Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/323830343a363566303a3a2f33332d3333203d3e20323639353234.roa
File:                     323830343a363566303a3a2f33332d3333203d3e20323639353234.roa (raw, json)
Hash identifier:          KEGAp7p86fhn/xy55H6tfyIiDAf0bwvm3qXJx6EzBnc=
Subject key identifier:   A2:64:D7:C7:FC:C4:D1:0A:BC:21:2D:29:BA:E7:D4:44:40:1E:D1:DB
Certificate issuer:       /CN=E17F5363541897DEABD020106BBE90669B62ACA3
Certificate serial:       40B1939101E5963968B3AD52816B635647C6B419
Authority key identifier: E1:7F:53:63:54:18:97:DE:AB:D0:20:10:6B:BE:90:66:9B:62:AC:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E17F5363541897DEABD020106BBE90669B62ACA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/323830343a363566303a3a2f33332d3333203d3e20323639353234.roa
Signing time:             Fri 26 Apr 2024 17:13:07 +0000
ROA not before:           Fri 26 Apr 2024 17:08:07 +0000
ROA not after:            Fri 25 Apr 2025 17:13:07 +0000
asID:                     269524
IP address blocks:        2804:65f0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b1:93:91:01:e5:96:39:68:b3:ad:52:81:6b:63:56:47:c6:b4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17F5363541897DEABD020106BBE90669B62ACA3
        Validity
            Not Before: Apr 26 17:08:07 2024 GMT
            Not After : Apr 25 17:13:07 2025 GMT
        Subject: CN=A264D7C7FCC4D10ABC212D29BAE7D444401ED1DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:81:41:00:61:d8:ef:92:b5:13:81:f0:2b:31:
                    8c:6f:e0:46:bd:37:39:46:cd:bc:6f:a8:c3:18:db:
                    7c:97:28:1a:d6:ab:29:07:c3:a8:50:84:ce:2c:ff:
                    be:76:38:55:8d:52:8c:ca:db:d3:62:26:f5:c7:92:
                    13:48:23:75:9c:5a:b8:50:f5:ef:23:dd:22:aa:ad:
                    b0:bf:c6:b9:1d:d3:42:66:c7:bf:ae:ed:0a:76:1f:
                    8e:cf:a9:aa:6c:4e:51:25:13:1d:9b:a7:23:33:27:
                    f0:19:20:71:08:7e:87:69:eb:77:ff:7b:3d:f1:07:
                    47:63:9b:7e:a3:3d:df:a0:bd:b1:ee:04:bc:dc:72:
                    71:60:c3:a6:43:60:7c:85:16:d4:ff:d4:31:4e:92:
                    5d:3a:c5:7f:52:67:12:35:6e:d6:62:ed:20:1a:fc:
                    6b:2d:e1:c7:f9:f2:f3:11:b2:bd:21:cc:44:27:bc:
                    c5:81:3f:71:e3:66:58:72:d2:37:b9:5b:3b:3e:2d:
                    09:9e:e9:5b:d5:e1:38:f7:d6:4b:98:6b:3f:29:e6:
                    df:23:3f:ca:a7:fd:0f:8b:de:dc:2e:ce:ff:1b:ab:
                    a6:45:b6:01:25:9d:3f:30:89:0f:72:e9:30:b2:11:
                    95:c4:eb:65:ef:de:c5:69:97:69:e7:1d:f0:cf:e0:
                    ab:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:64:D7:C7:FC:C4:D1:0A:BC:21:2D:29:BA:E7:D4:44:40:1E:D1:DB
            X509v3 Authority Key Identifier:
                keyid:E1:7F:53:63:54:18:97:DE:AB:D0:20:10:6B:BE:90:66:9B:62:AC:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/E17F5363541897DEABD020106BBE90669B62ACA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E17F5363541897DEABD020106BBE90669B62ACA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/323830343a363566303a3a2f33332d3333203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         87:73:f5:64:85:7c:f8:45:ca:b6:ad:fc:23:ee:a9:50:10:e1:
         41:a8:c3:04:db:6e:de:60:5a:36:27:75:cd:52:8e:ac:e5:c8:
         20:e1:da:81:5e:1e:ea:11:c8:73:dc:40:fc:05:59:58:cc:8a:
         78:f0:8d:c2:1b:06:51:b0:8b:83:4b:f8:fa:34:2e:7f:45:cb:
         36:16:a4:0b:07:7a:86:a1:e6:d2:62:0e:45:75:f1:8a:7a:57:
         58:cb:a0:14:45:14:c7:a3:fe:fc:a4:65:6d:e7:af:c1:26:3e:
         51:c9:e0:b6:7b:86:46:89:11:79:06:8b:0c:a6:8d:3d:78:11:
         07:32:51:2f:05:bf:c0:80:0c:e7:89:ad:28:6c:12:f7:db:45:
         07:ba:32:53:4c:e4:29:64:a6:2d:15:39:b1:c7:f8:90:cd:35:
         af:fa:53:a1:8b:6e:ec:41:68:79:33:a5:be:61:98:5c:f7:e0:
         79:f4:32:df:a5:32:1b:6b:c1:0d:8a:ad:23:16:70:19:cb:eb:
         1d:6c:59:1b:61:23:0c:44:c3:90:5c:e3:37:77:79:19:ec:ad:
         e4:91:e5:af:7e:d5:02:ed:d6:05:f6:ad:a6:bf:30:29:4d:90:
         70:fb:68:9e:49:f4:f3:34:29:eb:80:c3:ae:e9:5d:21:f0:f1:
         9a:d6:b5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org