Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a3a2f33322d313238203d3e20323635313131.roa
File:                     323830343a333330343a3a2f33322d313238203d3e20323635313131.roa (raw, json)
Hash identifier:          zg8qyH4Tfs4kx/AmyMgwKygLNsoQbxB7DkmLIkTAZxQ=
Subject key identifier:   98:DB:2E:B9:0F:85:78:E5:0C:7E:DA:0C:D7:07:93:5B:C7:58:82:0A
Certificate issuer:       /CN=DCEDC4F6280EE1FA438B6EB18E3559ADFFA259B8
Certificate serial:       60E0CCA99CDF8EC5F177395943F5285AC75DE191
Authority key identifier: DC:ED:C4:F6:28:0E:E1:FA:43:8B:6E:B1:8E:35:59:AD:FF:A2:59:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCEDC4F6280EE1FA438B6EB18E3559ADFFA259B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a3a2f33322d313238203d3e20323635313131.roa
Signing time:             Mon 17 Apr 2023 23:17:39 +0000
ROA not before:           Mon 17 Apr 2023 23:12:39 +0000
ROA not after:            Mon 15 Apr 2024 23:17:39 +0000
asID:                     265111
IP address blocks:        2804:3304::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e0:cc:a9:9c:df:8e:c5:f1:77:39:59:43:f5:28:5a:c7:5d:e1:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCEDC4F6280EE1FA438B6EB18E3559ADFFA259B8
        Validity
            Not Before: Apr 17 23:12:39 2023 GMT
            Not After : Apr 15 23:17:39 2024 GMT
        Subject: CN=98DB2EB90F8578E50C7EDA0CD707935BC758820A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:84:4e:7e:35:e6:34:b7:2c:03:b6:4f:49:
                    ed:0e:ee:2c:e8:0f:bf:a9:db:93:03:54:94:3b:0a:
                    d3:3d:05:87:b8:d0:6c:81:43:d3:5d:54:12:4b:a0:
                    6e:b0:9c:0b:0e:b4:5b:9e:ed:5e:a5:69:2b:3c:69:
                    cf:ae:1d:ef:64:67:b5:32:52:88:73:f4:15:3f:a9:
                    11:47:4c:29:12:46:6c:91:f2:80:8e:c3:c6:f2:33:
                    df:29:63:67:02:8a:18:0d:2a:72:90:e0:06:b9:38:
                    58:b2:e7:7c:62:40:0c:26:12:70:ef:f1:11:59:6d:
                    6a:34:1f:fb:09:b2:89:b6:9b:be:cf:f2:f9:4e:8e:
                    51:b6:74:1a:66:9e:46:6d:ae:a4:a0:4a:9f:d3:d9:
                    fe:e3:1d:52:4e:fb:6d:5b:07:96:96:9d:18:ae:87:
                    a8:e2:9f:07:3c:aa:1a:a8:a8:7e:89:71:20:f1:1a:
                    04:e0:32:cb:cc:25:ff:5b:f9:25:47:f2:68:5b:d8:
                    47:34:91:d1:d6:61:15:55:75:51:23:5d:05:f4:cf:
                    d2:99:e1:94:35:75:6b:9f:2a:8e:8e:17:55:11:34:
                    1a:f7:3a:ee:84:63:da:9b:78:f6:1a:00:bc:56:84:
                    48:79:4c:5b:60:25:a6:d1:ad:1f:e8:b3:57:3a:04:
                    fe:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DB:2E:B9:0F:85:78:E5:0C:7E:DA:0C:D7:07:93:5B:C7:58:82:0A
            X509v3 Authority Key Identifier:
                keyid:DC:ED:C4:F6:28:0E:E1:FA:43:8B:6E:B1:8E:35:59:AD:FF:A2:59:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/DCEDC4F6280EE1FA438B6EB18E3559ADFFA259B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCEDC4F6280EE1FA438B6EB18E3559ADFFA259B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a3a2f33322d313238203d3e20323635313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3304::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:ae:d6:25:80:31:e2:a3:ea:f9:29:6c:8d:f3:67:73:d3:74:
         25:9e:1b:14:ba:ee:b0:bf:8e:00:f7:ac:9a:34:90:e2:84:ee:
         fb:bc:ee:62:9a:27:04:0e:d1:66:51:f5:4a:0a:02:41:ef:35:
         1b:fe:95:15:bb:20:e3:57:35:94:07:d1:18:40:8a:a9:6b:6d:
         c2:6e:8b:de:4b:2a:15:2e:4a:ae:c9:97:64:c8:d1:ba:1c:21:
         80:18:f9:3c:37:2c:de:3b:bd:b6:b8:f9:2d:5c:bc:9f:a6:7c:
         79:10:f8:4f:79:fe:cd:e7:27:db:1b:a6:0f:b6:1f:dc:6f:80:
         71:3c:69:3c:b8:7b:86:e9:48:b2:b6:ca:d6:86:48:64:22:e4:
         a5:55:20:4d:00:9e:1c:c4:23:91:e6:4a:a0:11:d8:ee:72:91:
         95:41:5f:f1:55:1d:35:b7:81:9e:9d:f7:49:68:5e:f2:90:eb:
         db:fe:3f:00:38:00:44:11:93:d4:62:d2:3b:2b:59:a8:d1:16:
         ff:b2:a9:16:3e:86:44:0f:31:79:e2:e8:1a:ab:96:35:c1:2d:
         6a:38:6f:80:30:ff:72:67:d3:24:57:54:a5:46:c9:ba:76:71:
         ee:08:54:a8:25:25:93:53:62:29:83:7a:53:94:42:43:03:a1:
         77:58:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org