Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/323830343a346132303a3a2f33322d3336203d3e20323637323230.roa
File:                     323830343a346132303a3a2f33322d3336203d3e20323637323230.roa (raw, json)
Hash identifier:          5/S7TsT9I8Jx+p1LnlWw+obNAcxlFsJRWSmj/3n3AhA=
Subject key identifier:   8F:6D:A1:84:BA:95:13:D3:CF:EE:30:EC:2B:E9:7F:31:82:10:A5:13
Certificate issuer:       /CN=B33C25921027247BC1670F9F632C29DCD8B421BB
Certificate serial:       67615A1CE7A7BAE3CBD82AEFAD92B2FFD50B13BC
Authority key identifier: B3:3C:25:92:10:27:24:7B:C1:67:0F:9F:63:2C:29:DC:D8:B4:21:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/323830343a346132303a3a2f33322d3336203d3e20323637323230.roa
Signing time:             Mon 11 Sep 2023 14:00:00 +0000
ROA not before:           Mon 11 Sep 2023 13:55:00 +0000
ROA not after:            Mon 09 Sep 2024 14:00:00 +0000
asID:                     267220
IP address blocks:        2804:4a20::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:61:5a:1c:e7:a7:ba:e3:cb:d8:2a:ef:ad:92:b2:ff:d5:0b:13:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B33C25921027247BC1670F9F632C29DCD8B421BB
        Validity
            Not Before: Sep 11 13:55:00 2023 GMT
            Not After : Sep  9 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:eb:ff:26:04:73:9d:28:50:a7:98:42:48:3a:
                    92:14:ae:68:64:d9:dc:93:d7:a7:4a:e0:72:53:5d:
                    11:b1:5a:ed:50:ad:4b:b6:2f:5a:f1:34:35:1f:35:
                    2c:ee:d6:a5:e1:c7:7d:7c:1b:e5:f3:cd:31:ea:c7:
                    be:e3:bf:aa:78:5d:89:af:73:9a:26:99:56:2e:58:
                    41:7e:17:a8:bc:a8:b4:b6:4e:20:b9:64:20:50:de:
                    27:2b:3e:a2:f5:59:8e:ba:02:26:0f:ae:d4:1f:a8:
                    55:16:28:c7:df:ce:a6:af:5a:f5:70:44:bc:59:8c:
                    0f:78:34:8f:02:a3:82:ec:82:2b:f8:12:f5:39:eb:
                    66:a0:7a:cc:c6:73:fd:34:2e:10:58:a0:c6:04:ce:
                    a6:e4:4d:67:c3:8f:a0:0f:f3:5d:b4:17:e8:7f:49:
                    44:f9:f4:e9:5f:42:52:b8:b3:e1:40:f7:77:a1:6f:
                    0a:2b:f1:cc:bc:30:0b:28:67:89:32:b9:99:dc:56:
                    e2:4f:6f:e9:df:61:4f:2c:49:10:3e:72:47:22:68:
                    a3:26:27:c9:a0:dc:c9:9d:8e:1f:63:00:01:50:13:
                    62:29:75:8c:4c:cd:8a:fe:86:71:8c:60:a4:36:d2:
                    f9:7a:83:de:5d:af:a8:3d:f8:13:a1:74:b6:3f:4c:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6D:A1:84:BA:95:13:D3:CF:EE:30:EC:2B:E9:7F:31:82:10:A5:13
            X509v3 Authority Key Identifier:
                keyid:B3:3C:25:92:10:27:24:7B:C1:67:0F:9F:63:2C:29:DC:D8:B4:21:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/323830343a346132303a3a2f33322d3336203d3e20323637323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:28:26:9c:e0:c4:79:64:a4:62:df:06:af:a0:2c:2a:69:c8:
         26:87:25:f1:55:23:8d:8f:9c:ac:18:46:0a:a0:30:6d:50:74:
         38:5d:05:0b:47:49:91:89:f1:7e:3a:47:f2:b9:60:48:64:4d:
         53:70:a1:b8:6e:24:e0:e8:08:26:b4:3b:ae:d3:12:02:7b:3d:
         2f:37:58:29:7b:6c:24:80:e5:26:e8:bd:91:04:f4:fd:86:de:
         a4:ca:e1:e7:50:10:64:5a:ae:ff:79:53:3e:5e:2e:aa:5f:3e:
         7b:3b:4d:63:ba:01:65:ca:ce:d4:0f:bc:58:10:3c:a7:aa:f1:
         bf:98:fa:6d:ce:2a:4a:b5:2a:17:9b:68:fc:81:14:56:bd:4d:
         21:47:2a:37:59:c7:a8:fb:46:8f:06:2d:0b:3f:f7:3e:3d:90:
         fc:74:2c:12:97:51:52:05:cb:fc:17:e5:04:be:44:e5:f0:9c:
         c6:88:d1:e9:2b:37:4e:db:3c:63:fb:93:31:ba:90:bb:b6:e5:
         3f:10:1d:67:b2:13:51:15:a5:24:53:56:dc:ef:c8:fb:32:c2:
         d9:22:d3:9b:c5:3a:cb:d2:fb:5b:c6:5b:b1:e1:1d:dd:05:87:
         d5:c2:23:f4:22:a6:f9:e2:49:bb:70:22:1c:fb:29:c8:8a:b9:
         2b:33:f5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org