Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/323830343a376161343a633030303a3a2f33342d3334203d3e20323731333833.roa
File:                     323830343a376161343a633030303a3a2f33342d3334203d3e20323731333833.roa (raw, json)
Hash identifier:          AgrwBSmHRbrr4BQgkA3AzlD5F/kesFubX1sK4ra3fEQ=
Subject key identifier:   2B:26:01:2B:09:CA:2C:2C:28:1D:CB:45:D5:36:50:C0:9C:0A:69:F7
Certificate issuer:       /CN=796F564AEAADE5A568F1954847A0276FEAA52A25
Certificate serial:       7D628C30CB187A267E869C069DA827AD32102537
Authority key identifier: 79:6F:56:4A:EA:AD:E5:A5:68:F1:95:48:47:A0:27:6F:EA:A5:2A:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/796F564AEAADE5A568F1954847A0276FEAA52A25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/323830343a376161343a633030303a3a2f33342d3334203d3e20323731333833.roa
Signing time:             Fri 14 Apr 2023 13:20:23 +0000
ROA not before:           Fri 14 Apr 2023 13:15:23 +0000
ROA not after:            Fri 12 Apr 2024 13:20:23 +0000
asID:                     271383
IP address blocks:        2804:7aa4:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:62:8c:30:cb:18:7a:26:7e:86:9c:06:9d:a8:27:ad:32:10:25:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796F564AEAADE5A568F1954847A0276FEAA52A25
        Validity
            Not Before: Apr 14 13:15:23 2023 GMT
            Not After : Apr 12 13:20:23 2024 GMT
        Subject: CN=2B26012B09CA2C2C281DCB45D53650C09C0A69F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:de:34:25:62:a6:ac:0f:69:41:a2:74:a0:b5:
                    c1:ca:21:d5:53:0a:9a:d6:37:8f:c6:a8:d5:d7:95:
                    69:09:c9:78:e1:83:39:4c:dc:a3:fc:9c:dd:60:93:
                    8d:66:2f:de:5e:ff:0e:a8:c5:d3:89:36:15:96:95:
                    9d:79:b4:ca:97:57:35:e8:1c:dc:15:62:7b:34:0b:
                    17:77:e3:f9:15:99:0b:65:24:37:1f:22:50:6e:f2:
                    96:97:01:3f:4a:6f:d0:7b:6f:7e:ab:61:d1:5d:9b:
                    1c:fa:09:85:73:db:8a:d4:a6:8d:3f:9e:a2:72:51:
                    9d:4b:46:7a:87:ff:fb:4a:06:38:a4:a5:fe:a4:b5:
                    5f:05:61:3b:97:24:85:e7:d1:94:84:9a:1a:2a:a1:
                    76:13:38:45:9e:b3:31:3c:25:b2:0b:de:f3:d4:6d:
                    d1:48:a5:70:a1:a7:55:b1:4f:3f:10:9f:8c:84:bd:
                    c3:28:b0:9b:5b:e0:70:43:14:d9:ba:38:8b:8a:bd:
                    89:ea:2e:16:0e:b7:9a:3a:5d:89:e6:70:3f:d4:a6:
                    db:85:3f:31:47:35:fa:9e:1a:7a:4d:87:0c:dd:33:
                    9b:a8:d4:a3:63:00:32:63:e0:71:47:2b:da:13:59:
                    fd:96:ef:4e:58:a0:5b:c4:27:9a:9b:ed:ba:c3:2c:
                    a3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:26:01:2B:09:CA:2C:2C:28:1D:CB:45:D5:36:50:C0:9C:0A:69:F7
            X509v3 Authority Key Identifier:
                keyid:79:6F:56:4A:EA:AD:E5:A5:68:F1:95:48:47:A0:27:6F:EA:A5:2A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/796F564AEAADE5A568F1954847A0276FEAA52A25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/796F564AEAADE5A568F1954847A0276FEAA52A25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/323830343a376161343a633030303a3a2f33342d3334203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7aa4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:8c:dc:e9:2c:15:88:23:88:d7:57:2f:d0:c2:46:c1:7a:d8:
         0c:e2:de:56:42:3a:ce:36:b2:ee:2f:c4:ba:1d:68:20:23:20:
         54:5e:e8:c2:79:4c:84:2c:ea:59:ff:69:35:12:4d:fd:e6:28:
         45:d4:21:33:e3:7b:18:a1:2c:a7:4a:5f:69:3c:7e:cc:05:81:
         3d:a9:4f:ae:21:36:a6:f6:34:66:cb:5d:f3:f8:11:c2:bf:08:
         bc:bc:cc:38:55:9a:74:02:00:b2:12:69:02:f4:08:6c:70:22:
         cc:95:cd:5f:cb:ad:e9:a1:02:a8:af:a3:5f:89:92:5f:6a:ed:
         6d:70:a1:2a:a2:67:5c:4b:29:e2:75:34:8b:6b:81:0c:61:91:
         cc:28:29:d5:69:2d:f1:dc:c6:26:f7:ec:fa:b7:67:40:52:8d:
         e8:ec:4d:a3:a2:e6:f0:f3:b2:c7:77:0f:5d:a4:f8:1b:1b:03:
         ed:5c:37:5e:5a:95:61:ce:23:43:e8:8c:c7:38:2a:f3:9c:b1:
         fc:7e:4b:3b:a3:6c:bd:e0:49:a5:d9:5c:51:e6:78:6e:fc:8a:
         ce:e0:a5:18:bf:0c:55:56:69:a8:a8:cd:c8:10:3a:86:90:93:
         db:bf:96:47:06:f0:f8:fd:3b:33:99:8b:6b:5f:6c:bc:3d:1e:
         c9:c9:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org