Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/323830343a323938383a3a2f33332d3334203d3e20323634303230.roa
File:                     323830343a323938383a3a2f33332d3334203d3e20323634303230.roa (raw, json)
Hash identifier:          2i0pWEgpiWXzf9CF6FPas7s+9ODb70C316mrjZm8+Y0=
Subject key identifier:   94:9D:AE:07:D2:83:23:DB:76:47:3B:3A:47:8D:3B:93:EF:0F:E6:59
Certificate issuer:       /CN=67491EDA76E398AB01F0CC6CD7474F33F5D99A5B
Certificate serial:       04E424BCF02CC41DD72C94526D4C2348961B9BBE
Authority key identifier: 67:49:1E:DA:76:E3:98:AB:01:F0:CC:6C:D7:47:4F:33:F5:D9:9A:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/323830343a323938383a3a2f33332d3334203d3e20323634303230.roa
Signing time:             Tue 16 May 2023 12:29:23 +0000
ROA not before:           Tue 16 May 2023 12:24:23 +0000
ROA not after:            Tue 14 May 2024 12:29:23 +0000
asID:                     264020
IP address blocks:        2804:2988::/33 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e4:24:bc:f0:2c:c4:1d:d7:2c:94:52:6d:4c:23:48:96:1b:9b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67491EDA76E398AB01F0CC6CD7474F33F5D99A5B
        Validity
            Not Before: May 16 12:24:23 2023 GMT
            Not After : May 14 12:29:23 2024 GMT
        Subject: CN=949DAE07D28323DB76473B3A478D3B93EF0FE659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:b6:25:47:b8:70:d2:95:16:cc:b2:65:d4:
                    1b:88:a8:26:bd:1b:cb:74:a6:8a:e9:63:4b:8a:6c:
                    79:09:ce:60:b4:4c:3d:a4:f6:c1:95:54:e3:ed:f3:
                    23:99:f9:0b:93:24:6a:68:d5:8d:a1:03:fb:c7:0f:
                    d5:52:7e:f4:a9:dd:85:82:92:f2:99:fe:d3:e1:b7:
                    3a:1a:5d:ac:27:af:8e:16:16:8f:37:25:4e:74:cf:
                    1c:70:7b:c5:c9:3a:7e:3f:30:a9:50:d9:17:10:ac:
                    0d:a5:8d:3a:88:31:c5:b4:52:6a:2b:1c:3e:f2:f8:
                    cd:1d:e2:70:33:b8:7c:b7:38:bb:19:e8:f8:2b:e6:
                    dc:1e:a5:96:24:63:cb:80:47:6d:3e:c8:38:8f:e1:
                    14:9f:82:59:e4:c4:b0:6d:a7:39:05:fe:5e:88:a3:
                    98:f7:6b:1b:7e:0c:c3:d7:91:22:a4:c3:5b:bf:03:
                    dc:b8:33:4c:e1:d9:7e:9a:74:97:0b:0f:65:b5:39:
                    8c:5d:32:e3:74:78:97:10:f3:9b:9b:6e:8f:68:cc:
                    cc:27:ce:52:9c:4e:bb:81:fa:39:4d:7a:51:ed:52:
                    2f:ec:2b:6d:cf:96:a6:78:15:a7:b7:52:a2:6b:13:
                    71:58:ab:20:cb:d1:f0:c8:fb:6f:95:bb:f4:0c:2a:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9D:AE:07:D2:83:23:DB:76:47:3B:3A:47:8D:3B:93:EF:0F:E6:59
            X509v3 Authority Key Identifier:
                keyid:67:49:1E:DA:76:E3:98:AB:01:F0:CC:6C:D7:47:4F:33:F5:D9:9A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/323830343a323938383a3a2f33332d3334203d3e20323634303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2988::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:64:fb:36:26:25:9a:1f:1c:82:dc:5c:00:05:01:d2:44:c5:
         ff:50:53:d7:48:ab:1b:07:cb:d3:0f:e9:f4:20:b7:63:bf:e6:
         8a:bb:ae:84:88:7e:b3:7e:d7:85:f7:26:e3:36:b9:6e:ed:bd:
         0e:bc:d5:5f:1e:59:9f:ce:2a:c4:8a:e2:0f:6f:64:ea:97:8b:
         8b:35:78:12:6d:be:ee:74:e2:02:76:e2:7f:3f:8f:1d:b1:dd:
         d9:0b:0b:a7:41:0d:53:5b:91:50:4c:0b:2e:6f:81:82:47:d4:
         07:0e:17:eb:45:f3:8d:3e:82:38:0f:fc:16:42:d7:7b:bf:32:
         1d:88:19:00:94:87:62:62:97:d5:44:4f:d0:4d:93:40:c1:1c:
         97:37:c0:e8:20:2c:b2:8b:a0:df:c5:e7:57:d0:25:94:3e:89:
         e5:67:d0:f4:40:e7:97:aa:5a:00:8c:e6:ab:ef:09:c7:b5:ee:
         66:a0:40:77:d1:58:af:75:aa:f6:49:4c:71:30:3c:18:c5:d3:
         fe:ce:7a:1f:6a:a5:74:13:c8:97:ab:9a:39:3e:78:9e:09:71:
         2b:ad:88:4d:96:90:27:12:cc:00:12:ff:50:27:42:8c:1e:62:
         b1:db:fb:60:d3:01:12:f8:1e:48:02:84:00:ef:24:75:96:4f:
         0e:9a:8b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org