Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa
File:                     323830343a363435633a3a2f33322d3332203d3e20323639343233.roa (raw, json)
Hash identifier:          HdBNXYxe4pP37n6TF+hvz1xvqtB3h19A49/YOaq+2Mo=
Subject key identifier:   20:FD:08:CF:56:18:EF:B7:66:26:DA:FC:A5:1A:EA:8E:9B:3C:F8:82
Certificate issuer:       /CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
Certificate serial:       1B6CE34CAAF9002909D4C69C52A9134F037A8084
Authority key identifier: D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa
Signing time:             Wed 03 Apr 2024 22:27:39 +0000
ROA not before:           Wed 03 Apr 2024 22:22:39 +0000
ROA not after:            Wed 02 Apr 2025 22:27:39 +0000
asID:                     269423
IP address blocks:        2804:645c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6c:e3:4c:aa:f9:00:29:09:d4:c6:9c:52:a9:13:4f:03:7a:80:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
        Validity
            Not Before: Apr  3 22:22:39 2024 GMT
            Not After : Apr  2 22:27:39 2025 GMT
        Subject: CN=20FD08CF5618EFB76626DAFCA51AEA8E9B3CF882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:f1:25:cb:23:03:88:0b:87:70:a7:37:70:
                    52:1f:27:38:ea:15:13:eb:59:7c:bf:5a:ab:86:39:
                    95:d7:f0:79:49:82:c2:b3:6f:57:37:cd:64:33:bd:
                    8d:a3:36:b4:63:43:b5:dd:5a:1b:a7:b1:32:f1:6d:
                    85:1a:f0:6a:c1:28:1c:24:f1:9c:b4:07:5a:9b:c7:
                    75:d6:7b:8a:e3:0f:f7:74:2b:68:53:4b:10:65:71:
                    17:d7:65:ae:30:74:45:27:87:a0:b2:48:ba:59:74:
                    97:d9:c2:71:91:5f:23:64:e3:8b:e4:6a:c3:79:01:
                    7b:bf:b4:27:34:a8:5e:04:57:f0:b3:80:39:b4:53:
                    63:18:56:b7:16:3a:c2:3f:4e:49:8f:64:22:88:b5:
                    b1:1d:3d:0b:f1:25:28:27:7f:18:21:44:e6:89:3e:
                    c3:4b:95:70:ef:71:5e:40:14:be:d8:62:60:94:aa:
                    42:02:fa:81:cf:d9:e1:63:4e:ed:e5:be:b4:f4:26:
                    83:f6:a4:82:11:c2:6b:a6:54:85:ae:2b:45:84:cf:
                    94:aa:6e:6f:5f:84:4e:a7:5b:1d:a4:e6:64:a3:1a:
                    b2:7f:be:0c:50:46:d0:13:04:65:ba:18:dd:9a:78:
                    cd:71:89:ba:41:a8:09:36:c3:7e:26:90:36:8d:18:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FD:08:CF:56:18:EF:B7:66:26:DA:FC:A5:1A:EA:8E:9B:3C:F8:82
            X509v3 Authority Key Identifier:
                keyid:D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/D037231865C4494DAE0A707D2C8705DFEDDA26FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:645c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:dd:13:03:d8:a7:61:af:ba:5e:f5:05:b9:01:ed:c8:5e:fd:
         e6:55:37:83:bf:32:9c:97:b2:2c:12:0a:1a:20:27:c1:5a:11:
         ec:0e:cd:d1:2a:87:8c:16:a3:03:06:a4:9c:ab:ed:65:a6:56:
         63:01:b1:3a:62:ce:db:28:72:f3:2d:51:d1:13:9a:09:17:f5:
         cd:99:79:78:fb:f5:0a:7f:64:bd:ad:0f:5d:d0:58:26:cd:79:
         10:3d:ed:2e:cc:d3:52:3a:36:b5:de:b5:b1:91:23:20:52:97:
         ab:6f:cf:b0:7d:d6:a6:b3:99:9a:52:89:99:f1:a1:46:ea:f6:
         5b:db:e4:1f:90:b3:7e:57:a7:c4:54:45:04:4a:bc:f2:f8:f9:
         a7:2b:98:98:9a:07:60:db:cb:e7:b0:e1:cf:2c:1c:a7:ce:89:
         9c:a9:e4:dd:c5:12:f1:fb:c6:bb:4e:05:95:dc:f0:3b:ab:09:
         ee:54:53:29:81:ed:22:a4:b9:e4:30:0d:ea:bd:a5:3a:01:e4:
         4a:2d:02:8b:95:28:0b:a9:9d:8a:9b:f5:23:60:82:ad:79:e4:
         85:09:9d:b0:77:2e:b8:93:53:46:fd:92:81:91:4a:3e:66:bd:
         57:7d:fe:ca:9c:9e:1f:24:9a:c5:ad:0b:44:f5:52:e1:62:8a:
         02:36:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org