Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/323830343a336331383a3a2f33322d3332203d3e20323636313930.roa
File:                     323830343a336331383a3a2f33322d3332203d3e20323636313930.roa (raw, json)
Hash identifier:          MlwoUKSk0QdIIY5RRVBH12y76XdoyumUdJkvrJepxZo=
Subject key identifier:   B7:16:4C:D4:30:68:BF:30:08:C3:1B:DF:D6:F5:FB:C7:BC:AF:EB:4B
Certificate issuer:       /CN=443C52A1E1B3E17578094AEB52B4600E6650CDD5
Certificate serial:       55410FBC8658CCFB72C12E21541F5F7DFE31E040
Authority key identifier: 44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/323830343a336331383a3a2f33322d3332203d3e20323636313930.roa
Signing time:             Thu 21 Sep 2023 21:30:10 +0000
ROA not before:           Thu 21 Sep 2023 21:25:10 +0000
ROA not after:            Thu 19 Sep 2024 21:30:10 +0000
asID:                     266190
IP address blocks:        2804:3c18::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:41:0f:bc:86:58:cc:fb:72:c1:2e:21:54:1f:5f:7d:fe:31:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443C52A1E1B3E17578094AEB52B4600E6650CDD5
        Validity
            Not Before: Sep 21 21:25:10 2023 GMT
            Not After : Sep 19 21:30:10 2024 GMT
        Subject: CN=B7164CD43068BF3008C31BDFD6F5FBC7BCAFEB4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:b9:f0:67:16:84:b0:df:23:f8:ad:29:f1:
                    95:c6:e8:1c:70:f3:95:4e:72:37:c4:49:e2:ab:f3:
                    e1:09:a9:60:ec:6e:da:91:10:4c:55:77:e9:cb:00:
                    15:cd:1a:40:32:e6:45:aa:b6:51:ce:84:c1:1f:33:
                    cb:52:ba:fa:20:3a:a4:d7:0e:da:3f:56:c1:5f:ef:
                    03:72:57:fd:9d:69:9f:d5:af:2c:ba:14:20:03:79:
                    64:a3:d5:ad:96:3f:7a:92:1e:46:de:32:7d:3e:05:
                    0f:e4:eb:ad:c6:06:b9:8b:25:91:b2:a3:3e:00:c0:
                    af:41:a3:65:05:ee:89:0e:ab:3d:ce:5d:2b:11:00:
                    1d:67:cf:d6:f6:54:89:fb:61:31:77:5e:c2:b0:2d:
                    6f:a2:c7:83:a5:86:10:cf:98:9f:ef:be:7c:d2:bc:
                    3c:a6:74:05:01:7d:39:81:48:e3:f9:95:c5:c8:0e:
                    56:90:65:7d:f9:75:e5:32:7e:ba:76:61:e4:50:d3:
                    3f:51:f7:43:1d:e8:0a:5c:57:af:61:04:4e:eb:79:
                    7d:ef:2f:39:0e:25:02:94:37:70:09:37:21:df:f3:
                    95:79:f8:f7:6e:26:a1:15:6d:0b:ba:32:de:18:ce:
                    f8:02:07:1d:c7:1c:c2:f7:2f:a4:e7:43:4e:e0:60:
                    72:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:16:4C:D4:30:68:BF:30:08:C3:1B:DF:D6:F5:FB:C7:BC:AF:EB:4B
            X509v3 Authority Key Identifier:
                keyid:44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/323830343a336331383a3a2f33322d3332203d3e20323636313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:2a:88:b9:e2:f6:29:a4:af:78:73:f2:3f:ad:c8:65:93:dc:
         1c:51:8f:32:4b:f5:eb:c7:93:68:ec:0c:9a:1e:18:24:dd:11:
         8b:6a:6c:2e:34:e3:0b:3d:4f:03:12:f0:f8:29:96:ce:e2:b9:
         82:8e:05:db:b0:c9:b9:dc:c7:90:1b:16:21:64:66:b9:62:da:
         34:47:20:47:99:db:39:49:9b:15:65:35:6d:86:6e:d5:b5:74:
         86:6d:d7:bf:a4:bf:b3:c1:1a:2f:ce:43:73:b1:fb:0f:67:30:
         8e:e2:95:57:07:1a:bf:05:3b:03:1d:ff:38:b5:e4:e6:6f:e5:
         0c:9a:bb:46:b1:53:b3:20:74:45:59:22:a0:df:d4:ae:ca:d0:
         78:d7:2c:a7:6c:b3:13:b8:47:3d:b8:60:09:d0:18:a5:a6:f6:
         ca:65:9b:c6:1a:f8:9e:fc:5d:4f:3f:16:c0:11:74:0f:42:dc:
         f9:6f:25:27:cc:86:b8:23:3d:99:bf:2b:5e:9a:ac:8a:8e:88:
         b0:32:f6:b5:85:0b:01:21:55:d2:30:c9:f0:55:72:40:46:22:
         e7:6e:bc:ad:4f:43:da:bf:ad:80:8f:f6:d3:d4:12:25:eb:56:
         7e:ee:9f:ad:3d:cf:90:98:73:71:41:73:dc:46:b0:e1:16:16:
         10:af:c2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org