Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/323830343a336236343a3a2f33322d3432203d3e20323636313436.roa
File:                     323830343a336236343a3a2f33322d3432203d3e20323636313436.roa (raw, json)
Hash identifier:          f1Vq4pPsiexXiVAMYat3ZAc38DGGqNivetf4DgjqgMM=
Subject key identifier:   E7:7A:DF:45:17:C4:32:E2:02:7A:AB:16:72:C7:99:7B:87:9C:62:61
Certificate issuer:       /CN=D013D6CAFF551C6AF6F856674C682771D78090E1
Certificate serial:       63348480EDA94C193907F5FC869130DCC98CC29E
Authority key identifier: D0:13:D6:CA:FF:55:1C:6A:F6:F8:56:67:4C:68:27:71:D7:80:90:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D013D6CAFF551C6AF6F856674C682771D78090E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/323830343a336236343a3a2f33322d3432203d3e20323636313436.roa
Signing time:             Fri 17 Nov 2023 18:15:02 +0000
ROA not before:           Fri 17 Nov 2023 18:10:02 +0000
ROA not after:            Fri 15 Nov 2024 18:15:02 +0000
asID:                     266146
IP address blocks:        2804:3b64::/32 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:34:84:80:ed:a9:4c:19:39:07:f5:fc:86:91:30:dc:c9:8c:c2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D013D6CAFF551C6AF6F856674C682771D78090E1
        Validity
            Not Before: Nov 17 18:10:02 2023 GMT
            Not After : Nov 15 18:15:02 2024 GMT
        Subject: CN=E77ADF4517C432E2027AAB1672C7997B879C6261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:ae:4b:31:cb:0b:81:7d:80:cc:66:ba:f3:
                    d1:8d:a3:7d:b0:ef:f6:a2:bd:5e:64:ed:3a:84:d3:
                    9d:f3:15:d6:07:9f:bd:80:ee:bd:5d:d5:6e:1c:fd:
                    39:ee:1f:52:a5:03:8b:14:11:3e:84:c5:35:ff:5d:
                    88:d5:69:98:18:b5:14:8c:f2:c5:51:ea:15:e2:de:
                    c6:53:9c:55:5b:55:71:01:07:cb:f5:79:d4:4f:48:
                    7b:a9:cc:a1:b5:dd:95:9f:46:42:1a:3c:9a:db:64:
                    2c:42:d7:c8:6c:62:b8:be:38:e8:ea:69:33:3a:57:
                    89:67:97:63:a4:9f:4f:75:fa:0c:c2:e0:1f:9e:ef:
                    f5:9f:56:15:0b:2d:a7:dd:e1:00:33:78:01:0c:f6:
                    2f:f6:79:06:26:cb:a0:cf:81:2e:43:37:79:f2:12:
                    3a:1d:3b:bf:e9:56:66:17:55:37:c7:6c:95:95:b9:
                    aa:96:85:7a:aa:24:8e:a7:4f:c8:b3:34:11:b7:68:
                    2c:2f:5d:32:ea:6e:8e:cf:e2:76:9b:1d:4b:11:48:
                    3b:22:cd:e7:57:37:a4:16:0e:0f:42:69:f4:26:21:
                    a3:41:02:be:0b:70:ec:b0:78:81:5d:15:11:92:5a:
                    6f:0c:91:19:cc:7d:30:4f:e0:00:d6:48:64:93:0d:
                    f1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7A:DF:45:17:C4:32:E2:02:7A:AB:16:72:C7:99:7B:87:9C:62:61
            X509v3 Authority Key Identifier:
                keyid:D0:13:D6:CA:FF:55:1C:6A:F6:F8:56:67:4C:68:27:71:D7:80:90:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/D013D6CAFF551C6AF6F856674C682771D78090E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D013D6CAFF551C6AF6F856674C682771D78090E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/323830343a336236343a3a2f33322d3432203d3e20323636313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b64::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:32:cb:e1:23:32:13:91:d2:c6:c3:15:d4:63:b1:74:17:92:
         28:69:27:f5:09:a4:cb:98:1c:ab:81:7e:2a:07:2c:b1:57:d8:
         b7:8a:20:29:f9:60:84:b2:cc:59:b2:b9:55:e0:16:d2:d5:3b:
         ca:a4:a4:a8:02:88:b4:e2:f9:bb:7f:bd:6a:10:bf:e1:eb:3e:
         90:78:d8:55:80:a8:ff:48:71:77:e0:45:2f:8c:d6:54:0e:1a:
         0c:f7:1f:39:bb:a2:58:98:58:d1:16:19:15:3a:b3:1b:62:56:
         48:f5:da:d9:15:ae:a9:5f:ed:47:4d:71:33:0c:0b:0e:5c:29:
         57:63:8e:f2:93:88:87:9b:bd:8e:20:2c:3a:1a:11:cd:23:d6:
         03:e6:c0:51:bc:dc:cb:dd:cc:bc:b3:f9:66:dd:24:2e:02:91:
         0b:c8:b4:4b:a8:86:d7:00:03:c7:4a:ec:42:e2:20:04:12:bb:
         94:65:aa:1f:25:ea:52:cf:73:3a:ea:55:04:8b:88:02:a0:19:
         2c:2e:a8:6e:4d:66:1b:76:d1:39:ed:56:89:2c:f8:c5:a2:96:
         be:72:c7:32:a4:c6:0e:ce:54:c1:23:40:09:cf:a4:8c:a4:5b:
         ae:b7:c7:bd:f0:04:82:e5:5d:d5:00:f5:a7:d1:7a:bf:47:7f:
         67:89:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org