Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a383030303a3a2f33332d3333203d3e20323639353332.roa
File:                     323830343a363631343a383030303a3a2f33332d3333203d3e20323639353332.roa (raw, json)
Hash identifier:          I9Q4QpVN3yg1D5U+LvvxuK+j9N0VMMWEwaRb7lNiDHA=
Subject key identifier:   1A:BD:04:95:56:8C:AD:F8:17:45:B8:53:62:2C:E9:7B:4F:59:89:37
Certificate issuer:       /CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
Certificate serial:       315F68E73B71489307EF8871059B55C5E3530D61
Authority key identifier: 8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a383030303a3a2f33332d3333203d3e20323639353332.roa
Signing time:             Sat 16 Sep 2023 19:32:24 +0000
ROA not before:           Sat 16 Sep 2023 19:27:24 +0000
ROA not after:            Sat 14 Sep 2024 19:32:24 +0000
asID:                     269532
IP address blocks:        2804:6614:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5f:68:e7:3b:71:48:93:07:ef:88:71:05:9b:55:c5:e3:53:0d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
        Validity
            Not Before: Sep 16 19:27:24 2023 GMT
            Not After : Sep 14 19:32:24 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:42:33:a7:07:a5:15:23:b6:f3:49:73:d8:4f:
                    1b:c4:ac:a6:fe:f6:38:97:f7:a4:2b:72:c5:57:2e:
                    8c:ad:0f:7f:cb:f5:88:e7:14:b9:d7:cb:88:d7:91:
                    39:c8:d3:d5:18:e6:61:9b:23:a5:b8:af:9a:5b:00:
                    c7:26:87:17:4c:73:62:1a:24:6e:39:3d:3e:83:b1:
                    54:db:27:9e:0a:91:d0:e1:50:32:ae:f1:32:11:18:
                    c6:a6:5e:0b:87:bb:60:b0:be:fd:11:e9:7d:4d:7f:
                    fe:75:dc:73:4c:26:ba:df:3f:81:91:ba:25:24:e9:
                    35:54:04:b8:a5:2f:50:03:f5:0d:5a:76:c8:22:86:
                    ba:c9:59:75:b8:94:e4:d0:a1:66:48:7f:0a:e2:89:
                    3c:ac:b7:4d:c4:65:59:74:a1:a9:5a:67:f0:ca:77:
                    ec:7e:8d:8f:cf:e0:e3:ec:5e:b9:e6:19:f7:28:3b:
                    fd:0d:f5:f4:c3:65:db:5c:ad:49:5c:20:1d:8f:2b:
                    2c:82:3e:b6:59:b6:a3:28:51:e4:6f:59:8e:ab:db:
                    16:31:25:f4:fc:10:81:69:6b:19:40:5b:b4:60:ef:
                    87:86:d8:49:f8:ec:a9:1b:59:af:46:13:24:70:3d:
                    d7:95:54:20:a4:fc:e9:6d:40:e3:be:46:16:5f:5a:
                    2d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BD:04:95:56:8C:AD:F8:17:45:B8:53:62:2C:E9:7B:4F:59:89:37
            X509v3 Authority Key Identifier:
                keyid:8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a383030303a3a2f33332d3333203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:da:73:2f:3c:5a:82:95:f2:40:ff:1b:be:84:38:32:a8:
         35:63:a6:e5:9b:27:e8:05:69:6d:1a:cc:95:c2:ce:8e:45:df:
         79:0c:36:9e:a3:68:b4:65:05:0a:1e:48:21:e3:db:6b:40:1b:
         f3:74:7e:da:22:b7:08:5b:a1:00:8a:61:cb:e4:b2:c8:c4:49:
         d1:03:be:d3:46:7e:51:32:88:c6:61:e4:7d:ef:f5:df:e3:6c:
         b2:a0:0b:83:17:28:a1:87:55:b3:5b:21:74:e5:8c:9b:9a:28:
         95:c5:c5:43:e2:c9:63:8e:fb:14:87:0f:c3:b2:f9:d6:7a:ef:
         a5:a1:4b:8d:60:94:59:b0:d3:7c:6a:3f:41:9f:d4:51:ed:98:
         4d:2d:99:69:72:5e:2c:c1:f9:d2:97:88:a4:5e:58:41:cd:f1:
         54:f7:ac:c5:9d:77:21:e0:01:cb:ce:78:5d:49:3f:22:e8:3d:
         ab:b2:49:fd:60:5c:b1:09:5c:e6:9d:6d:fa:6d:27:37:ae:2a:
         90:dd:5a:32:c8:09:4f:21:fd:f3:63:5d:8e:5b:7d:8c:82:b1:
         cc:18:0e:0f:ed:f5:d4:07:53:5d:5c:20:61:17:ff:5b:6f:8c:
         1f:e1:3f:3f:fe:57:5a:44:08:c8:10:b3:74:13:8b:bc:37:97:
         1e:54:96:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org