Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a3a2f33332d3333203d3e20323636323637.roa
File:                     323830343a336435303a3a2f33332d3333203d3e20323636323637.roa (raw, json)
Hash identifier:          zAotTzmZVJy6Nr37cYt/0ZeyalgOkCc4ANsux0iX2xg=
Subject key identifier:   CC:33:02:2F:00:D7:09:26:47:29:04:11:0E:2C:17:76:F8:29:E8:43
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       2E211E3A8FC2A11AF81E960B43B34C0FF6051731
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a3a2f33332d3333203d3e20323636323637.roa
Signing time:             Thu 03 Aug 2023 17:37:12 +0000
ROA not before:           Thu 03 Aug 2023 17:32:12 +0000
ROA not after:            Thu 01 Aug 2024 17:37:12 +0000
asID:                     266267
IP address blocks:        2804:3d50::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:21:1e:3a:8f:c2:a1:1a:f8:1e:96:0b:43:b3:4c:0f:f6:05:17:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Aug  3 17:32:12 2023 GMT
            Not After : Aug  1 17:37:12 2024 GMT
        Subject: CN=CC33022F00D70926472904110E2C1776F829E843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:b6:17:09:bf:13:ff:5c:97:89:16:b4:1f:
                    ba:57:d3:14:9a:47:91:8b:ac:2d:b1:92:9e:3a:d9:
                    a3:db:41:0f:4e:3f:7a:29:40:68:d5:24:b3:e1:5c:
                    c7:21:c6:f4:07:08:0d:18:c9:f0:56:3f:ea:be:03:
                    fa:e6:67:f6:6f:12:06:0f:dc:e3:3d:4b:00:81:a1:
                    77:70:a7:26:d3:b1:7e:b7:16:41:dc:10:9f:98:fa:
                    bf:b7:52:4b:fa:d2:95:28:8a:0b:2f:a0:05:55:ca:
                    5f:9b:5e:0a:ee:85:67:36:08:04:cb:c0:1b:82:e8:
                    69:89:94:14:e8:cd:87:45:13:67:76:13:24:a3:a7:
                    26:70:f2:4f:47:5c:f7:b5:30:d1:64:44:90:2e:2f:
                    9b:c8:ed:94:36:07:0e:0c:ef:a5:6c:82:2f:d4:c4:
                    ae:e5:94:58:97:f0:e4:30:ac:af:29:5a:90:e5:12:
                    22:d5:f2:75:1f:dd:86:3c:b6:23:92:c2:49:cd:11:
                    ae:a2:1f:7b:f0:52:52:91:69:01:e7:e3:a3:66:52:
                    93:84:4c:1c:f0:e6:2b:7e:2c:80:ee:bc:93:f0:25:
                    1c:41:28:ae:d0:dc:ca:5e:6c:e7:1e:f3:c6:5e:ab:
                    e1:56:33:d8:03:25:d2:e9:c7:d9:8b:6c:b1:f8:c3:
                    ab:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:33:02:2F:00:D7:09:26:47:29:04:11:0E:2C:17:76:F8:29:E8:43
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a3a2f33332d3333203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d50::/33

    Signature Algorithm: sha256WithRSAEncryption
         29:dd:a2:85:00:5d:eb:d0:42:53:e0:22:a1:9c:c7:8f:71:3b:
         17:d8:5e:ce:64:fe:42:a7:9d:6a:8e:d8:ff:04:30:64:bb:33:
         6e:10:69:f8:50:4b:d3:38:55:a0:51:02:bd:c1:b6:c6:17:c1:
         ad:e9:5a:aa:a0:08:7b:74:2b:1a:a0:57:9b:9f:d8:b1:93:8b:
         61:a5:c3:02:14:fa:65:ca:da:ac:f1:3a:34:f5:66:9f:60:d8:
         6e:b2:4a:67:0e:c0:9a:48:c0:f8:ae:c7:9b:2a:7a:3f:5c:5f:
         06:33:43:3e:2e:23:a5:17:9a:88:1f:a4:3b:54:c1:5c:3b:59:
         b3:21:6a:1f:56:bc:2d:8c:72:6d:68:d4:cc:2d:68:a3:bd:44:
         e2:cc:64:73:e5:61:85:ea:b8:5c:6c:70:e8:97:01:47:3d:e7:
         2f:73:67:55:e0:05:4b:a8:04:e2:b5:2e:c5:a5:ad:30:bb:42:
         b5:65:b1:ce:51:c3:0b:d7:c3:f4:2d:33:0c:a2:40:14:f6:cb:
         6b:f7:db:74:5a:f8:9c:5c:ca:b2:66:27:8c:9e:4b:d0:ba:a2:
         0c:51:3a:18:9b:b7:50:bf:d7:2b:7f:a6:75:88:4e:3b:a7:1b:
         2a:b0:08:ca:98:da:06:ea:61:f4:f0:1f:82:ce:39:cf:f0:cb:
         4e:27:7d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org