Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a3a2f33322d3336203d3e20323638303535.roa
File:                     323830343a353734343a3a2f33322d3336203d3e20323638303535.roa (raw, json)
Hash identifier:          FZw9IN9dgMnc23Vc5Ghl+n1kxmeno/mawf1U/utxEKE=
Subject key identifier:   E6:A7:4E:C5:AD:AB:40:D5:F4:AB:72:1E:19:20:6B:F4:DD:C8:BD:47
Certificate issuer:       /CN=1959D600929860D5650DBFB8BCE70EEE50717927
Certificate serial:       0E12433B93CD69D15C8555A2FFD66FBA4C215F4A
Authority key identifier: 19:59:D6:00:92:98:60:D5:65:0D:BF:B8:BC:E7:0E:EE:50:71:79:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1959D600929860D5650DBFB8BCE70EEE50717927.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a3a2f33322d3336203d3e20323638303535.roa
Signing time:             Tue 07 Mar 2023 20:00:00 +0000
ROA not before:           Tue 07 Mar 2023 19:55:00 +0000
ROA not after:            Tue 05 Mar 2024 20:00:00 +0000
asID:                     268055
IP address blocks:        2804:5744::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:12:43:3b:93:cd:69:d1:5c:85:55:a2:ff:d6:6f:ba:4c:21:5f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1959D600929860D5650DBFB8BCE70EEE50717927
        Validity
            Not Before: Mar  7 19:55:00 2023 GMT
            Not After : Mar  5 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1b:8d:29:73:d4:4c:74:2a:5c:f3:a6:29:ca:
                    59:10:26:1d:e1:08:3d:99:af:0b:90:ce:5a:3e:86:
                    89:59:d8:c9:94:47:b6:02:4c:d5:3c:3a:64:65:39:
                    75:ce:47:4b:69:03:4e:36:84:a6:3c:46:cb:a8:41:
                    0b:74:b4:40:d5:09:3e:c9:57:88:01:c2:c7:8c:90:
                    b7:75:8f:c0:70:6f:92:18:a1:04:90:1e:24:39:69:
                    5e:4e:b5:98:92:8c:c5:b1:e0:d2:7d:33:2a:b3:1b:
                    bf:c1:bb:51:06:11:15:9b:90:46:3c:56:15:86:aa:
                    ab:fe:e1:6b:1d:92:b8:96:51:a1:7c:da:0e:fe:0e:
                    ac:1a:53:43:66:00:f3:d1:c1:79:c6:29:66:38:c3:
                    e8:d7:bd:d8:7e:25:c6:e7:09:c5:2d:d7:fc:df:0b:
                    c6:8c:36:26:6c:a6:bd:63:a0:0d:46:da:78:f7:d0:
                    51:5b:90:1a:7e:a6:07:4a:83:23:9a:3c:f7:64:11:
                    17:8d:f7:24:de:d4:94:ed:20:ff:78:e8:a0:ca:7f:
                    54:9a:41:c3:c6:e5:3b:99:13:f4:a4:9c:41:91:e4:
                    80:d4:8d:c0:02:8c:01:a2:ab:04:e4:a7:b2:d1:56:
                    8c:8e:d1:f9:4e:9f:2e:33:41:9d:8b:7f:6c:7f:37:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A7:4E:C5:AD:AB:40:D5:F4:AB:72:1E:19:20:6B:F4:DD:C8:BD:47
            X509v3 Authority Key Identifier:
                keyid:19:59:D6:00:92:98:60:D5:65:0D:BF:B8:BC:E7:0E:EE:50:71:79:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/1959D600929860D5650DBFB8BCE70EEE50717927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1959D600929860D5650DBFB8BCE70EEE50717927.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a3a2f33322d3336203d3e20323638303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5744::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:70:64:cd:08:e2:1c:53:31:5a:5f:ce:6f:e7:41:f2:e6:8f:
         00:d2:af:1b:41:b4:4e:8d:c3:9e:f6:45:77:c6:9b:4e:39:79:
         a3:93:38:12:f4:6e:2a:3d:ac:af:73:5e:1f:78:5f:fc:67:2e:
         50:92:29:24:ae:f1:4a:0b:53:98:17:65:e2:b6:c8:9b:a4:3f:
         60:db:69:bc:54:f1:2c:c2:61:82:de:0a:e1:f4:d5:bf:ed:6f:
         05:28:08:84:db:f8:7f:02:9f:14:1a:fc:88:3c:16:65:94:12:
         51:85:57:c2:19:b9:d3:96:0a:2a:15:0f:a0:f4:d4:d5:05:4e:
         cf:7d:e1:4a:13:bf:ea:72:34:46:4a:20:f3:1c:7f:3f:0f:7d:
         34:2a:5a:2e:07:f9:6b:f5:6d:4f:3a:00:09:6e:9e:06:fb:45:
         d5:d1:16:39:71:be:8a:c9:14:98:9e:15:34:09:ad:0d:4d:fe:
         61:09:5f:cc:a3:72:9e:7b:38:70:48:52:e4:b9:fe:67:b7:5b:
         be:a4:a1:4d:8f:6b:94:c8:26:ae:a6:d0:ae:1b:a9:a2:dd:d2:
         3e:b9:a3:33:50:95:91:c7:ae:2d:f8:44:5a:72:2d:1e:06:29:
         8e:bb:15:c9:8c:ca:61:6c:6d:64:9e:de:d7:a7:3d:ef:47:19:
         08:33:fb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org