Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/323830343a346132303a383037303a3a2f34342d3434203d3e20323637323230.roa
File:                     323830343a346132303a383037303a3a2f34342d3434203d3e20323637323230.roa (raw, json)
Hash identifier:          LfV2tYAbFf7DVbc1I9FkEwKVGiVJs3FlvJ3Is0zpWzA=
Subject key identifier:   B4:91:10:E0:7D:26:C2:F4:B2:2F:1C:EC:FD:F6:73:14:98:8B:97:AE
Certificate issuer:       /CN=B33C25921027247BC1670F9F632C29DCD8B421BB
Certificate serial:       1D03955090D36C5CA98269E43004D34E03AF46EF
Authority key identifier: B3:3C:25:92:10:27:24:7B:C1:67:0F:9F:63:2C:29:DC:D8:B4:21:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/323830343a346132303a383037303a3a2f34342d3434203d3e20323637323230.roa
Signing time:             Mon 25 Dec 2023 05:48:33 +0000
ROA not before:           Mon 25 Dec 2023 05:43:33 +0000
ROA not after:            Mon 23 Dec 2024 05:48:33 +0000
asID:                     267220
IP address blocks:        2804:4a20:8070::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:03:95:50:90:d3:6c:5c:a9:82:69:e4:30:04:d3:4e:03:af:46:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B33C25921027247BC1670F9F632C29DCD8B421BB
        Validity
            Not Before: Dec 25 05:43:33 2023 GMT
            Not After : Dec 23 05:48:33 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:dc:97:31:22:e4:a3:b8:0f:8e:5f:19:97:
                    37:e7:49:54:36:f9:83:48:cf:84:40:7f:4d:a7:04:
                    6f:a4:a6:67:9e:a8:09:5f:6d:cf:1d:a2:79:4e:cd:
                    bb:25:16:9e:d9:d1:c8:98:62:e5:44:59:6d:e5:dc:
                    99:ec:18:4f:4f:e8:0d:56:62:f5:b4:96:13:be:fc:
                    da:27:3b:b6:6f:59:3b:90:e5:3d:24:f7:53:95:70:
                    12:a8:35:09:89:84:b0:04:c5:93:68:8d:91:67:19:
                    97:2e:b9:42:48:a9:92:e7:38:c4:be:97:fb:aa:27:
                    f5:3f:6f:42:6d:9a:0d:cf:4e:4a:ae:6f:b5:49:d5:
                    7d:53:3e:39:4b:9f:72:52:20:37:c9:b7:c6:c1:9b:
                    7e:43:51:47:e9:ac:29:74:06:d8:a5:f0:22:1f:51:
                    c7:03:bd:8b:6f:34:70:58:03:a0:f5:a6:58:fd:35:
                    0d:97:85:a6:bd:4f:a6:86:fe:b5:8a:92:d3:3e:77:
                    51:b7:41:f8:84:a6:4e:73:49:ad:fa:fd:89:bb:93:
                    e2:7b:e9:46:6e:9d:38:8c:63:1c:e4:2b:88:57:20:
                    18:35:2e:61:1c:66:56:2c:65:4a:4c:ec:e3:fa:2b:
                    df:ca:8b:c3:36:c3:19:ea:fa:45:9a:12:89:2d:b8:
                    ad:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:91:10:E0:7D:26:C2:F4:B2:2F:1C:EC:FD:F6:73:14:98:8B:97:AE
            X509v3 Authority Key Identifier:
                keyid:B3:3C:25:92:10:27:24:7B:C1:67:0F:9F:63:2C:29:DC:D8:B4:21:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/323830343a346132303a383037303a3a2f34342d3434203d3e20323637323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a20:8070::/44

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:c8:af:f4:d2:f2:8e:3e:96:41:4c:95:e0:79:54:06:bc:
         23:27:46:ae:fd:ab:04:ca:5c:68:fb:97:c7:9e:17:40:e8:e8:
         49:e7:dd:60:f3:33:17:f0:e0:9d:77:84:97:cf:ac:87:da:ec:
         05:be:9e:35:b9:82:cb:e9:90:ab:5a:06:97:2a:99:8b:7f:40:
         1c:25:cf:92:35:cf:66:a2:23:5a:fb:0c:53:c0:cc:c6:bf:5d:
         80:a0:7b:72:2b:04:49:b3:26:26:0e:94:88:29:d7:27:1a:85:
         75:2a:d1:2a:71:2f:27:5d:d8:38:c5:52:c2:11:f3:c3:34:eb:
         3d:d1:52:f1:fd:ac:1b:59:ca:fa:92:b3:e4:7a:de:f6:48:3b:
         02:2a:58:b2:a0:5f:46:b3:c3:72:69:6c:04:1a:3d:ee:f1:70:
         ac:de:28:7b:34:3a:ba:a4:b1:c7:53:4b:19:41:eb:1f:6b:2a:
         60:6e:51:d2:67:1f:4f:33:2e:56:f2:fc:91:06:0e:24:4b:37:
         7a:46:25:83:9f:18:9b:60:ba:a1:7d:4b:f3:be:c1:ee:5f:89:
         a8:53:04:03:62:b4:06:81:70:6e:b4:bc:cd:a5:6b:03:11:24:
         c6:ef:e5:cb:1b:b6:c6:20:b7:df:78:3f:ab:40:41:ba:ee:56:
         cc:15:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org