Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a383030303a3a2f33332d3333203d3e20323634353935.roa
File:                     323830343a323232383a383030303a3a2f33332d3333203d3e20323634353935.roa (raw, json)
Hash identifier:          605lBxduzYlJAq2FzyeO8BISk7Qtjp8xfKZ8IEGe0Fg=
Subject key identifier:   23:F9:56:C9:EE:B1:33:77:49:8F:68:DF:45:8B:22:F4:50:99:CE:58
Certificate issuer:       /CN=FF71661DF3D46D07FC37BD72F1B79D1D5E87961B
Certificate serial:       4FAD2D21EE1AA98022A474A36921EB8E2423D865
Authority key identifier: FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a383030303a3a2f33332d3333203d3e20323634353935.roa
Signing time:             Sat 10 Dec 2022 21:23:47 +0000
ROA not before:           Sat 10 Dec 2022 21:18:47 +0000
ROA not after:            Sat 09 Dec 2023 21:23:47 +0000
asID:                     264595
IP address blocks:        2804:2228:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ad:2d:21:ee:1a:a9:80:22:a4:74:a3:69:21:eb:8e:24:23:d8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF71661DF3D46D07FC37BD72F1B79D1D5E87961B
        Validity
            Not Before: Dec 10 21:18:47 2022 GMT
            Not After : Dec  9 21:23:47 2023 GMT
        Subject: CN=23F956C9EEB13377498F68DF458B22F45099CE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:73:f7:26:b8:2e:53:80:3e:01:88:f3:02:19:
                    16:c3:f4:7b:ab:90:d8:f0:f2:70:a1:f1:61:42:72:
                    5f:f3:3b:6d:e7:8e:32:a5:8f:99:ed:7e:0d:50:ea:
                    28:6c:3e:5a:29:24:ac:71:11:0a:21:0f:8b:8b:fd:
                    34:f8:51:d2:fd:e3:4b:00:52:29:4d:4a:1d:df:19:
                    da:5e:00:54:78:b7:f3:2a:bb:dc:56:bb:d1:bf:8e:
                    ee:39:e7:f6:57:ed:92:44:af:b3:2d:3e:91:9e:53:
                    c2:73:7e:2d:29:93:92:2c:3f:3e:fe:dc:6a:d6:dc:
                    fc:07:1d:33:5f:14:0a:55:5f:01:ba:8a:dc:25:7f:
                    3d:1d:22:49:6c:17:4c:0a:b0:17:8c:36:65:fa:58:
                    f2:25:6f:55:83:41:d7:3f:86:05:7e:d8:0e:7a:08:
                    ed:b4:29:f3:06:05:80:56:7a:98:fa:d1:fe:47:51:
                    fa:f1:06:fe:af:52:5d:db:e3:56:b4:4f:02:3a:3e:
                    40:08:29:78:a2:28:39:f5:fc:98:10:a1:de:fa:72:
                    2e:a2:0b:b5:2c:c9:45:9f:cd:e1:f0:10:9a:4e:81:
                    dd:1e:f7:69:fd:98:19:b2:b8:b2:76:6f:a2:97:b8:
                    19:75:5a:91:a6:09:92:a4:6d:f1:78:03:2d:22:8e:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F9:56:C9:EE:B1:33:77:49:8F:68:DF:45:8B:22:F4:50:99:CE:58
            X509v3 Authority Key Identifier:
                keyid:FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a383030303a3a2f33332d3333203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         54:c4:34:d7:5e:ba:6b:27:e3:c7:a3:76:1f:51:6b:93:b0:b2:
         84:9e:a9:8b:48:42:9a:db:f8:f7:52:cd:8e:02:4f:db:da:33:
         87:8d:2e:29:db:ef:5c:e9:f1:4d:06:3c:1e:0e:53:49:8f:23:
         46:99:84:ac:58:7e:9d:33:3b:aa:a1:53:16:bd:36:11:08:20:
         4c:53:6c:9b:c0:a1:64:ce:ec:8f:92:02:01:91:c1:9d:f5:0d:
         63:10:3c:ae:68:44:56:44:2b:38:6a:97:26:09:87:c9:9a:77:
         79:9f:b5:a5:1b:5f:11:84:ca:ce:dd:90:86:ac:f3:90:94:58:
         f7:c6:0d:75:c5:3c:8b:74:a2:14:62:6c:f5:21:a0:6e:a7:b0:
         e8:98:f5:e2:9e:3c:21:51:1d:02:25:f7:d9:10:8e:6b:1e:ce:
         72:1d:12:69:c1:7d:29:7c:37:a5:65:fd:fa:a2:4b:f2:63:32:
         e3:f4:cf:04:77:05:15:5b:3f:90:37:02:38:60:01:35:a5:14:
         07:1b:32:1c:0d:34:b0:63:b4:b7:f6:5d:2f:5a:4f:1c:27:5c:
         dd:59:74:4e:6c:39:62:f3:78:5b:3a:06:79:96:c9:8e:63:14:
         b9:52:5d:9c:a1:91:19:46:c6:ea:6a:aa:3e:6c:db:41:7a:a8:
         7f:8a:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org