Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          F120Jbsa6ZtmGLjEDZcLecjne3nvCVtTy3e4Az9UA7w=
Subject key identifier:   63:1E:57:84:83:8C:D0:5A:6A:29:96:0B:4F:9E:B1:02:8F:30:7B:FD
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       6F7A429FB9EB4B2BCF443F4760C482770AF82698
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:02 +0000
ROA not before:           Tue 26 Sep 2023 14:55:02 +0000
ROA not after:            Tue 24 Sep 2024 15:00:02 +0000
asID:                     266248
IP address blocks:        2804:3d04:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7a:42:9f:b9:eb:4b:2b:cf:44:3f:47:60:c4:82:77:0a:f8:26:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:02 2023 GMT
            Not After : Sep 24 15:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e0:6a:ed:15:5f:78:82:76:5a:14:50:a9:b8:
                    37:76:1c:60:d4:3a:96:d3:1b:e4:8f:48:3c:fd:e2:
                    78:94:97:d8:43:1e:02:cb:3a:d3:a9:75:b0:7e:77:
                    66:d2:b3:1e:32:52:19:97:82:11:ef:a6:f3:94:ef:
                    ce:74:38:e5:75:a6:6f:c2:00:62:2f:07:22:a5:f7:
                    3d:80:06:05:fb:fd:01:c2:f9:22:13:24:48:49:c1:
                    13:f0:86:24:f1:89:8f:18:16:ee:11:b1:7a:83:b8:
                    92:15:d3:09:b7:2a:83:f2:5e:59:27:97:ed:cd:6e:
                    08:b5:e5:fa:ef:4c:66:c0:3e:0f:a7:71:0b:8a:a2:
                    90:a6:d2:42:5a:09:2d:13:ba:9f:e5:62:39:70:4d:
                    c9:84:38:27:52:4f:4a:48:f7:54:c1:fe:43:c1:7c:
                    84:80:fe:ad:95:1a:d0:c3:dd:69:a4:e0:b8:34:5f:
                    d5:61:f2:f0:35:a8:50:b5:29:e3:43:9c:4d:78:f5:
                    00:fa:18:2f:e5:33:88:94:0d:dc:d5:ec:17:2b:af:
                    59:d4:d0:a3:ba:67:b0:5c:71:ba:32:40:7b:50:d4:
                    92:ac:d0:c8:e7:43:40:8f:a2:cc:04:fb:60:ff:5f:
                    69:a8:82:c7:4a:1d:3c:1d:e9:48:80:41:b7:46:ae:
                    0a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1E:57:84:83:8C:D0:5A:6A:29:96:0B:4F:9E:B1:02:8F:30:7B:FD
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2f:08:2f:74:75:4a:25:08:a6:ca:83:83:a9:20:91:8d:4a:1c:
         35:39:c5:c2:79:b7:00:8a:7f:4f:69:cf:e2:4e:a0:cb:a5:11:
         36:e8:dc:a3:22:44:af:66:d4:5e:ef:11:60:d4:f8:d5:2c:54:
         ce:e8:1c:73:5d:16:3b:59:33:1d:9b:61:81:49:34:1a:dc:80:
         ac:29:c4:fc:51:7e:43:1a:a3:b4:b9:b3:df:4d:1c:3f:14:4d:
         f6:48:cf:b9:d7:af:84:06:9c:03:f3:7e:65:55:2e:49:3f:3a:
         1e:02:06:ef:72:c1:9c:7d:85:e3:ca:b4:2e:71:02:70:2f:f8:
         1f:db:97:56:7a:8f:2c:a7:3c:13:af:ff:0a:0c:ae:f8:fa:b2:
         7c:3c:84:0b:58:2f:f3:c7:a8:f3:85:5e:7f:05:6e:7d:59:4c:
         18:39:92:2a:5a:c6:20:35:bf:2e:55:80:8e:d5:43:e7:ec:97:
         85:99:9d:68:cd:dc:14:84:5b:8f:0b:08:cf:8e:56:4e:3b:82:
         9b:cb:0f:c9:0a:3f:5d:14:ce:01:29:f2:45:a9:e0:ff:93:01:
         3b:c1:32:00:ee:88:48:1b:b0:bf:af:91:e1:77:8a:d4:fa:3c:
         10:c3:bb:2b:dd:4a:54:fd:f1:ba:70:82:ef:44:73:df:38:d7:
         e0:df:cd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org