Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/323830343a383037343a3a2f33322d3335203d3e20323731373531.roa
File:                     323830343a383037343a3a2f33322d3335203d3e20323731373531.roa (raw, json)
Hash identifier:          qPlzukgJjMjdcwXwD7cmwdNo9ikKn7z2xELC/1fi/cc=
Subject key identifier:   F8:AE:AB:E5:5E:0F:1E:D9:EA:85:EC:D0:8E:90:59:0F:88:C5:48:DC
Certificate issuer:       /CN=D7CECD4025A2731E62E96333D09FB4C510D5C76D
Certificate serial:       42BD5FD9B35D3B00CEDF56DC91790C0258D7E79F
Authority key identifier: D7:CE:CD:40:25:A2:73:1E:62:E9:63:33:D0:9F:B4:C5:10:D5:C7:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/323830343a383037343a3a2f33322d3335203d3e20323731373531.roa
Signing time:             Tue 07 Nov 2023 16:19:19 +0000
ROA not before:           Tue 07 Nov 2023 16:14:19 +0000
ROA not after:            Tue 05 Nov 2024 16:19:19 +0000
asID:                     271751
IP address blocks:        2804:8074::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bd:5f:d9:b3:5d:3b:00:ce:df:56:dc:91:79:0c:02:58:d7:e7:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7CECD4025A2731E62E96333D09FB4C510D5C76D
        Validity
            Not Before: Nov  7 16:14:19 2023 GMT
            Not After : Nov  5 16:19:19 2024 GMT
        Subject: CN=F8AEABE55E0F1ED9EA85ECD08E90590F88C548DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:87:41:ac:c6:cb:9f:3c:55:a8:5a:08:7b:
                    6a:3a:cd:14:5d:28:f0:c7:4d:74:26:3f:0b:93:4b:
                    22:10:fe:b8:11:38:05:5a:dc:dc:af:28:e3:54:94:
                    d6:2d:1c:14:3b:f6:6c:03:93:51:41:2c:bc:d7:39:
                    39:49:f6:74:b9:bf:7a:ed:e3:54:fb:0d:dd:0e:08:
                    f5:b0:80:e0:7f:03:c1:24:33:b3:3b:45:50:fc:58:
                    47:15:ce:f8:92:2a:a3:eb:a5:aa:a2:16:a5:66:4f:
                    ae:69:7a:bf:9a:69:5c:6d:c1:19:2d:a8:4f:a8:79:
                    f3:6a:fc:f6:09:6b:d4:89:ba:e7:bf:1b:d2:4b:ae:
                    f0:72:10:c2:17:2e:91:b4:e9:0d:76:eb:11:f1:da:
                    8a:39:59:69:84:92:ad:f0:93:a3:11:7d:3b:6f:dc:
                    ed:4f:31:5b:b4:df:46:d1:07:ad:c5:53:8d:f9:ae:
                    3c:ca:24:2b:e5:fe:3e:70:de:ee:7e:ec:56:29:59:
                    cd:da:fc:8c:59:46:13:3d:bd:24:25:1a:c0:cf:32:
                    6e:a2:15:ce:df:d4:47:22:db:fd:d8:73:71:32:a7:
                    95:7a:bb:24:d9:e8:1d:95:d9:28:45:e7:93:72:68:
                    a7:3a:39:d8:df:cb:82:13:ad:d5:86:65:29:ae:01:
                    4d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AE:AB:E5:5E:0F:1E:D9:EA:85:EC:D0:8E:90:59:0F:88:C5:48:DC
            X509v3 Authority Key Identifier:
                keyid:D7:CE:CD:40:25:A2:73:1E:62:E9:63:33:D0:9F:B4:C5:10:D5:C7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/323830343a383037343a3a2f33322d3335203d3e20323731373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8074::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:de:3b:72:77:90:a7:9f:f9:d5:db:b9:be:d7:e5:61:10:d2:
         d6:b8:5a:ea:03:3d:c1:ce:dd:f9:90:8f:0b:29:33:43:39:b7:
         8f:13:4d:9b:87:af:e4:cf:1c:95:ba:10:47:cb:34:63:4a:58:
         a9:99:88:76:e7:a7:1d:93:bc:35:63:b6:99:56:a0:6e:33:84:
         0d:4a:95:fa:a9:0c:7f:5e:21:2e:a3:a0:74:f7:2c:fc:b4:0d:
         ed:42:2a:80:65:8e:57:67:dc:7d:71:5b:ee:ad:9f:1d:d3:cb:
         fc:bd:1a:a8:d0:8f:9c:2c:38:c9:40:61:d9:78:50:d1:ab:be:
         39:11:a5:74:fa:ae:1a:2d:f7:0f:17:bf:f6:f5:49:f8:a5:6f:
         67:0a:a6:ac:ae:8e:d3:a5:eb:e1:0f:f6:ab:6d:e9:e5:2b:9d:
         5d:ca:f3:f4:77:db:d4:a1:2d:79:cb:97:34:d3:06:98:8b:9b:
         93:bf:b6:5f:1c:8d:a5:1a:1e:5a:ee:5b:52:33:b5:cb:f8:6e:
         ef:3d:a8:c0:56:5b:28:aa:69:70:2d:05:4e:a9:ea:60:85:c5:
         e0:6d:a8:40:da:fc:2d:a3:05:0c:da:26:f8:60:85:16:34:e5:
         09:0a:78:93:39:92:25:51:e3:fb:9c:63:e6:4a:bc:d5:04:e8:
         18:9f:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org