Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a3a2f33332d3333203d3e20323636323438.roa
File:                     323830343a336430343a3a2f33332d3333203d3e20323636323438.roa (raw, json)
Hash identifier:          yfuKH5CF8oAa5OCqWEGxCtnMmuRZ10UASSU8Z5WEk1o=
Subject key identifier:   A8:70:11:DF:E3:AF:FC:E3:D8:5F:C5:1A:6B:F1:4C:B7:D1:F4:7C:25
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       6FFBFF2D534620A678F42745A3D6FD87513E845E
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a3a2f33332d3333203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 14:00:00 +0000
ROA not before:           Tue 26 Sep 2023 13:55:00 +0000
ROA not after:            Tue 24 Sep 2024 14:00:00 +0000
asID:                     266248
IP address blocks:        2804:3d04::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fb:ff:2d:53:46:20:a6:78:f4:27:45:a3:d6:fd:87:51:3e:84:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 13:55:00 2023 GMT
            Not After : Sep 24 14:00:00 2024 GMT
        Subject: CN=3082010A0282010100D2B14E259C87B6E083B008245A54379993E4FFC27E2B4651CD0523D523CEEF995B734D2809065E569B006D7925296D2C62163DB21B17AAE0B3B63015072701FE1099354C2CF62FA8C84B223B3635C495BE40BE3C17A1AD756F8BE28AFBBBA9E6C8451C5FECB5F0B5768D594AE662238117C5F131E54A78CBA0B2541E9222AB6C5C1A3BE490DCA226162C44ECC14F9980A707A902B456472D4BB6D8B7E7DC96008F6A23363F1155809026D411C4BCD392BC0009D763E7E6D9C94BDFE6485801EC84AEBBA3A0A26A9755059EBD21B30E5F02CCFE7411AAE61AA5711BE509F74CC4CD13FA9BBC580B4C22EB2250E42173B51C89D40F035C8F8C2E231904279DD3D30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b1:4e:25:9c:87:b6:e0:83:b0:08:24:5a:54:
                    37:99:93:e4:ff:c2:7e:2b:46:51:cd:05:23:d5:23:
                    ce:ef:99:5b:73:4d:28:09:06:5e:56:9b:00:6d:79:
                    25:29:6d:2c:62:16:3d:b2:1b:17:aa:e0:b3:b6:30:
                    15:07:27:01:fe:10:99:35:4c:2c:f6:2f:a8:c8:4b:
                    22:3b:36:35:c4:95:be:40:be:3c:17:a1:ad:75:6f:
                    8b:e2:8a:fb:bb:a9:e6:c8:45:1c:5f:ec:b5:f0:b5:
                    76:8d:59:4a:e6:62:23:81:17:c5:f1:31:e5:4a:78:
                    cb:a0:b2:54:1e:92:22:ab:6c:5c:1a:3b:e4:90:dc:
                    a2:26:16:2c:44:ec:c1:4f:99:80:a7:07:a9:02:b4:
                    56:47:2d:4b:b6:d8:b7:e7:dc:96:00:8f:6a:23:36:
                    3f:11:55:80:90:26:d4:11:c4:bc:d3:92:bc:00:09:
                    d7:63:e7:e6:d9:c9:4b:df:e6:48:58:01:ec:84:ae:
                    bb:a3:a0:a2:6a:97:55:05:9e:bd:21:b3:0e:5f:02:
                    cc:fe:74:11:aa:e6:1a:a5:71:1b:e5:09:f7:4c:c4:
                    cd:13:fa:9b:bc:58:0b:4c:22:eb:22:50:e4:21:73:
                    b5:1c:89:d4:0f:03:5c:8f:8c:2e:23:19:04:27:9d:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:70:11:DF:E3:AF:FC:E3:D8:5F:C5:1A:6B:F1:4C:B7:D1:F4:7C:25
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a3a2f33332d3333203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04::/33

    Signature Algorithm: sha256WithRSAEncryption
         e2:c5:dd:8b:96:10:ef:02:22:b9:ce:09:a2:d1:ca:9b:0f:15:
         9f:47:2c:3c:91:90:3d:f0:c4:5d:49:a6:e5:e1:50:a0:a2:cc:
         dd:36:24:4c:86:10:ff:b8:a6:09:44:1e:61:07:86:39:f5:27:
         29:23:50:e7:10:09:ff:81:d9:27:e2:9e:a9:bb:99:ef:db:95:
         19:24:ba:fb:b4:ee:f7:6e:8a:36:bc:87:98:6c:ba:8a:b7:3f:
         5b:f8:69:19:3e:0b:3f:d6:d1:46:9a:3d:6a:49:b7:2a:aa:5d:
         f4:5f:2e:63:7a:b2:d8:51:3b:9e:d3:bc:34:dc:b5:fc:cb:b3:
         ca:57:2e:20:e3:a4:71:f6:ff:85:cb:1e:c5:57:6e:f5:71:11:
         82:c6:ed:38:06:ef:c9:45:71:71:3b:e6:60:26:82:c5:13:cb:
         10:32:a1:af:8f:c7:a1:4c:ee:bd:9d:4e:25:a1:61:6c:92:ea:
         58:a0:f2:fd:b3:f4:30:29:ff:29:2e:99:d2:39:86:ba:69:95:
         12:90:55:b5:7e:86:66:0b:17:3b:8f:50:14:78:42:bf:b6:f3:
         0d:51:a0:8d:ec:0a:5c:12:4b:a3:13:54:91:78:72:78:e9:0c:
         50:b5:06:2d:9a:af:42:4d:fd:20:89:99:f1:af:6f:19:bd:e0:
         7c:df:e9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org