Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          olwKyAo5pk9bIUlBsY5HiMjDEbipQSitumahapokuKk=
Subject key identifier:   18:36:69:9C:14:05:EE:A8:ED:30:28:F0:27:49:75:A5:73:AC:BD:85
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       79383B13A282561CE629ABC9F2A55A5394FBD04E
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:02 +0000
ROA not before:           Tue 26 Sep 2023 14:55:02 +0000
ROA not after:            Tue 24 Sep 2024 15:00:02 +0000
asID:                     266248
IP address blocks:        2804:3d04:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:38:3b:13:a2:82:56:1c:e6:29:ab:c9:f2:a5:5a:53:94:fb:d0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:02 2023 GMT
            Not After : Sep 24 15:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:35:25:72:ca:60:f7:74:c2:be:65:1e:63:
                    2a:f0:c0:89:38:c4:a3:8c:d3:de:4d:3d:1b:ef:7a:
                    7a:8b:f1:62:5e:f1:9c:33:ef:08:bb:66:bb:c7:fe:
                    dd:fa:f8:8d:eb:25:7e:d8:c3:98:41:0c:94:76:e6:
                    67:26:73:d3:9d:0b:bb:de:f7:f1:65:f2:15:5a:db:
                    cf:c5:81:f0:11:57:27:99:f9:bf:ef:b0:0c:f6:92:
                    b7:ec:b1:01:dd:cd:f8:bc:1e:32:57:08:13:64:9e:
                    34:15:a0:fe:a5:9a:c4:bb:07:71:86:ac:99:90:b4:
                    df:ee:b5:fb:b8:e1:bc:6d:75:52:ec:50:ab:64:6d:
                    a0:d4:7f:e1:7b:5d:b0:8a:b6:5b:9f:52:17:4d:59:
                    82:44:88:0f:09:5f:f0:75:38:bb:af:b6:cc:88:2d:
                    0b:88:a0:98:9c:17:fe:e4:bf:d7:03:3e:42:50:4d:
                    0f:8d:f1:ff:a9:93:52:04:4f:c9:d7:11:3e:14:31:
                    f2:2b:19:41:52:4a:ad:60:8e:bc:89:7b:7d:55:01:
                    69:fa:e7:1e:ed:0b:c3:8d:79:db:be:4c:75:18:9f:
                    51:43:0c:9d:41:ca:ee:38:e2:c6:29:7b:3d:a8:e2:
                    c9:14:49:f4:52:f9:e1:c4:4d:57:ed:4a:3b:61:40:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:36:69:9C:14:05:EE:A8:ED:30:28:F0:27:49:75:A5:73:AC:BD:85
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:17:10:99:06:78:16:65:65:92:51:9c:79:44:5a:fc:08:5a:
         43:4c:4d:f5:87:0e:25:06:c4:1a:3d:7f:bb:a1:c9:9c:10:37:
         4d:1e:04:d4:24:e0:e8:41:dc:cf:5e:d9:a8:f5:9c:6a:db:9b:
         e4:31:ff:f8:16:38:77:81:42:fc:79:92:38:3e:d0:10:f6:f8:
         1e:85:c8:9b:20:d5:be:4e:7f:22:cb:ca:57:16:2b:f1:70:8e:
         61:1b:74:e5:e2:12:60:e7:92:c3:b0:09:69:d0:1e:fe:dc:c6:
         43:98:37:e9:7c:11:f3:31:5b:77:d3:c6:59:e1:3e:c6:03:e6:
         4b:af:e1:ef:4d:23:ee:f4:da:f2:92:81:03:13:9c:2f:09:f3:
         2a:71:b5:0f:06:41:0f:a7:c0:97:44:6b:b0:43:41:8a:52:e7:
         6e:ae:d3:12:ab:39:f1:21:d9:14:3b:da:0d:da:06:18:1b:ee:
         fd:16:10:66:00:08:87:af:aa:e9:01:99:72:a3:dd:43:ba:4e:
         5e:8c:70:9f:02:bc:f6:45:4e:c4:29:4b:fd:4b:3c:ed:5e:75:
         59:f1:bf:14:df:4c:ef:45:35:5b:b1:3b:e3:2c:22:91:c8:ed:
         a2:91:24:cf:a7:90:32:92:6f:8c:59:ef:25:82:6d:18:95:59:
         f4:18:39:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org