Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/323830343a366264343a3a2f33322d3336203d3e20323730343238.roa
File:                     323830343a366264343a3a2f33322d3336203d3e20323730343238.roa (raw, json)
Hash identifier:          0aUU8st8/ndU9hsSem+ldLTExD7tkHir2Pip6xUaENk=
Subject key identifier:   03:78:29:A9:F1:CF:3D:98:32:C3:9D:70:0B:06:CD:86:5D:84:DD:5C
Certificate issuer:       /CN=6320CD7E38D87C910B5072CD7D4824F3E72D236C
Certificate serial:       76E0208A318271C995F454EEEE9A4F1685EB0114
Authority key identifier: 63:20:CD:7E:38:D8:7C:91:0B:50:72:CD:7D:48:24:F3:E7:2D:23:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6320CD7E38D87C910B5072CD7D4824F3E72D236C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/323830343a366264343a3a2f33322d3336203d3e20323730343238.roa
Signing time:             Mon 25 Mar 2024 19:25:14 +0000
ROA not before:           Mon 25 Mar 2024 19:20:14 +0000
ROA not after:            Mon 24 Mar 2025 19:25:14 +0000
asID:                     270428
IP address blocks:        2804:6bd4::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e0:20:8a:31:82:71:c9:95:f4:54:ee:ee:9a:4f:16:85:eb:01:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6320CD7E38D87C910B5072CD7D4824F3E72D236C
        Validity
            Not Before: Mar 25 19:20:14 2024 GMT
            Not After : Mar 24 19:25:14 2025 GMT
        Subject: CN=037829A9F1CF3D9832C39D700B06CD865D84DD5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:1c:80:56:cb:9c:3a:5c:8d:82:54:1b:9a:
                    eb:0c:49:bc:47:a9:02:b0:ee:e8:38:5d:af:b0:fd:
                    7c:3e:f5:56:0a:1e:a6:dc:99:a7:46:df:35:a9:d7:
                    2f:c0:c5:dc:95:84:b7:bd:2f:24:67:bf:32:60:4d:
                    7e:00:e0:4a:ee:bd:f2:87:0d:5d:74:60:3c:64:20:
                    0e:19:18:66:7f:2e:4d:1f:53:53:f0:27:9d:54:3a:
                    49:98:9d:3c:3d:f2:7b:17:57:7b:ad:f2:3d:5b:63:
                    63:f1:28:59:41:6f:c4:9c:dd:1a:2b:e8:b6:9f:e0:
                    26:79:6b:f8:81:ee:a1:4d:85:5e:86:2c:9b:f8:9e:
                    98:dd:6c:85:07:4e:bc:13:df:89:af:8a:d2:74:5a:
                    55:83:aa:a8:c7:88:1a:24:4e:3d:f3:0b:e1:35:ce:
                    59:b3:7f:b7:bc:ca:64:ef:84:db:d0:07:3f:64:58:
                    0e:19:ca:5f:73:63:7d:c5:7a:8e:6a:67:5b:ac:63:
                    9e:5e:d3:15:24:d9:e3:23:bb:33:bd:13:77:03:30:
                    0e:03:ed:55:35:1f:44:fc:b3:83:32:cf:60:e4:19:
                    ba:34:6d:95:9a:d8:e9:d4:4b:1f:29:63:4a:7b:61:
                    e2:1a:b7:06:6d:c8:7b:8e:64:d5:29:f4:4d:aa:3d:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:78:29:A9:F1:CF:3D:98:32:C3:9D:70:0B:06:CD:86:5D:84:DD:5C
            X509v3 Authority Key Identifier:
                keyid:63:20:CD:7E:38:D8:7C:91:0B:50:72:CD:7D:48:24:F3:E7:2D:23:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/6320CD7E38D87C910B5072CD7D4824F3E72D236C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6320CD7E38D87C910B5072CD7D4824F3E72D236C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/323830343a366264343a3a2f33322d3336203d3e20323730343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:63:c5:92:b8:7d:8e:0d:7f:94:5b:50:99:68:f2:39:e1:c1:
         09:2c:e3:a5:7e:ff:49:71:8b:2c:f3:c8:c0:ca:91:21:c1:67:
         22:0d:3d:40:c6:f1:8a:d2:86:31:19:ef:81:1a:44:2a:4d:34:
         0d:35:ed:f8:f5:cc:6d:22:51:82:f2:56:2f:0b:75:c0:fe:65:
         f7:3b:44:17:6e:16:d9:58:b5:f2:92:05:55:48:7f:20:57:d1:
         75:29:b5:ed:9d:f7:9b:44:30:39:df:35:51:84:f6:b3:89:dd:
         5b:ee:15:5e:22:c6:79:3d:e8:53:7f:ec:fd:75:7f:2d:12:8b:
         72:15:cb:ae:8d:0b:38:f2:32:36:bb:73:e4:a9:b8:7e:70:74:
         7f:d6:83:9b:0d:91:ac:7d:c3:5c:b2:04:c5:99:de:81:2b:a8:
         b1:bc:82:20:ee:d1:74:60:d5:2c:62:93:4e:ef:7f:43:79:39:
         7a:91:d1:ad:c3:7f:12:c9:1d:71:af:4f:b8:b9:11:64:1e:1d:
         89:df:d5:f4:b4:cf:92:af:15:ea:b2:95:46:e5:c5:b6:ed:b2:
         2b:3c:ff:05:0f:81:a7:74:ff:0a:9a:53:be:21:a4:88:a8:be:
         57:1f:a4:1f:ac:83:67:8a:2b:94:5c:ee:dd:5b:f3:9f:89:22:
         90:ac:a6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org