Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/323830343a323964303a3a2f33322d313238203d3e20323634303336.roa
File:                     323830343a323964303a3a2f33322d313238203d3e20323634303336.roa (raw, json)
Hash identifier:          phfvidan7FWl0f7PEeenYkIpcnPSFfc+uZ30TwOuWoA=
Subject key identifier:   D1:36:02:91:22:83:2B:C5:AD:3E:D8:A6:5B:9D:B2:03:7E:B0:CD:78
Certificate issuer:       /CN=035DBA2FFD0F6C214A792E3C8B19F1269A46669D
Certificate serial:       2405410C062A6FABFD336CE8CD5EA83C0AC91D23
Authority key identifier: 03:5D:BA:2F:FD:0F:6C:21:4A:79:2E:3C:8B:19:F1:26:9A:46:66:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/035DBA2FFD0F6C214A792E3C8B19F1269A46669D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/323830343a323964303a3a2f33322d313238203d3e20323634303336.roa
Signing time:             Tue 28 Mar 2023 14:02:53 +0000
ROA not before:           Tue 28 Mar 2023 13:57:53 +0000
ROA not after:            Tue 26 Mar 2024 14:02:53 +0000
asID:                     264036
IP address blocks:        2804:29d0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:05:41:0c:06:2a:6f:ab:fd:33:6c:e8:cd:5e:a8:3c:0a:c9:1d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=035DBA2FFD0F6C214A792E3C8B19F1269A46669D
        Validity
            Not Before: Mar 28 13:57:53 2023 GMT
            Not After : Mar 26 14:02:53 2024 GMT
        Subject: CN=D136029122832BC5AD3ED8A65B9DB2037EB0CD78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:79:59:bd:ea:01:6a:02:15:12:99:47:57:6d:
                    41:2b:e2:9b:3d:40:f8:44:f8:c7:09:cf:53:88:e6:
                    74:c4:c2:e5:00:a7:50:75:c8:b3:a2:0a:44:69:51:
                    46:f7:02:77:4f:dc:09:f8:ad:0b:7c:0c:90:c3:3b:
                    34:7e:65:e9:d2:f0:2f:a0:e4:92:cf:04:ce:84:16:
                    6e:a0:c5:01:f7:c4:58:cf:76:d5:f6:fa:ef:31:26:
                    68:b5:17:a4:34:31:52:04:57:b6:64:df:95:52:b1:
                    ac:2a:c9:69:d8:22:7f:ac:64:ca:b5:f4:dc:aa:46:
                    d6:94:c0:e6:85:81:d2:1d:e7:33:51:80:77:aa:17:
                    dc:e2:b7:dc:15:68:6e:3e:34:24:e7:d3:f4:9d:a2:
                    df:7b:d0:cb:3a:76:b5:30:b8:6c:1a:68:0c:03:b1:
                    6e:cc:57:c7:01:33:48:80:7c:38:35:91:a0:1e:db:
                    e0:0d:25:de:4c:89:52:09:20:e3:a6:80:a1:36:69:
                    e1:be:bb:d5:2e:17:10:85:55:af:60:6f:5e:b8:f5:
                    5f:7b:47:85:54:e7:4b:e0:45:68:26:d1:c8:52:23:
                    de:b5:42:30:94:fb:a8:3b:26:9f:25:8e:5e:39:58:
                    3c:68:db:15:11:df:89:bd:10:e9:8a:8c:d0:39:b2:
                    18:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:36:02:91:22:83:2B:C5:AD:3E:D8:A6:5B:9D:B2:03:7E:B0:CD:78
            X509v3 Authority Key Identifier:
                keyid:03:5D:BA:2F:FD:0F:6C:21:4A:79:2E:3C:8B:19:F1:26:9A:46:66:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/035DBA2FFD0F6C214A792E3C8B19F1269A46669D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/035DBA2FFD0F6C214A792E3C8B19F1269A46669D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/323830343a323964303a3a2f33322d313238203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:10:2c:5d:cb:fc:eb:03:97:a7:e8:22:21:74:77:77:dc:1f:
         03:5d:cf:e6:f1:b0:50:f0:e6:88:06:97:1d:5b:ba:8e:6f:e3:
         73:d5:64:05:e6:3b:c2:56:79:7f:66:e8:19:c4:ef:d3:0f:ad:
         6f:a3:dd:b4:63:a0:f0:7f:f2:4c:a1:07:e5:e2:a5:8e:f2:ba:
         e7:ef:73:24:33:58:a8:32:12:42:54:9f:42:26:c9:4f:cb:c4:
         a0:5b:77:d7:e6:9b:3d:0b:c8:35:8a:ba:99:c6:fe:7c:a6:bf:
         67:96:08:0e:c6:d6:fb:b3:95:32:28:80:e3:ae:98:a3:aa:1c:
         5c:b5:19:e9:b2:70:f5:12:b1:68:34:f1:c9:b5:88:aa:71:38:
         af:c9:bb:4f:6e:d0:cd:65:e8:83:bd:97:33:9a:85:e7:76:be:
         1d:70:30:91:26:41:f9:c7:2b:09:c1:77:0c:b8:7f:ac:a3:6d:
         d1:57:b4:d9:a9:59:4a:c1:c8:94:06:10:b2:c1:c8:df:4a:29:
         71:94:05:05:10:79:1e:7f:fe:03:ea:14:90:67:c2:94:f1:f0:
         b5:b2:09:01:90:f5:67:09:f5:a8:9b:91:c4:30:74:0c:7b:e8:
         45:aa:e4:bc:b1:60:07:93:ba:c1:74:08:60:f2:45:bb:82:90:
         c1:80:4a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org