Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a383030303a3a2f33332d3333203d3e20323639363635.roa
File:                     323830343a363830343a383030303a3a2f33332d3333203d3e20323639363635.roa (raw, json)
Hash identifier:          fvaOKoeNYPzR8BhyPlAF008Bj/izgQIkEfkRiTup8Rg=
Subject key identifier:   2D:1E:C8:A9:2F:3A:C2:D9:E0:DE:05:A2:89:5E:07:D8:22:0B:7C:4D
Certificate issuer:       /CN=01E1936D951009EDC365E2731189930C5096C583
Certificate serial:       7C6FBFA17D0127C810E56E8AA7CEF18118A767A8
Authority key identifier: 01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a383030303a3a2f33332d3333203d3e20323639363635.roa
Signing time:             Mon 04 Sep 2023 17:51:00 +0000
ROA not before:           Mon 04 Sep 2023 17:46:00 +0000
ROA not after:            Mon 02 Sep 2024 17:51:00 +0000
asID:                     269665
IP address blocks:        2804:6804:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6f:bf:a1:7d:01:27:c8:10:e5:6e:8a:a7:ce:f1:81:18:a7:67:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01E1936D951009EDC365E2731189930C5096C583
        Validity
            Not Before: Sep  4 17:46:00 2023 GMT
            Not After : Sep  2 17:51:00 2024 GMT
        Subject: CN=2D1EC8A92F3AC2D9E0DE05A2895E07D8220B7C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:28:bc:dc:ae:fb:42:53:71:bc:8d:c3:fb:8b:
                    9f:fb:cd:99:0b:eb:9c:ef:85:94:dc:64:2b:df:9c:
                    e6:7a:5b:f8:26:68:ce:e5:14:62:de:ff:c0:77:15:
                    ba:d5:94:76:15:67:59:24:e1:48:47:89:e3:db:0c:
                    ff:27:92:71:2f:ec:e3:00:d2:ed:73:64:a0:ef:58:
                    80:34:9a:7c:7b:05:62:94:43:82:62:6a:d7:48:f9:
                    4d:69:56:c4:82:2b:35:20:e3:8f:27:13:c2:bd:fc:
                    4f:62:18:b1:c6:00:89:de:08:e9:48:75:67:09:7c:
                    2c:cb:e9:12:09:52:fb:1b:b5:ac:4b:1b:f4:6a:73:
                    a2:18:c2:b6:0f:11:54:fc:b2:0e:fa:5e:37:04:91:
                    32:65:fe:d9:fe:40:67:ed:45:9a:57:c1:ed:c1:7f:
                    d8:49:58:5d:b7:e6:ec:68:24:0f:0e:e2:51:8b:78:
                    a7:08:4c:17:c7:2e:3f:d2:62:3b:f4:3c:90:28:0b:
                    7e:97:d8:23:77:92:be:dd:12:fd:94:02:d6:f1:57:
                    53:24:47:a9:59:1b:56:2c:b8:73:88:4c:b7:ff:dc:
                    bc:22:c5:ab:74:ab:11:a1:3b:8f:7e:0d:48:09:c2:
                    c4:29:bc:41:77:da:9c:09:ce:56:44:e0:2d:e5:f0:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1E:C8:A9:2F:3A:C2:D9:E0:DE:05:A2:89:5E:07:D8:22:0B:7C:4D
            X509v3 Authority Key Identifier:
                keyid:01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/01E1936D951009EDC365E2731189930C5096C583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a383030303a3a2f33332d3333203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6804:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a6:97:6c:27:a4:17:16:72:e3:99:23:7a:6a:0b:84:cc:2c:ca:
         9d:6c:64:87:a1:50:f6:1f:3f:12:32:f5:38:a3:6c:d4:9c:ba:
         c2:2d:6b:93:b7:58:25:f2:7e:fa:3c:b3:aa:c2:f2:23:cb:69:
         74:ea:48:cc:9b:0d:71:7f:84:39:ad:05:73:ec:b5:15:2f:cc:
         06:53:8f:05:63:e8:64:75:cb:04:ce:86:34:6e:e3:14:9d:70:
         8e:4d:6b:29:3c:6a:92:e1:2f:85:57:1f:ec:cd:29:7d:46:f3:
         e5:bf:a7:02:2b:49:b9:c0:f0:44:bc:f2:e7:c6:62:b9:a2:d5:
         c7:e1:c7:f9:8c:f9:b3:e4:44:0a:82:a8:7c:ae:cd:0f:bf:8a:
         ce:1b:9c:50:2e:bf:00:54:52:21:a7:34:76:fe:c9:74:91:62:
         c4:5e:0a:2e:8f:1c:7f:b1:fa:6e:c8:cc:99:b9:16:99:89:40:
         65:e7:22:8e:10:42:94:a8:a3:3f:4c:1b:84:76:00:98:c3:17:
         ab:92:cd:3a:cb:95:b1:01:0a:5a:31:9e:0f:85:96:62:b7:ee:
         c2:35:6a:e8:60:87:2e:11:42:50:99:6e:5c:aa:bf:03:97:3b:
         aa:6d:de:5f:bf:d5:41:5c:6d:16:a8:7b:5f:e3:23:55:ef:25:
         d4:cd:c0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org