Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a383030303a3a2f33332d3333203d3e20323634323432.roa
File:                     323830343a323463633a383030303a3a2f33332d3333203d3e20323634323432.roa (raw, json)
Hash identifier:          9vWNEoIevDmJTEPXy9x+PtNAEzz5iH2AsDfCVH3fV/o=
Subject key identifier:   B2:F2:58:AF:A3:55:85:50:20:FC:8B:89:63:8F:46:04:6E:2B:26:3F
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       216CA7C041E8DBCB4CADA6A5E4298DB93714846D
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a383030303a3a2f33332d3333203d3e20323634323432.roa
Signing time:             Sun 23 Jul 2023 00:08:24 +0000
ROA not before:           Sun 23 Jul 2023 00:03:24 +0000
ROA not after:            Sun 21 Jul 2024 00:08:24 +0000
asID:                     264242
IP address blocks:        2804:24cc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6c:a7:c0:41:e8:db:cb:4c:ad:a6:a5:e4:29:8d:b9:37:14:84:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 23 00:03:24 2023 GMT
            Not After : Jul 21 00:08:24 2024 GMT
        Subject: CN=B2F258AFA355855020FC8B89638F46046E2B263F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:66:9e:92:09:9d:53:7c:a4:01:a8:95:82:7f:
                    4f:7b:23:e7:cc:93:ec:29:c5:ad:45:db:c1:7e:c0:
                    11:c4:0f:e1:c0:d4:28:d2:47:1d:da:05:f8:16:dc:
                    65:d9:32:38:a6:0f:b0:ed:32:fe:c0:7b:95:d9:ad:
                    a3:50:6c:c2:10:bf:34:f8:d7:bf:15:d7:97:17:8a:
                    9e:a5:69:b8:bf:1a:11:36:e7:c4:58:28:97:0a:9f:
                    c8:2d:e4:ea:57:31:99:52:94:6b:de:e9:cf:97:30:
                    f1:8c:e0:a0:6e:3f:80:9a:2f:ad:ff:c3:d0:76:38:
                    02:e7:8f:f2:45:aa:ce:86:6f:5c:93:1d:9d:54:62:
                    c0:a5:bc:e8:9a:f7:d0:84:b0:f9:ce:07:a5:7c:54:
                    05:4e:3b:f6:62:fa:b8:83:5b:a3:96:43:90:96:9c:
                    70:fb:df:2a:3d:0d:fa:30:2e:60:2c:7b:7a:1c:c8:
                    9f:a2:fe:c4:fe:42:35:40:42:36:cd:68:8b:22:c3:
                    23:f5:7c:09:9a:1d:3d:a0:40:35:e5:8d:63:e8:02:
                    e4:5f:95:be:a3:c4:0c:a8:94:c6:d8:f1:66:81:95:
                    67:e8:62:6f:92:cd:1c:cc:80:61:14:61:60:04:ea:
                    38:19:0b:f8:f6:76:ce:0f:08:42:a0:35:d5:24:f9:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F2:58:AF:A3:55:85:50:20:FC:8B:89:63:8F:46:04:6E:2B:26:3F
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a383030303a3a2f33332d3333203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         04:13:ce:15:7e:02:0b:b8:14:be:ce:01:cd:f8:24:4d:33:5f:
         56:98:81:bb:bb:59:14:b2:24:40:21:20:4c:c9:11:df:5e:4f:
         d1:61:63:b0:59:79:8b:f8:57:b2:35:b9:f8:93:a1:f1:e0:75:
         28:e3:35:59:d4:ce:aa:e6:6f:1c:b7:a9:d6:de:5e:64:78:c3:
         91:09:28:60:5e:9c:88:ba:cf:19:99:2a:86:3b:d3:b1:a2:18:
         7b:cb:72:e5:aa:ea:fd:87:72:d3:40:e7:ea:59:9f:aa:2e:27:
         0c:8b:c4:da:0e:bc:05:a9:d2:12:82:56:6a:90:37:ed:c6:0c:
         90:40:c0:3e:22:9a:5e:dc:dc:6b:51:72:8c:ce:00:a0:58:9d:
         bf:32:ff:b8:fc:28:2a:68:12:6c:bb:3d:8a:21:c5:02:d5:9f:
         bd:ff:db:a6:8d:68:77:ea:2e:3a:ab:14:48:a4:10:b1:08:15:
         0f:6c:c3:a5:98:0e:bb:41:49:8e:4e:00:7f:ed:1a:15:64:9e:
         86:cf:98:d2:12:99:41:e9:0e:89:57:52:0c:fa:66:b8:65:40:
         48:9c:6e:d7:cd:03:61:52:9a:f1:e7:6f:01:a5:3c:4c:f8:3f:
         7e:85:2b:24:f7:04:b3:ea:55:60:8d:f1:11:6d:ac:62:21:db:
         cf:63:2c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org