Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgA1kcYzPg5UB8si64FvWfyzuhsfLn3PfnVKuyPCUvra/0/323830343a386462343a3a2f33322d3332203d3e20323733333735.roa
File:                     323830343a386462343a3a2f33322d3332203d3e20323733333735.roa (raw, json)
Hash identifier:          s3Sy3I3C5mGkrj9pzTdLFL3SNIi+jBv0OWr17Jv6n6Q=
Subject key identifier:   A9:E9:57:A2:9F:E3:14:5B:AD:87:C7:4A:C9:DF:67:A6:88:40:44:B0
Certificate issuer:       /CN=2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417
Certificate serial:       17D3CDA5E59C621A14C6297DCA6BB66B69B08CF1
Authority key identifier: 2F:3D:7E:73:9C:4B:F0:33:CE:B8:C7:FE:7B:45:E4:FC:93:46:F4:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgA1kcYzPg5UB8si64FvWfyzuhsfLn3PfnVKuyPCUvra/0/323830343a386462343a3a2f33322d3332203d3e20323733333735.roa
Signing time:             Mon 20 Nov 2023 20:18:05 +0000
ROA not before:           Mon 20 Nov 2023 20:13:05 +0000
ROA not after:            Mon 18 Nov 2024 20:18:05 +0000
asID:                     273375
IP address blocks:        2804:8db4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d3:cd:a5:e5:9c:62:1a:14:c6:29:7d:ca:6b:b6:6b:69:b0:8c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417
        Validity
            Not Before: Nov 20 20:13:05 2023 GMT
            Not After : Nov 18 20:18:05 2024 GMT
        Subject: CN=A9E957A29FE3145BAD87C74AC9DF67A6884044B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:ee:44:90:40:0e:1b:ec:1b:cb:62:22:c6:
                    e5:bd:e5:7c:9e:e7:f0:d2:5c:ce:80:05:89:92:bc:
                    c8:f8:58:c6:fa:5a:a5:c8:fd:0a:0f:62:fe:5f:b5:
                    de:b0:98:ed:1a:33:cb:8f:f2:ae:f3:02:ff:35:53:
                    33:a9:56:36:3e:f4:96:fb:97:dd:31:99:28:99:4c:
                    e7:29:e9:2e:de:ce:42:36:74:8a:f9:04:c8:f7:78:
                    b5:6a:4b:03:b6:85:e8:b8:90:73:61:a7:96:fd:51:
                    80:19:48:ac:a8:c3:ac:a4:2c:e1:7c:ea:86:17:b1:
                    2f:47:34:94:f1:e5:dd:bf:7b:6f:8d:3d:88:1a:cd:
                    fc:7f:0a:f7:59:ed:dc:10:ca:d8:3d:2e:1a:b7:eb:
                    24:93:31:ff:9e:42:43:58:4a:21:cc:a5:85:e3:27:
                    8b:c3:f4:8a:00:ea:ed:ee:46:a0:e9:e6:b3:91:ca:
                    b3:98:7e:9c:da:00:5f:42:df:50:0c:9d:bf:14:8f:
                    6d:5a:b9:64:12:46:65:50:89:84:20:29:46:db:f4:
                    d2:b3:30:4f:7a:34:0a:49:ba:ca:c9:86:47:d2:1f:
                    03:0b:53:aa:47:a9:1e:58:f4:8b:01:2a:95:e0:f6:
                    89:85:24:d4:8a:78:21:ab:e1:72:3c:92:a3:b2:78:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E9:57:A2:9F:E3:14:5B:AD:87:C7:4A:C9:DF:67:A6:88:40:44:B0
            X509v3 Authority Key Identifier:
                keyid:2F:3D:7E:73:9C:4B:F0:33:CE:B8:C7:FE:7B:45:E4:FC:93:46:F4:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgA1kcYzPg5UB8si64FvWfyzuhsfLn3PfnVKuyPCUvra/0/2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F3D7E739C4BF033CEB8C7FE7B45E4FC9346F417.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgA1kcYzPg5UB8si64FvWfyzuhsfLn3PfnVKuyPCUvra/0/323830343a386462343a3a2f33322d3332203d3e20323733333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8db4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:35:62:d5:38:60:9b:cc:05:d1:97:1d:08:24:3a:24:59:ae:
         92:4a:28:6c:d9:d4:29:3e:45:a8:be:48:e4:5d:44:51:8d:3f:
         1e:0a:eb:ea:48:93:ca:68:2a:c7:00:4c:bb:03:46:b4:3c:01:
         3b:80:43:af:b9:2f:df:d1:38:ef:d0:82:bf:91:70:4b:99:39:
         56:5f:ff:5f:0e:c1:db:b2:11:22:e2:1f:c0:0b:d6:b0:97:3b:
         a2:bb:ee:55:ad:de:3d:ff:cf:ee:4d:b3:b7:88:df:1b:c5:c4:
         14:e4:3a:1f:1c:36:bb:bc:9e:83:1d:46:71:20:56:22:4b:09:
         c7:13:45:5d:61:05:52:cb:1d:34:ae:36:dc:6e:65:e5:4b:8e:
         c1:11:c7:fa:b1:88:a5:7a:a3:5e:18:66:b1:7a:a5:3b:12:b4:
         12:2c:83:ad:af:74:2d:a6:a9:01:b4:61:1e:71:c2:3d:70:d8:
         f9:a3:f6:3d:1c:7f:eb:88:09:7d:fb:ee:2e:e3:23:51:a1:99:
         81:ea:d8:33:43:f4:93:ce:c7:22:63:25:92:0e:eb:6c:e9:bb:
         17:b0:27:15:81:97:c2:75:19:e1:87:3b:3b:14:5f:12:c1:74:
         db:e1:48:6c:7c:ce:f4:e5:21:91:81:e1:d5:b8:2c:9d:83:08:
         51:1b:98:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org