Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a323361613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a323361613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          duVAau1qyxFOIhgDZ31+Xceku0oxB+78Oqu0XLwL2D8=
Subject key identifier:   0D:5B:35:9E:7B:34:8A:98:6C:A8:7C:63:39:FC:33:55:18:5D:6A:09
Certificate issuer:       /CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
Certificate serial:       234A97562CE2D6F3DF31C5A4235ADEA6541E0C18
Authority key identifier: 3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a323361613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Sat 05 Aug 2023 11:00:00 +0000
ROA not before:           Sat 05 Aug 2023 10:55:00 +0000
ROA not after:            Sat 03 Aug 2024 11:00:00 +0000
asID:                     266623
IP address blocks:        2804:3ed4:23aa::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4a:97:56:2c:e2:d6:f3:df:31:c5:a4:23:5a:de:a6:54:1e:0c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
        Validity
            Not Before: Aug  5 10:55:00 2023 GMT
            Not After : Aug  3 11:00:00 2024 GMT
        Subject: CN=0D5B359E7B348A986CA87C6339FC3355185D6A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c7:8d:a0:f3:29:42:dd:99:8d:d8:27:76:b6:
                    1d:1d:c2:e1:cc:1d:85:3b:13:1e:a6:22:21:fa:89:
                    fc:40:9c:e7:5c:a2:f7:60:ea:ce:c2:22:72:86:5a:
                    9f:30:08:f7:d9:2e:3b:4e:20:c7:a3:29:04:cd:0a:
                    a0:99:d2:02:44:8b:50:4e:63:ba:38:ac:70:b8:22:
                    9b:c9:c6:38:ab:66:99:6b:f3:1b:8f:16:1a:fe:0b:
                    a9:f6:27:da:a3:98:40:02:00:23:cc:ae:00:ab:47:
                    18:92:3e:da:e4:e3:a7:d9:7b:11:b8:b1:90:f6:19:
                    12:e0:1e:6d:41:82:b6:95:5b:89:13:f4:ad:97:82:
                    48:58:14:93:cf:8c:9f:65:a4:d2:b3:31:7f:2e:44:
                    a9:14:45:3f:d4:a0:06:66:1d:d1:1e:dc:53:16:b0:
                    20:d8:19:0f:7e:d8:2c:d4:67:25:e8:09:ed:89:d5:
                    9f:5f:a2:c2:12:c0:b7:fd:c5:0b:1b:b7:30:f3:d5:
                    10:3c:51:b3:55:8b:ff:24:7e:65:27:7b:c6:a1:f3:
                    ce:d9:55:b1:a4:1e:bd:f4:5a:6f:61:55:0d:ab:2d:
                    b8:0b:b3:ef:e2:ec:c8:b7:a5:07:8c:94:28:e2:8d:
                    21:78:77:6c:8f:b2:21:d7:38:b6:fb:34:b9:99:51:
                    fc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5B:35:9E:7B:34:8A:98:6C:A8:7C:63:39:FC:33:55:18:5D:6A:09
            X509v3 Authority Key Identifier:
                keyid:3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a323361613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:23aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:e4:d8:10:31:98:6f:9c:11:44:e7:10:8c:d0:a9:15:1b:e0:
         ae:67:3c:8a:75:b5:98:e0:9c:3a:bb:4a:90:09:5b:a3:50:ff:
         6b:fa:75:16:c7:d1:12:ac:ee:9f:59:d4:52:da:05:fa:2d:5c:
         f4:1a:a9:b6:b3:99:0c:80:47:b4:c8:dc:d7:53:2e:08:da:48:
         e1:0b:37:58:4d:e3:7c:80:8c:61:94:b3:9b:f4:59:46:f8:24:
         78:e6:1f:e9:19:41:3c:d5:cb:05:ac:e9:49:79:f1:24:19:a2:
         54:95:4e:69:35:98:da:5c:b1:b1:39:99:35:f0:8b:7b:84:ae:
         73:53:9a:6f:3d:07:32:7d:91:5f:a0:9b:9e:39:48:c0:d8:d7:
         45:2d:01:34:40:3b:ae:3f:de:31:7e:21:ef:91:ff:8a:c5:f1:
         cb:5e:c7:e5:b3:b4:e7:d9:2f:39:f6:24:cc:39:87:a3:f0:c4:
         4f:d3:ad:5a:f5:67:14:44:53:55:24:55:d0:79:53:40:f5:8a:
         b6:53:6f:b8:12:f7:f2:d1:7b:f3:4c:42:b9:97:e3:44:de:0b:
         b4:49:da:d9:3a:5c:e5:f8:d9:15:2f:7c:c5:34:34:c0:24:e7:
         82:ca:a5:0c:1a:fb:b6:eb:5f:6f:f2:ef:fd:93:b5:75:c5:f8:
         d3:40:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:01 2024 by rpki-client on console.sobornost.net