Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a3a2f33332d3333203d3e20323637353735.roa
File:                     323830343a343338343a3a2f33332d3333203d3e20323637353735.roa (raw, json)
Hash identifier:          Tspi5QCZlIQoRmdlcIvj99WrOtGPATzWtx9WW3Tz0o0=
Subject key identifier:   45:2B:11:A1:FD:A4:79:A9:1B:42:9D:80:EB:11:5A:A6:15:7F:41:78
Certificate issuer:       /CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
Certificate serial:       596555808FE6897967CF464C7EFD2EE3960E2629
Authority key identifier: 8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a3a2f33332d3333203d3e20323637353735.roa
Signing time:             Thu 11 Jan 2024 18:03:47 +0000
ROA not before:           Thu 11 Jan 2024 17:58:47 +0000
ROA not after:            Thu 09 Jan 2025 18:03:47 +0000
asID:                     267575
IP address blocks:        2804:4384::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:65:55:80:8f:e6:89:79:67:cf:46:4c:7e:fd:2e:e3:96:0e:26:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
        Validity
            Not Before: Jan 11 17:58:47 2024 GMT
            Not After : Jan  9 18:03:47 2025 GMT
        Subject: CN=452B11A1FDA479A91B429D80EB115AA6157F4178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:3a:68:a6:b5:4d:36:f5:b7:c3:1d:e3:24:
                    43:3b:ad:f3:10:7c:f6:8b:f1:d9:79:eb:4d:f8:18:
                    6e:0b:b7:91:cf:47:7c:db:99:5a:2f:e3:99:a9:ac:
                    04:5b:b9:bb:95:89:65:88:9e:13:a4:8e:28:c9:b8:
                    8e:23:bb:eb:4c:ca:7a:6e:12:96:ed:35:fb:30:50:
                    6d:99:59:15:42:c7:20:d6:d8:82:12:ad:4f:60:f7:
                    7a:24:48:5c:ba:fd:56:23:2b:90:11:00:98:21:9b:
                    88:32:8c:02:39:b6:27:da:70:c5:46:c4:69:81:9d:
                    63:c5:bc:4a:ed:ff:af:37:ba:3d:a6:78:6b:c5:e9:
                    b6:a6:43:4f:50:15:53:d4:2b:25:71:e7:d1:12:d4:
                    57:54:aa:60:4f:af:a3:97:a8:49:71:8e:d2:04:59:
                    39:ec:e6:8e:75:ea:67:ca:eb:68:87:69:c8:45:74:
                    3f:e4:ec:b3:70:8c:ed:5b:0e:67:fc:c1:20:23:f4:
                    28:e1:d1:af:09:3a:31:2b:1c:d5:6f:72:57:a9:3a:
                    59:1c:9a:95:28:6c:7f:8c:42:e6:28:83:29:bc:49:
                    b8:ef:e6:39:1c:b8:c3:55:b9:9f:24:3b:1e:41:24:
                    32:ed:32:63:17:18:7e:e7:28:22:f1:c7:94:5f:6f:
                    80:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2B:11:A1:FD:A4:79:A9:1B:42:9D:80:EB:11:5A:A6:15:7F:41:78
            X509v3 Authority Key Identifier:
                keyid:8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a3a2f33332d3333203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4384::/33

    Signature Algorithm: sha256WithRSAEncryption
         00:6b:7f:ac:55:fd:f8:06:f8:d1:16:01:72:c9:cd:8d:bf:51:
         6e:ae:40:4f:55:9b:92:9e:68:41:f9:6b:0d:97:69:0d:57:1f:
         55:fd:a6:65:cb:36:98:0d:1d:e1:d7:15:e5:6e:80:25:25:78:
         4e:04:ea:d4:ad:26:75:71:32:74:6e:e9:9f:88:09:0f:57:98:
         e2:81:a0:62:33:fb:4e:6c:16:99:ab:4d:ba:ab:73:13:b9:0d:
         2e:d7:e3:fa:da:5f:c3:cd:5e:b4:1e:7e:55:31:e8:60:0b:b3:
         d9:af:9c:f0:34:e0:34:9b:55:b4:1e:0a:c6:86:7c:24:07:73:
         8f:8b:aa:57:a6:6c:a8:29:79:70:8d:37:74:36:2d:b5:8e:0f:
         6f:c8:84:1d:4c:09:3c:3e:92:2f:78:d4:13:3b:9f:cc:fe:43:
         7a:a3:5a:34:cd:a3:0a:90:af:81:9c:3f:65:97:93:e2:65:cf:
         46:8e:8a:f9:c0:ef:f3:01:36:6b:cb:c0:4e:1d:5c:39:93:d0:
         53:09:2f:84:6d:57:87:35:72:ae:43:ef:5f:a8:2a:2d:74:17:
         cb:cb:c5:47:8c:fe:43:db:c1:ca:5d:df:29:13:0b:50:67:5a:
         19:3d:d5:e3:24:8f:79:b7:9f:6d:dd:f5:04:cc:b9:6c:a2:69:
         17:0a:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org