Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgA1kcYzPg5UB8si64FvWfyzuhsfLn3PfnVKuyPCUvra/0/323830343a386462343a383030303a3a2f33332d3333203d3e20323733333735.roa
File:                     323830343a386462343a383030303a3a2f33332d3333203d3e20323733333735.roa (raw, json)
Hash identifier:          iKtbKjOv4zQIQOp9/Xh7oJCDEQZFcktu1r7hS/M/taE=
Subject key identifier:   E5:39:92:FB:18:D2:A3:8B:CC:99:27:CB:6F:02:90:3E:99:C3:FB:8C
Certificate issuer:       /CN=2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417
Certificate serial:       F2356FC9BA9D3A12AD625D2C0AECB440256AAC
Authority key identifier: 2F:3D:7E:73:9C:4B:F0:33:CE:B8:C7:FE:7B:45:E4:FC:93:46:F4:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgA1kcYzPg5UB8si64FvWfyzuhsfLn3PfnVKuyPCUvra/0/323830343a386462343a383030303a3a2f33332d3333203d3e20323733333735.roa
Signing time:             Mon 20 Nov 2023 20:31:48 +0000
ROA not before:           Mon 20 Nov 2023 20:26:48 +0000
ROA not after:            Mon 18 Nov 2024 20:31:48 +0000
asID:                     273375
IP address blocks:        2804:8db4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f2:35:6f:c9:ba:9d:3a:12:ad:62:5d:2c:0a:ec:b4:40:25:6a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417
        Validity
            Not Before: Nov 20 20:26:48 2023 GMT
            Not After : Nov 18 20:31:48 2024 GMT
        Subject: CN=E53992FB18D2A38BCC9927CB6F02903E99C3FB8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:e1:e6:83:8e:ec:63:df:e1:de:95:01:43:
                    cf:50:11:7b:a3:cb:06:9a:c1:6e:d4:f1:1b:03:9b:
                    c3:0d:d3:bf:8e:8d:f4:c3:48:d0:29:0c:d3:65:22:
                    cd:cf:85:2c:06:ed:ef:d1:85:ad:69:1f:6a:f1:d4:
                    d4:93:48:17:f1:bc:74:aa:63:99:e5:c7:53:e4:cd:
                    17:0c:93:4b:a1:7d:f5:dd:f3:d6:cc:ac:0c:f7:b3:
                    76:ab:9a:14:da:f5:85:83:97:c7:b9:c8:35:11:d3:
                    dc:11:00:b6:df:cd:62:a6:3a:78:aa:ee:0c:07:f5:
                    e0:91:38:ad:d7:9c:b2:99:49:0a:e5:38:ca:05:15:
                    d3:6a:df:f2:e0:d1:7e:52:12:80:01:e3:e8:89:2c:
                    3d:b7:64:44:a2:c7:f3:d1:86:32:61:71:da:17:ae:
                    0c:08:99:dc:91:51:50:bc:29:8c:1c:3e:b6:3f:c2:
                    55:c4:3c:ac:63:0c:70:c9:2d:b8:0e:cd:71:55:16:
                    45:1c:ef:b3:85:88:13:c6:1a:64:20:a5:0f:79:fb:
                    7e:38:0f:8d:f4:69:e4:02:67:90:16:f1:35:43:06:
                    d1:dd:64:80:97:59:68:de:cf:6e:f9:0a:de:91:8a:
                    28:32:d1:b6:ec:9c:6a:e8:2b:f2:e5:0e:1d:de:ee:
                    1f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:39:92:FB:18:D2:A3:8B:CC:99:27:CB:6F:02:90:3E:99:C3:FB:8C
            X509v3 Authority Key Identifier:
                keyid:2F:3D:7E:73:9C:4B:F0:33:CE:B8:C7:FE:7B:45:E4:FC:93:46:F4:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgA1kcYzPg5UB8si64FvWfyzuhsfLn3PfnVKuyPCUvra/0/2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgA1kcYzPg5UB8si64FvWfyzuhsfLn3PfnVKuyPCUvra/0/323830343a386462343a383030303a3a2f33332d3333203d3e20323733333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8db4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         92:c3:14:08:2e:53:7a:e1:7f:70:76:7a:63:c7:56:a6:78:42:
         c1:6a:56:b7:97:c1:42:36:2f:4d:7b:eb:6a:1d:98:cc:03:0f:
         83:e6:18:8c:58:cc:a9:d2:fa:28:89:bd:89:72:49:32:a4:66:
         f0:ba:81:ea:15:77:9c:e6:ea:ae:d8:7f:f9:c1:a7:ef:77:b8:
         93:5e:7d:c6:11:f4:79:bd:64:92:aa:6d:1b:df:4c:6c:f6:65:
         c6:2b:59:7c:58:76:99:02:cf:51:7c:a7:fa:34:10:a7:23:d9:
         5c:ab:9e:7e:fa:12:43:4e:22:c5:5b:cf:f6:e8:88:63:c8:89:
         6e:ad:a4:ad:a9:e9:07:ec:d8:b3:b8:00:a7:84:8f:21:94:41:
         b6:7e:74:18:0f:c4:ac:9e:98:1c:f0:c5:2c:a9:be:53:e8:fa:
         0b:07:5b:ac:b1:59:77:d7:cd:3b:88:53:56:95:21:d6:3b:f3:
         68:5f:ff:5f:46:69:06:45:cc:e6:a4:9e:8b:7c:3b:52:45:25:
         31:12:f1:1a:33:53:d4:d1:a7:34:b7:6b:96:dd:ad:0e:c9:15:
         50:a4:b3:9a:fa:73:b0:70:c5:00:f4:6d:42:47:2e:59:96:8d:
         1c:c8:b1:1f:18:61:09:9e:c7:a7:48:d7:ac:5d:d6:f2:25:b8:
         7c:07:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org