Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a3a2f33332d3333203d3e20323639353234.roa
File:                     323830343a363566303a3a2f33332d3333203d3e20323639353234.roa (raw, json)
Hash identifier:          qYqHWwvuPNwPv6MHoIyu7TwbeduOVkiG5P4fruwama4=
Subject key identifier:   68:BB:CA:05:A2:4C:A6:C8:62:5E:F6:6B:5E:2E:D7:3F:CD:C7:D4:59
Certificate issuer:       /CN=5CFD4BD8357F505D6CB1A47E9C153D57129592B6
Certificate serial:       476959DE6021B16AF0CE058E0B83AAA4F9A124E3
Authority key identifier: 5C:FD:4B:D8:35:7F:50:5D:6C:B1:A4:7E:9C:15:3D:57:12:95:92:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a3a2f33332d3333203d3e20323639353234.roa
Signing time:             Mon 08 Apr 2024 17:09:33 +0000
ROA not before:           Mon 08 Apr 2024 17:04:33 +0000
ROA not after:            Mon 07 Apr 2025 17:09:33 +0000
asID:                     269524
IP address blocks:        2804:65f0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:69:59:de:60:21:b1:6a:f0:ce:05:8e:0b:83:aa:a4:f9:a1:24:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFD4BD8357F505D6CB1A47E9C153D57129592B6
        Validity
            Not Before: Apr  8 17:04:33 2024 GMT
            Not After : Apr  7 17:09:33 2025 GMT
        Subject: CN=68BBCA05A24CA6C8625EF66B5E2ED73FCDC7D459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:01:08:e1:64:57:63:fa:4a:fa:12:3e:b9:fb:
                    73:18:25:13:5f:06:30:8b:1c:d0:a7:ed:0a:2e:81:
                    ba:4b:97:84:75:b2:4b:eb:56:79:4a:fc:6a:59:87:
                    bc:c5:63:7a:1f:09:6e:6f:be:81:0a:f5:fd:ed:0c:
                    0a:da:a0:fd:97:52:ed:b2:8a:c9:e9:3e:e7:8e:79:
                    8c:d7:89:42:3d:87:5e:c4:2e:97:44:6b:12:25:ea:
                    09:78:73:13:8b:ce:bb:af:66:4a:16:0f:ec:cc:b7:
                    7f:6f:a1:d1:a5:cd:b2:f6:5b:ef:8d:10:0a:de:dc:
                    dd:5a:e2:2d:1a:eb:45:14:61:9b:84:de:0a:57:f7:
                    a6:0d:54:63:f6:b6:5e:de:ed:7e:b6:43:80:aa:4e:
                    4e:1f:2e:1b:df:10:ed:b6:fe:a3:da:2c:08:fb:a5:
                    25:17:2e:fd:d3:dd:c3:e0:a7:cf:40:4a:6e:e1:6d:
                    42:90:fe:84:42:ca:3d:b6:ab:b1:5e:ac:d0:58:fa:
                    71:7d:d8:bc:2b:d6:9d:13:1e:7f:96:9d:c1:00:c1:
                    05:d9:d5:11:02:e4:db:5d:7b:e3:ce:b1:2f:d5:6d:
                    8d:fd:2a:02:fd:dd:66:eb:74:2c:da:f3:2c:28:19:
                    c4:b2:1f:34:da:80:44:7e:c4:d6:86:88:1e:7b:8f:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BB:CA:05:A2:4C:A6:C8:62:5E:F6:6B:5E:2E:D7:3F:CD:C7:D4:59
            X509v3 Authority Key Identifier:
                keyid:5C:FD:4B:D8:35:7F:50:5D:6C:B1:A4:7E:9C:15:3D:57:12:95:92:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a3a2f33332d3333203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         96:3c:5b:4a:21:ca:a7:0e:09:ee:fd:ea:c4:a8:7b:57:75:20:
         d5:b3:b1:fe:98:bd:f7:f5:12:c7:e8:80:14:38:9f:34:48:30:
         81:ed:3b:8a:94:53:49:05:f6:6e:cd:2d:b9:c5:12:70:76:6e:
         4e:83:a6:7e:fb:b9:5c:18:d1:d1:8d:9b:9a:b7:d7:4c:ae:95:
         0f:93:94:ca:cc:92:57:17:d9:71:b4:1d:ed:aa:66:9e:02:6c:
         b1:b6:46:30:8c:b3:76:c8:b3:c6:b2:37:9a:04:9d:04:9a:f1:
         f5:23:11:0d:de:58:66:9a:5a:e1:6f:11:8f:16:a3:5e:1a:6f:
         ca:17:4b:d4:2e:ff:2c:dc:99:a5:ef:3e:ae:bc:93:a2:6a:47:
         0f:8c:71:56:e3:a5:c5:1a:72:88:ba:9f:e0:d7:6a:45:05:93:
         13:be:e9:1d:17:76:54:4e:21:a3:5a:a5:71:42:2c:9a:10:9a:
         a5:f3:a5:ac:9b:ed:92:99:b4:19:7f:77:be:7c:29:14:88:16:
         16:4d:c4:de:41:0b:a2:2c:df:14:7e:b3:80:f8:98:51:91:f2:
         d1:5b:30:12:0e:16:ee:ee:89:d0:5e:ee:cd:07:bc:ba:0d:d0:
         b4:1f:9b:f8:ab:95:06:49:67:ad:ce:b1:e3:c3:c5:e3:44:23:
         e3:ac:9e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org