Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/323830343a376161343a383030303a3a2f33342d3334203d3e20323731333833.roa
File:                     323830343a376161343a383030303a3a2f33342d3334203d3e20323731333833.roa (raw, json)
Hash identifier:          Lrz7x83XAncI2EUaKeQwBqORlk3WLOmcrrmtFfUxd0M=
Subject key identifier:   43:FD:FF:C4:A1:AA:5A:AD:6D:9E:B4:CF:C7:73:55:9B:08:3E:6B:E0
Certificate issuer:       /CN=796F564AEAADE5A568F1954847A0276FEAA52A25
Certificate serial:       200DD4B8D36619B78802352E47192791A26815A1
Authority key identifier: 79:6F:56:4A:EA:AD:E5:A5:68:F1:95:48:47:A0:27:6F:EA:A5:2A:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/796F564AEAADE5A568F1954847A0276FEAA52A25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/323830343a376161343a383030303a3a2f33342d3334203d3e20323731333833.roa
Signing time:             Fri 14 Apr 2023 13:20:26 +0000
ROA not before:           Fri 14 Apr 2023 13:15:26 +0000
ROA not after:            Fri 12 Apr 2024 13:20:26 +0000
asID:                     271383
IP address blocks:        2804:7aa4:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0d:d4:b8:d3:66:19:b7:88:02:35:2e:47:19:27:91:a2:68:15:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796F564AEAADE5A568F1954847A0276FEAA52A25
        Validity
            Not Before: Apr 14 13:15:26 2023 GMT
            Not After : Apr 12 13:20:26 2024 GMT
        Subject: CN=43FDFFC4A1AA5AAD6D9EB4CFC773559B083E6BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:4b:ec:b0:06:f4:71:2b:d0:b9:93:c5:5f:
                    2e:98:9f:54:1f:e8:c0:b9:6b:c2:ea:0b:3f:a6:7b:
                    6f:30:63:b2:3e:7c:02:49:e3:36:1f:92:4c:7d:c6:
                    a5:85:e0:24:5a:5c:b1:c1:4b:e8:21:3c:2d:50:82:
                    9e:19:fd:c0:8e:7d:44:be:45:fe:85:ea:a3:c2:cc:
                    79:64:a8:d0:63:ed:b2:45:75:31:e6:00:6c:75:76:
                    0d:98:e7:54:6e:d0:55:71:ea:db:e0:e0:3f:81:a7:
                    57:8a:9f:a4:09:79:f1:37:51:8f:0d:ca:25:38:f6:
                    d5:88:74:85:f4:19:66:46:2a:f7:6c:e7:ba:b4:07:
                    77:59:13:0e:90:ec:43:e4:e7:39:25:8a:8f:e4:05:
                    f2:4d:65:e4:30:b8:27:b1:7b:98:71:bd:a9:04:f1:
                    83:f4:5e:17:fe:98:26:ad:5a:93:65:78:05:9d:f8:
                    ad:eb:c1:01:23:5f:95:f5:a1:98:b3:31:d4:25:6b:
                    12:dd:5c:65:68:4b:38:67:27:60:74:80:0f:6a:88:
                    f5:11:d3:c2:cd:66:08:28:ab:da:f4:f0:c6:b0:0c:
                    23:3c:b4:e5:6c:a2:f0:de:27:95:1e:a3:a1:2b:74:
                    1b:34:d8:d4:24:ce:39:81:97:31:ce:1c:90:13:fe:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FD:FF:C4:A1:AA:5A:AD:6D:9E:B4:CF:C7:73:55:9B:08:3E:6B:E0
            X509v3 Authority Key Identifier:
                keyid:79:6F:56:4A:EA:AD:E5:A5:68:F1:95:48:47:A0:27:6F:EA:A5:2A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/796F564AEAADE5A568F1954847A0276FEAA52A25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/796F564AEAADE5A568F1954847A0276FEAA52A25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/323830343a376161343a383030303a3a2f33342d3334203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7aa4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:38:6d:8e:cb:04:ca:df:a3:da:65:bb:03:3b:67:84:ee:14:
         a6:be:e7:ec:73:8b:de:84:64:e4:d4:f0:ab:26:a9:73:8e:38:
         90:14:80:2f:28:b9:69:ce:15:98:ef:88:10:64:e2:0b:fe:35:
         ca:83:9f:bd:38:f7:8c:56:19:83:d0:6a:ae:98:30:5d:c9:63:
         13:38:9c:30:33:80:e1:3d:79:68:f3:2f:87:31:1d:8b:a9:1d:
         f5:e6:84:a5:85:4c:79:62:68:f5:38:44:0b:43:f2:40:88:a2:
         c3:23:8f:0d:e6:1e:d1:df:3b:fe:52:2f:77:a8:30:01:68:f2:
         c8:1f:69:9a:13:9c:14:a7:3e:e6:a0:23:3f:4e:0b:87:c1:d6:
         f9:2d:84:2c:b2:73:a6:42:40:00:b7:d3:33:5b:fb:33:13:29:
         ed:ba:a9:8b:0d:96:57:cf:bd:b8:2e:9c:7e:78:5f:e0:5d:42:
         48:f5:18:d9:19:80:f0:d7:38:44:96:bb:a5:10:1e:36:cb:5d:
         ec:77:21:51:3c:f2:c6:00:31:48:09:a3:08:4f:2e:5a:90:b0:
         7d:4a:12:25:7f:63:17:98:cc:4c:58:4f:56:2c:08:31:3c:62:
         82:b0:40:1e:29:dd:ff:37:71:f3:08:9f:48:ea:2e:11:99:85:
         77:23:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org