Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/323830343a363435633a383030303a3a2f33332d3333203d3e20323639343233.roa
File:                     323830343a363435633a383030303a3a2f33332d3333203d3e20323639343233.roa (raw, json)
Hash identifier:          uOTv2omia9vXYJRSXpYd++LeHtwy2VmLz7H4/MyZmKg=
Subject key identifier:   08:99:92:65:D9:51:F4:B8:75:46:AB:DC:3C:D2:80:5F:30:AA:CD:6E
Certificate issuer:       /CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
Certificate serial:       23B0F05FD10C43E48A3C27BB8DFFBAF14E4CF121
Authority key identifier: D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/323830343a363435633a383030303a3a2f33332d3333203d3e20323639343233.roa
Signing time:             Wed 03 Apr 2024 22:27:40 +0000
ROA not before:           Wed 03 Apr 2024 22:22:40 +0000
ROA not after:            Wed 02 Apr 2025 22:27:40 +0000
asID:                     269423
IP address blocks:        2804:645c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b0:f0:5f:d1:0c:43:e4:8a:3c:27:bb:8d:ff:ba:f1:4e:4c:f1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
        Validity
            Not Before: Apr  3 22:22:40 2024 GMT
            Not After : Apr  2 22:27:40 2025 GMT
        Subject: CN=08999265D951F4B87546ABDC3CD2805F30AACD6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:da:9c:81:a8:07:1f:16:01:62:91:de:e2:53:
                    8a:fb:86:e0:90:24:f0:b6:9f:0a:21:e3:95:b8:87:
                    94:43:97:9a:43:0d:dd:f9:57:bd:2e:fb:cd:82:17:
                    c3:bf:91:3d:51:3f:c5:c8:66:24:19:a3:95:51:b1:
                    f9:8f:6d:9b:ce:04:96:d1:90:96:9c:16:21:91:fb:
                    06:e9:34:da:03:a4:08:11:9b:2b:f3:ac:11:2b:65:
                    ae:01:cb:e3:df:02:6b:08:41:89:24:fb:5e:94:ab:
                    97:d2:68:a0:24:88:91:a2:d8:e9:14:d7:da:df:47:
                    1b:78:30:d4:26:e6:04:55:8a:b9:ec:34:9c:b5:a3:
                    f2:cf:75:da:00:04:9c:42:11:a9:6d:5d:94:68:2a:
                    71:ad:e4:38:58:31:de:c6:21:ff:ae:8e:35:97:d8:
                    6e:11:af:fb:e3:2c:5d:45:47:3a:5c:db:ab:59:87:
                    39:d7:69:d9:c2:fe:51:a6:aa:53:d6:c0:b7:75:cd:
                    10:b0:be:4a:8b:48:cf:e3:bb:7e:3c:86:8e:e6:56:
                    49:f3:02:5c:fd:76:c2:e3:4d:1b:b4:f7:d0:57:72:
                    3a:0d:41:75:a1:5e:5e:69:44:00:e7:ce:cb:0d:c6:
                    a5:76:5a:2b:fc:01:dd:46:48:42:76:3f:ae:5b:75:
                    2b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:99:92:65:D9:51:F4:B8:75:46:AB:DC:3C:D2:80:5F:30:AA:CD:6E
            X509v3 Authority Key Identifier:
                keyid:D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/D037231865C4494DAE0A707D2C8705DFEDDA26FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/323830343a363435633a383030303a3a2f33332d3333203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:645c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:7e:fc:40:53:7b:d3:c2:38:bd:5e:02:ea:9a:f6:e2:95:
         e0:59:3e:71:1f:89:41:07:ea:05:5f:30:cb:2a:08:6b:63:69:
         98:b1:e7:72:79:c8:bd:a0:73:e8:ec:39:40:9b:28:b2:0c:36:
         ea:99:e2:97:a1:0b:15:c3:85:75:9b:c4:3d:cb:b9:b1:54:cc:
         0b:94:d9:91:85:de:58:c2:40:ed:cc:4a:ba:31:d6:7e:cb:c2:
         4f:79:4f:6e:e9:8e:5d:e4:c9:c4:34:f3:bb:7a:38:9d:0a:ff:
         73:3f:ff:d3:80:c6:a5:f1:c0:fa:bb:4c:a4:3f:26:6c:39:4b:
         a4:21:fa:6e:f8:5e:75:b8:06:35:b2:e0:ec:85:3f:35:de:c6:
         d1:fa:57:9a:6a:97:59:2c:76:e8:cc:cd:ef:9b:83:1f:ad:c7:
         52:c4:6e:0e:eb:1e:7c:95:73:31:c3:95:32:98:59:df:ae:94:
         c2:b7:9a:64:48:22:89:65:f5:1c:5a:df:7a:28:7e:59:e8:04:
         2c:d8:ee:d0:b0:b6:6f:9b:4b:43:68:db:16:d6:ff:96:52:37:
         7c:a5:c7:07:82:90:44:8e:f6:31:ec:c5:97:5e:25:e7:05:fb:
         7f:19:a2:4c:1c:67:51:b0:76:07:c5:17:05:8f:d9:5e:cd:b6:
         35:03:9b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org