Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/323830343a343436303a633030303a3a2f33362d3336203d3e20323637363239.roa
File:                     323830343a343436303a633030303a3a2f33362d3336203d3e20323637363239.roa (raw, json)
Hash identifier:          OiSwSOSdowxWnLRjE1c7F+67HMRO4UvuZmIZuhKZFEw=
Subject key identifier:   38:C5:F6:5F:F9:67:0A:13:54:27:65:80:08:8D:C5:C6:86:76:66:91
Certificate issuer:       /CN=9114B30BC2958DF8A98FDDD535605A2DA6E5A37A
Certificate serial:       7A01D54F5354435892BCE8FBBDA87CBB283994A1
Authority key identifier: 91:14:B3:0B:C2:95:8D:F8:A9:8F:DD:D5:35:60:5A:2D:A6:E5:A3:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/323830343a343436303a633030303a3a2f33362d3336203d3e20323637363239.roa
Signing time:             Sat 09 Dec 2023 17:51:36 +0000
ROA not before:           Sat 09 Dec 2023 17:46:36 +0000
ROA not after:            Sat 07 Dec 2024 17:51:36 +0000
asID:                     267629
IP address blocks:        2804:4460:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:01:d5:4f:53:54:43:58:92:bc:e8:fb:bd:a8:7c:bb:28:39:94:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9114B30BC2958DF8A98FDDD535605A2DA6E5A37A
        Validity
            Not Before: Dec  9 17:46:36 2023 GMT
            Not After : Dec  7 17:51:36 2024 GMT
        Subject: CN=38C5F65FF9670A1354276580088DC5C686766691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:4c:f5:6b:90:4a:d5:08:55:86:1b:bf:7c:
                    c8:0a:ed:62:fd:aa:83:9b:80:dc:68:f7:74:4f:3c:
                    28:93:9b:38:d9:7f:de:6d:a4:5f:e7:a9:e9:aa:9b:
                    59:fe:4f:9f:71:7f:c2:d1:60:a5:e6:61:41:9a:d3:
                    3f:78:64:31:30:f4:05:f6:08:6b:41:ed:8d:07:da:
                    2a:3f:e9:88:d7:fa:8a:0d:e6:bf:ac:e6:cd:2f:b4:
                    e1:5f:d2:54:01:39:6d:4d:09:d1:67:4b:be:06:94:
                    5c:dd:45:e1:15:91:74:99:7a:8e:b5:21:ac:50:cd:
                    9f:0a:fd:e6:50:52:28:fd:5e:28:2b:91:ca:1a:64:
                    82:39:7c:81:6b:d4:38:60:77:55:20:4d:5f:4f:d4:
                    7e:66:39:80:45:43:1c:9f:46:59:ef:6b:41:a2:0b:
                    cc:e3:8d:02:15:0f:7b:b9:a3:cf:55:2d:07:65:cc:
                    99:f3:4f:8f:ce:57:65:24:86:a9:a1:dd:4b:67:7f:
                    47:23:39:d0:96:c2:03:2a:44:f9:32:ad:2e:41:45:
                    9e:43:79:ca:33:b5:e8:2c:88:89:35:86:e6:41:ad:
                    d2:e1:2f:69:43:b5:6f:86:2e:fc:08:04:f3:9c:3f:
                    96:0f:05:13:de:7e:07:c7:c0:8e:75:6e:83:1c:66:
                    f1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C5:F6:5F:F9:67:0A:13:54:27:65:80:08:8D:C5:C6:86:76:66:91
            X509v3 Authority Key Identifier:
                keyid:91:14:B3:0B:C2:95:8D:F8:A9:8F:DD:D5:35:60:5A:2D:A6:E5:A3:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/323830343a343436303a633030303a3a2f33362d3336203d3e20323637363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4460:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         92:e4:8d:3a:22:1b:38:54:67:a9:07:eb:23:ac:0e:9e:ee:35:
         65:68:0f:4c:26:fb:e1:62:f1:81:e4:6a:d8:28:7f:61:9e:59:
         4d:a3:d9:49:33:2d:f6:35:28:10:4e:c0:09:48:b7:97:83:36:
         33:dd:e0:a7:49:b8:2b:cf:a6:20:68:d5:ee:03:c5:9c:f8:c0:
         eb:a8:f2:1e:48:46:bb:dd:c7:59:14:38:83:be:0f:69:a6:16:
         9d:49:7a:c0:29:57:a6:f6:f4:e5:5a:63:84:e5:a0:f5:fb:fa:
         d4:07:c1:1e:0a:17:eb:b9:06:a5:5c:9d:a2:cb:8c:7a:07:99:
         0e:29:75:c7:ae:8b:19:50:4f:c7:4a:3b:87:3b:2c:82:33:bc:
         4b:b5:b9:ee:ec:3c:20:2d:29:c5:e1:e2:f3:2c:48:a1:b4:94:
         37:b7:65:58:63:62:bb:1c:49:d0:c2:d2:65:a2:ce:6c:7f:6c:
         84:8b:1f:37:d2:92:b5:11:c3:d0:e7:21:03:49:75:62:16:7c:
         a1:f1:49:6d:2e:1d:b0:74:d0:c1:58:24:27:7d:d2:f3:78:64:
         c0:b2:0e:5c:7c:8c:7b:76:d6:6f:3b:55:64:58:f8:ec:db:0f:
         e6:e1:6b:84:50:a3:85:03:55:89:52:11:b0:73:ef:73:f8:28:
         04:e0:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org