Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a383030303a3a2f33332d3333203d3e203631353834.roa
File:                     323830343a323362383a383030303a3a2f33332d3333203d3e203631353834.roa (raw, json)
Hash identifier:          x1CvrpBhLWnPb7oF/AwEjF7iQixHVS7B+4qAi2Z1FyI=
Subject key identifier:   7B:B3:B0:A1:B6:79:7E:8B:E4:7E:24:9F:A9:40:5D:AF:3E:50:76:9D
Certificate issuer:       /CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
Certificate serial:       4CA725128F961768F73A38498AE4BB185FF72BF9
Authority key identifier: 67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a383030303a3a2f33332d3333203d3e203631353834.roa
Signing time:             Mon 10 Jul 2023 19:06:33 +0000
ROA not before:           Mon 10 Jul 2023 19:01:33 +0000
ROA not after:            Mon 08 Jul 2024 19:06:33 +0000
asID:                     61584
IP address blocks:        2804:23b8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a7:25:12:8f:96:17:68:f7:3a:38:49:8a:e4:bb:18:5f:f7:2b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
        Validity
            Not Before: Jul 10 19:01:33 2023 GMT
            Not After : Jul  8 19:06:33 2024 GMT
        Subject: CN=7BB3B0A1B6797E8BE47E249FA9405DAF3E50769D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:a4:84:02:70:ed:fa:81:a5:b0:30:37:f8:
                    fa:85:02:2f:b4:9c:1c:c0:0f:ab:23:7b:c9:aa:b9:
                    21:8b:d4:7b:13:ab:9b:5b:5f:2e:a0:db:fe:15:7c:
                    85:dd:1b:84:c2:ad:08:5d:68:f2:9d:b0:cd:1b:32:
                    bc:5a:6f:70:ad:60:b8:14:02:37:64:dd:3e:5f:92:
                    cd:df:ac:ea:00:b1:a7:db:90:60:76:ae:07:42:bc:
                    df:53:ef:01:39:26:cf:01:5a:03:95:7b:4e:84:43:
                    c8:50:7d:aa:f0:c0:c4:a0:9d:c4:90:13:3a:de:5e:
                    a2:67:21:63:9f:61:c5:49:02:85:97:32:15:e7:35:
                    92:6a:ef:05:6d:55:6c:67:64:4d:bd:5e:8f:60:01:
                    2c:30:ba:f9:f0:b4:fc:a6:69:0d:b8:da:bf:dd:54:
                    9d:10:00:38:0a:56:db:39:e0:2e:2f:91:d8:84:4f:
                    b0:b2:58:10:ea:c2:52:af:1c:2b:6a:f3:33:32:45:
                    d1:1a:ef:8f:42:06:4e:3c:ac:13:25:81:7c:70:af:
                    20:70:69:4f:3d:64:7f:79:11:4c:e7:d9:59:ef:3d:
                    46:de:24:b7:4f:b0:63:aa:6c:cb:c6:c2:67:47:58:
                    ae:14:33:79:c4:48:60:dd:91:48:da:8d:d8:d8:90:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B3:B0:A1:B6:79:7E:8B:E4:7E:24:9F:A9:40:5D:AF:3E:50:76:9D
            X509v3 Authority Key Identifier:
                keyid:67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a383030303a3a2f33332d3333203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23b8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:48:99:00:6b:c8:45:3d:48:d2:89:ab:6c:41:d7:63:ee:44:
         5f:e3:7b:99:9d:ec:bf:73:22:dd:92:ed:33:fc:26:a0:bb:c4:
         4f:74:82:82:ed:ac:8e:63:a1:8e:a3:02:b6:eb:22:bb:1f:7d:
         bd:d3:84:00:cd:16:99:41:9e:e7:de:70:a4:88:4b:7d:9f:df:
         f8:fd:2d:31:3d:0a:ac:03:0e:e1:11:d7:cc:a4:94:70:51:32:
         47:8b:96:41:cc:2f:ed:e7:dc:a7:76:c8:6b:6a:74:f5:dc:a4:
         c3:05:f9:11:bb:f2:77:0c:99:83:89:57:2a:08:01:69:70:d1:
         40:47:9b:1a:b8:ea:21:be:c1:08:a1:52:13:f5:ef:88:cb:57:
         be:c2:ec:6c:a6:cc:3f:71:07:0b:6e:95:32:65:1c:57:26:ef:
         3e:a5:a9:c4:ed:af:23:fe:e8:23:7a:94:ee:fd:75:ca:2a:3d:
         3d:34:9c:44:e3:7f:fa:74:55:90:c0:07:62:20:14:4d:6d:e1:
         81:e2:a1:10:29:78:76:95:1e:77:26:72:02:bd:f8:bc:ae:e0:
         23:6f:96:e4:60:23:8b:47:f6:ba:a9:f2:c6:a5:81:83:55:19:
         49:9c:99:0b:70:a1:bc:e9:2d:b4:f9:fe:3a:96:eb:e7:6e:01:
         a7:fa:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org