Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/323830343a366232303a3a2f33342d3334203d3e20323730333830.roa
File:                     323830343a366232303a3a2f33342d3334203d3e20323730333830.roa (raw, json)
Hash identifier:          z35qxumBfhVbJNh8REwb29ZK2g8uugJp3fzuRXtnrKs=
Subject key identifier:   A0:33:62:79:8F:2B:9B:12:54:64:15:76:52:57:D0:59:B0:FF:A5:42
Certificate issuer:       /CN=8E8EAB76424F963D218A026D0B5A1ABF5A09F987
Certificate serial:       2D3C5BFF6B33AAF9E3C951E44421123A34A6AC3C
Authority key identifier: 8E:8E:AB:76:42:4F:96:3D:21:8A:02:6D:0B:5A:1A:BF:5A:09:F9:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E8EAB76424F963D218A026D0B5A1ABF5A09F987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/323830343a366232303a3a2f33342d3334203d3e20323730333830.roa
Signing time:             Tue 18 Jul 2023 20:20:07 +0000
ROA not before:           Tue 18 Jul 2023 20:15:07 +0000
ROA not after:            Tue 16 Jul 2024 20:20:07 +0000
asID:                     270380
IP address blocks:        2804:6b20::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3c:5b:ff:6b:33:aa:f9:e3:c9:51:e4:44:21:12:3a:34:a6:ac:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E8EAB76424F963D218A026D0B5A1ABF5A09F987
        Validity
            Not Before: Jul 18 20:15:07 2023 GMT
            Not After : Jul 16 20:20:07 2024 GMT
        Subject: CN=A03362798F2B9B12546415765257D059B0FFA542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:85:b4:d9:3d:bd:72:4f:42:b5:0d:f3:d1:
                    c5:d0:5d:8d:58:6b:51:bf:48:23:34:52:a2:83:c5:
                    aa:3f:ca:52:4b:2b:13:78:91:52:9d:82:20:a5:75:
                    ec:53:07:0f:15:a7:fe:69:c4:14:f2:94:8b:35:26:
                    69:d9:e8:90:73:ce:cf:d8:82:1d:af:79:f1:99:2c:
                    73:2e:94:78:74:6d:56:21:05:ec:8d:3a:52:0a:9d:
                    ba:f3:fc:a1:6f:37:88:41:af:b1:e9:1b:5e:e3:32:
                    06:82:19:31:47:78:14:2e:59:d6:10:b0:bb:91:79:
                    78:72:1f:ad:d8:de:51:2e:5d:3f:89:5a:e8:88:7f:
                    e3:d2:67:e3:b5:44:13:4e:a4:be:78:0c:99:a1:94:
                    8e:98:7a:79:04:dd:29:8d:12:9c:cf:c4:8f:5e:94:
                    7b:a0:e7:50:8a:8f:09:e6:2b:95:61:a8:47:fe:9a:
                    71:6d:4d:2f:76:50:bb:09:93:11:b0:1a:d8:4e:cd:
                    6d:74:d2:f4:3f:9c:4c:93:0f:a7:3b:9f:de:3f:84:
                    14:10:c7:e3:37:30:85:7e:e8:1b:da:8e:19:f6:78:
                    c8:68:0c:ff:60:50:5a:d6:da:0f:1f:f8:29:96:ba:
                    e2:93:a0:7f:8b:46:76:eb:67:d2:cb:96:bf:8e:67:
                    8d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:33:62:79:8F:2B:9B:12:54:64:15:76:52:57:D0:59:B0:FF:A5:42
            X509v3 Authority Key Identifier:
                keyid:8E:8E:AB:76:42:4F:96:3D:21:8A:02:6D:0B:5A:1A:BF:5A:09:F9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/8E8EAB76424F963D218A026D0B5A1ABF5A09F987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E8EAB76424F963D218A026D0B5A1ABF5A09F987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/323830343a366232303a3a2f33342d3334203d3e20323730333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b20::/34

    Signature Algorithm: sha256WithRSAEncryption
         3c:2c:58:09:81:e7:7f:37:aa:06:7c:96:34:e2:85:f0:93:ed:
         75:f5:d7:47:22:08:ea:d5:21:f6:23:65:bd:5f:5f:6c:b2:41:
         d6:07:c4:02:d1:73:f4:84:f3:ae:0f:01:15:ea:76:b2:d7:06:
         84:e7:32:d3:aa:61:12:5f:ee:a7:49:ee:0b:5a:93:18:c3:57:
         7e:55:63:8f:b4:59:43:70:f7:fc:3f:5e:21:85:5b:b1:4c:99:
         e0:3a:50:7d:6b:3a:49:b1:71:3a:a6:be:29:b6:cf:e6:1d:f8:
         ac:40:d9:bb:e7:07:01:5e:f9:69:67:14:4c:4c:d6:f6:b9:2e:
         59:24:53:52:4e:17:cc:3a:a2:cd:45:cb:99:ab:df:86:b1:f5:
         2c:91:e7:b5:81:3d:ec:8e:2e:9c:d6:7c:58:85:e6:e2:e9:c7:
         1c:fe:97:fb:dc:ea:80:68:cf:6d:67:01:15:d5:13:df:31:cd:
         93:f7:6e:0e:85:62:7f:3e:99:82:7d:e6:d5:4c:03:84:52:e8:
         6a:0a:25:0f:c0:d3:97:6f:42:01:f7:1d:0b:ab:56:91:98:0e:
         53:6d:da:e6:0e:82:99:4e:a1:fd:94:3a:d7:8d:e0:78:29:fa:
         ee:ca:75:ea:6a:8f:c2:29:32:1b:2d:7a:1d:bd:c5:ac:fe:1d:
         2c:72:25:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org