24:10:11:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org