Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/323830343a3964343a3a2f33322d313238203d3e20323632393936.roa
File:                     323830343a3964343a3a2f33322d313238203d3e20323632393936.roa (raw, json)
Hash identifier:          m8bCijPkrt+fhm2oOL9gftyrAZJE58M0Owiczafh5Ck=
Subject key identifier:   AC:E0:1B:BE:F4:77:9B:F5:77:E8:57:DC:10:D1:C8:B8:37:CF:28:A3
Certificate issuer:       /CN=A1BC8FB094C814E640DC6D745931F287DB08EF8D
Certificate serial:       32E4B498B173051EB75838F998C7CDADC544ACEE
Authority key identifier: A1:BC:8F:B0:94:C8:14:E6:40:DC:6D:74:59:31:F2:87:DB:08:EF:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BC8FB094C814E640DC6D745931F287DB08EF8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/323830343a3964343a3a2f33322d313238203d3e20323632393936.roa
Signing time:             Sat 01 Jul 2023 13:27:10 +0000
ROA not before:           Sat 01 Jul 2023 13:22:10 +0000
ROA not after:            Sat 29 Jun 2024 13:27:10 +0000
asID:                     262996
IP address blocks:        2804:9d4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e4:b4:98:b1:73:05:1e:b7:58:38:f9:98:c7:cd:ad:c5:44:ac:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BC8FB094C814E640DC6D745931F287DB08EF8D
        Validity
            Not Before: Jul  1 13:22:10 2023 GMT
            Not After : Jun 29 13:27:10 2024 GMT
        Subject: CN=ACE01BBEF4779BF577E857DC10D1C8B837CF28A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:03:81:b7:ef:95:88:06:d8:74:7a:82:9d:2e:
                    57:96:67:55:49:cc:24:90:03:63:de:42:b5:1d:8c:
                    a2:10:6f:78:5c:e6:ed:0b:31:2d:7f:1d:96:54:08:
                    3f:2e:fa:4c:13:e4:82:e3:c8:6c:e2:ac:e8:2e:f6:
                    f0:85:1e:d3:d5:6e:a5:77:10:9c:f7:da:14:53:7a:
                    48:42:84:fa:8b:c7:34:65:d4:79:93:28:e5:26:74:
                    a5:ed:58:f7:1b:14:99:d9:82:e0:f1:6f:7b:4b:7d:
                    e1:ba:2b:4b:9d:87:b6:83:49:b5:aa:0a:42:2c:c4:
                    40:1c:4f:39:a4:88:df:51:11:85:45:c6:a0:cc:34:
                    02:30:d3:a1:1d:84:4d:b0:cc:53:5b:b6:04:31:e6:
                    55:b7:fc:e3:d7:02:9e:a2:3c:32:65:a2:10:e6:25:
                    9f:81:a6:93:8d:66:b7:75:87:a4:ba:3d:e9:9b:43:
                    21:89:0c:9d:cb:46:7d:19:e9:b7:14:19:bc:e8:cf:
                    31:99:47:03:70:8f:9e:7a:42:29:8e:84:f7:e8:40:
                    7b:87:87:59:da:f3:49:4e:4a:2b:57:a0:73:26:67:
                    d3:e3:eb:ab:5a:aa:0b:33:ef:8c:55:27:4e:63:0d:
                    de:6d:99:85:c4:0e:a4:1e:90:52:54:8e:55:29:7d:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E0:1B:BE:F4:77:9B:F5:77:E8:57:DC:10:D1:C8:B8:37:CF:28:A3
            X509v3 Authority Key Identifier:
                keyid:A1:BC:8F:B0:94:C8:14:E6:40:DC:6D:74:59:31:F2:87:DB:08:EF:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/A1BC8FB094C814E640DC6D745931F287DB08EF8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BC8FB094C814E640DC6D745931F287DB08EF8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/323830343a3964343a3a2f33322d313238203d3e20323632393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:cb:7f:0e:c3:58:27:5f:83:69:41:2c:2e:16:0c:d6:ef:c6:
         65:45:9f:c8:5d:b6:b8:cd:ea:b9:50:86:d2:11:f6:c9:65:f3:
         99:d9:86:67:a7:2d:04:7f:9e:b3:2b:e8:61:84:d2:ca:42:86:
         c3:c9:87:fa:36:79:bb:c0:e7:ba:f5:b7:b6:2f:90:92:55:0a:
         94:39:ac:a3:75:c0:a9:e3:0f:8d:36:8b:5f:73:cc:11:f3:4c:
         30:96:c9:e4:be:4f:67:95:08:7d:14:fc:52:e7:e8:fa:54:3d:
         ed:d2:9e:03:5e:2f:0d:3c:5c:32:bd:1a:44:3d:83:88:21:e7:
         5a:80:8c:b7:7b:03:f6:a1:52:e5:04:68:7e:56:7c:a4:91:33:
         c0:75:db:fc:7c:4d:29:cb:d9:b8:b5:eb:ea:2e:ce:e4:09:41:
         41:74:5a:cd:09:44:99:88:c8:eb:17:2f:de:63:41:7f:43:ce:
         0f:b0:96:0a:59:4b:d3:72:d4:6b:e7:d8:85:64:f5:59:7e:60:
         78:ee:21:b8:d3:08:17:2b:83:57:c0:d0:9b:ed:61:fc:cb:6d:
         9c:6d:a6:21:08:e4:3f:ce:32:f0:fa:58:e5:00:60:e6:9d:70:
         3e:11:fe:e0:60:9f:98:1e:d3:09:9b:6c:03:01:4f:0c:2f:90:
         b1:35:d3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org