Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a633030303a3a2f33342d3334203d3e20323633313434.roa
File:                     323830343a313736383a633030303a3a2f33342d3334203d3e20323633313434.roa (raw, json)
Hash identifier:          fy8RqzxOUc8wRj+bLVQMoPNM8S9+eRez9eBarzy7V2Y=
Subject key identifier:   68:C2:AC:A1:34:B3:2A:27:15:A9:37:79:4C:6F:AA:5F:CE:D5:01:15
Certificate issuer:       /CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
Certificate serial:       391D09084466FD6083A7D0EDE36CC8E7280BF92E
Authority key identifier: DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a633030303a3a2f33342d3334203d3e20323633313434.roa
Signing time:             Tue 05 Sep 2023 12:07:48 +0000
ROA not before:           Tue 05 Sep 2023 12:02:48 +0000
ROA not after:            Tue 03 Sep 2024 12:07:48 +0000
asID:                     263144
IP address blocks:        2804:1768:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1d:09:08:44:66:fd:60:83:a7:d0:ed:e3:6c:c8:e7:28:0b:f9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
        Validity
            Not Before: Sep  5 12:02:48 2023 GMT
            Not After : Sep  3 12:07:48 2024 GMT
        Subject: CN=68C2ACA134B32A2715A937794C6FAA5FCED50115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:39:7d:04:9b:4b:6e:eb:f1:44:f0:e1:d5:
                    d7:4f:e8:a8:05:28:6a:3d:80:2f:f5:09:ca:03:f9:
                    e7:84:40:95:8d:f1:85:2b:b4:31:54:74:07:08:8e:
                    bf:75:e0:cd:51:d5:d7:86:60:05:35:b3:9b:14:e2:
                    81:aa:45:62:8b:8d:75:51:c2:ad:08:32:f3:79:a3:
                    43:31:c1:a3:91:d9:6d:6e:a7:87:73:d8:e2:a5:81:
                    1b:b4:ee:42:97:e5:56:24:82:89:57:9f:5a:ed:29:
                    36:e8:95:c5:1a:bf:e6:56:38:bd:3c:1b:cb:61:af:
                    de:42:d5:3d:69:d9:9d:28:80:09:43:1a:b8:7e:14:
                    f7:69:35:68:ce:1d:d1:f6:09:0d:ca:09:b8:aa:b7:
                    d5:a7:95:ba:42:73:90:e3:1d:1d:00:02:9e:96:c1:
                    86:52:d4:ba:97:0f:b0:d2:d9:ac:4a:85:9b:bb:74:
                    e6:7b:cf:d7:6d:04:2c:77:1f:3b:56:04:30:23:c8:
                    6b:3f:17:d3:cb:f0:5e:e1:3e:b0:54:3d:d3:ad:c1:
                    66:5f:ed:d6:cc:49:6b:e1:dc:2c:7c:4e:5e:98:59:
                    2f:6f:d1:44:fa:3c:0a:20:e9:e9:ed:0d:e9:71:8a:
                    48:b5:4d:77:39:05:15:16:70:3d:b6:c4:a8:84:e4:
                    d4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C2:AC:A1:34:B3:2A:27:15:A9:37:79:4C:6F:AA:5F:CE:D5:01:15
            X509v3 Authority Key Identifier:
                keyid:DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a633030303a3a2f33342d3334203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:c1:b5:15:80:76:e8:9e:d9:47:44:e7:88:3f:71:66:7f:
         b2:0d:84:d8:6d:03:fa:7b:4e:f6:73:d4:ee:2a:37:ab:e0:cc:
         6f:af:d4:af:14:82:23:f1:39:0c:28:ce:bb:96:2b:db:c1:4b:
         6e:04:10:56:71:10:6b:4d:d1:ba:3d:ed:37:77:0f:87:de:6a:
         7d:29:da:b1:94:87:ef:a1:eb:b3:3c:29:b4:1f:fc:6f:89:c5:
         09:d9:b1:f3:14:fe:52:d9:2a:2c:e4:78:b0:fa:b5:c2:f6:26:
         b8:eb:e3:83:d2:78:02:0f:0e:c6:9e:f1:84:a3:71:d8:c9:ea:
         ba:cd:95:c4:48:2b:54:55:f5:d8:d2:6b:05:d2:9b:aa:4f:49:
         f8:1a:66:b7:dc:56:16:21:53:42:f3:9b:ad:8e:fb:db:01:4e:
         1d:24:8f:6e:31:4f:e2:82:28:44:e4:2b:ef:e0:10:eb:a7:5c:
         6e:3e:b3:92:17:c4:f7:75:d2:60:83:d6:69:fb:49:21:19:1a:
         9c:39:7f:8d:65:e7:32:d6:1b:31:4a:90:a3:25:b6:30:57:d7:
         91:30:c9:f2:83:c0:a6:5b:34:93:4e:15:34:10:e5:76:17:fd:
         ce:39:47:48:68:66:b9:79:06:00:a8:60:d1:2d:46:87:dc:26:
         08:d5:33:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org