Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a313a3a2f34382d3438203d3e20323639353332.roa
File:                     323830343a363631343a313a3a2f34382d3438203d3e20323639353332.roa (raw, json)
Hash identifier:          JVTkEfxHDCZHrq6UveMamWSA1TsJ+x/1FBEQhOTLvTo=
Subject key identifier:   32:4F:E6:D8:0B:9E:9F:C2:4C:F3:6A:61:C3:BC:51:C0:00:9D:4F:0F
Certificate issuer:       /CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
Certificate serial:       603297C5AF225CE2072CD6C41883ACEB206CB154
Authority key identifier: 8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a313a3a2f34382d3438203d3e20323639353332.roa
Signing time:             Sat 16 Sep 2023 19:32:17 +0000
ROA not before:           Sat 16 Sep 2023 19:27:17 +0000
ROA not after:            Sat 14 Sep 2024 19:32:17 +0000
asID:                     269532
IP address blocks:        2804:6614:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:32:97:c5:af:22:5c:e2:07:2c:d6:c4:18:83:ac:eb:20:6c:b1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
        Validity
            Not Before: Sep 16 19:27:17 2023 GMT
            Not After : Sep 14 19:32:17 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:76:5d:b1:e0:5c:57:ad:58:d5:f9:58:7f:98:
                    62:e5:24:47:54:4f:81:f3:ca:4a:b0:a7:35:75:d0:
                    40:04:ae:b1:67:4b:83:2f:fb:9d:64:06:60:a0:8e:
                    1d:e5:82:0b:24:a4:37:2d:18:ad:9d:b7:31:8e:38:
                    04:ac:43:83:8d:1f:16:b7:e4:7e:7f:bf:33:be:ef:
                    ee:b0:13:cb:b3:10:c8:ba:5c:f4:8c:85:02:88:e2:
                    7b:de:32:84:5b:da:27:34:6d:f5:d3:03:a4:66:d3:
                    9e:0a:66:8a:ec:fd:6f:3f:c4:f5:5d:88:ce:9f:fc:
                    1f:83:b1:5a:45:b6:ab:72:61:e4:cc:c5:81:f2:bf:
                    5c:29:0b:cb:bb:57:df:d0:ab:86:fb:54:15:19:16:
                    c5:6a:3b:74:cb:81:ff:18:37:d2:be:f4:f7:21:ec:
                    5e:6e:98:53:0f:e0:0c:50:39:15:8d:78:22:22:7e:
                    7c:c5:90:2c:40:10:5a:06:fa:63:00:60:a4:13:c2:
                    97:08:ce:02:6d:a7:ee:45:a7:d2:48:1e:78:1f:c5:
                    9e:25:85:19:07:4c:b2:87:4c:63:58:22:d8:89:32:
                    be:dd:bd:48:a8:14:0d:29:d1:96:17:c9:ad:7a:d6:
                    f7:9c:d3:2b:bc:d1:8d:15:24:ce:ad:8f:68:d1:a9:
                    e5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4F:E6:D8:0B:9E:9F:C2:4C:F3:6A:61:C3:BC:51:C0:00:9D:4F:0F
            X509v3 Authority Key Identifier:
                keyid:8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a313a3a2f34382d3438203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:11:18:f9:ba:44:b8:28:bd:91:9a:88:7f:91:d8:15:bf:ad:
         22:75:09:1c:42:b9:95:da:18:4a:61:19:57:52:b0:24:04:8f:
         59:5f:d4:4e:1c:b5:30:99:00:d7:af:50:88:24:ed:11:86:09:
         84:6a:af:22:a5:9a:f9:a6:13:21:2c:c0:f6:bf:a7:76:3e:8f:
         7a:2a:69:40:29:19:ab:36:2d:5e:a0:22:ff:c2:82:e3:2e:50:
         06:88:d6:88:ba:30:b1:9b:5b:92:ba:0b:70:51:32:06:ea:01:
         cb:d9:26:21:c6:28:c1:47:1f:73:b7:74:d9:08:26:6a:98:b3:
         b8:60:c1:6c:cd:c6:84:00:f5:2b:93:65:66:1a:35:7b:67:41:
         df:c7:86:b2:28:20:74:60:9e:99:76:a6:71:92:0f:24:88:dc:
         39:b9:f5:5b:69:cb:dd:3a:ae:05:44:10:6e:27:5f:f6:f7:80:
         52:39:ef:0d:c0:e7:5a:0c:59:66:b3:25:46:0b:1b:84:03:54:
         48:85:ab:ce:55:c6:fb:ac:5c:b0:c0:d9:be:99:3b:8e:3c:0f:
         ab:dc:1f:52:fd:ff:aa:10:e1:ae:f5:e6:10:1c:a9:20:45:38:
         13:66:89:fe:61:57:4f:76:62:98:84:ee:3f:04:5c:ed:31:5a:
         c1:1e:b8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org