Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a383030303a3a2f33332d3333203d3e203631363134.roa
File:                     323830343a346166633a383030303a3a2f33332d3333203d3e203631363134.roa (raw, json)
Hash identifier:          pwYQ57ejYqWy7U/ieCRlCM9DMLAieV0vIdmcG6bdETc=
Subject key identifier:   72:B7:48:A4:CD:E0:B6:92:21:CA:6A:19:99:A3:F0:9B:9D:E7:00:A0
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       32737F972C7E2165AF8A169CF877E4640CC1268B
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a383030303a3a2f33332d3333203d3e203631363134.roa
Signing time:             Mon 11 Sep 2023 11:20:12 +0000
ROA not before:           Mon 11 Sep 2023 11:15:12 +0000
ROA not after:            Mon 09 Sep 2024 11:20:12 +0000
asID:                     61614
IP address blocks:        2804:4afc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:73:7f:97:2c:7e:21:65:af:8a:16:9c:f8:77:e4:64:0c:c1:26:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Sep 11 11:15:12 2023 GMT
            Not After : Sep  9 11:20:12 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:06:54:5a:cf:13:69:3f:15:6e:18:dd:cf:
                    41:9e:f6:fb:32:2f:d5:12:08:c4:ac:08:04:e1:a5:
                    bf:81:73:e0:4b:c0:5b:41:7d:35:ca:c4:02:5a:97:
                    7d:bb:c4:f7:5b:d6:8b:c4:4a:d8:09:af:8c:3e:94:
                    01:e5:fd:0c:3b:c4:cf:55:93:e8:53:68:f1:7e:c9:
                    80:94:30:a7:8b:1a:38:e0:ae:68:ee:be:2f:c2:4e:
                    2d:68:bb:6b:06:bd:d5:8e:44:6c:03:d2:d7:cf:bf:
                    c8:7c:01:e7:8e:7f:d1:ec:ed:00:47:71:3a:60:2b:
                    59:6f:14:70:e8:7d:0f:4c:0e:74:4a:97:5b:ae:cb:
                    77:3e:41:2a:46:68:aa:76:5d:f8:42:59:8e:35:d3:
                    ca:fb:d2:4f:37:d7:c5:63:5b:39:89:06:8c:41:8a:
                    27:d0:a8:e0:11:9c:b9:3e:ea:73:e9:54:01:0a:46:
                    06:4b:9a:d4:05:0f:b4:5d:22:a5:91:84:fb:1a:bd:
                    3a:27:24:04:1a:36:a7:b4:92:80:df:b4:c7:28:7c:
                    96:f9:19:8a:84:ff:41:51:f7:20:64:21:70:82:bf:
                    00:4a:f9:6b:5b:a3:fd:48:67:1a:a1:15:90:8b:50:
                    f7:d4:5c:2c:c2:ff:55:d0:d7:30:65:ba:06:1a:f2:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B7:48:A4:CD:E0:B6:92:21:CA:6A:19:99:A3:F0:9B:9D:E7:00:A0
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a383030303a3a2f33332d3333203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1b:f1:66:a1:d0:be:b2:3f:b2:1b:ce:ec:8f:0e:c4:56:79:f8:
         2c:51:c5:ef:12:ac:91:f2:bf:23:1d:3e:e6:67:b9:d9:a0:99:
         7b:e2:58:28:e0:23:94:0c:24:72:f5:93:da:47:db:b5:3a:81:
         d9:09:86:87:4d:05:b5:0d:1c:c0:e5:78:0e:0d:9a:96:c0:de:
         9c:b7:58:26:ce:e6:7e:c6:63:3a:ff:f4:6b:7d:5a:7a:8e:97:
         83:50:d9:70:5d:bc:0c:48:01:c6:2d:e5:77:2f:08:9d:09:80:
         7c:18:55:75:4a:9b:3e:d8:d3:d7:98:cf:c1:27:98:fb:94:56:
         b9:c6:54:35:fe:2c:d1:fb:65:1f:42:fb:59:d7:81:62:46:25:
         e1:4e:9a:ed:70:91:ad:35:4c:b7:3f:0f:03:37:be:6d:8e:54:
         cd:31:85:d0:0b:b6:ba:14:d6:44:ef:c2:4e:c0:18:64:81:60:
         e7:24:15:69:4f:41:8e:69:59:f0:1d:8f:60:38:10:35:21:7e:
         d3:af:20:29:3c:11:b1:12:69:c4:b1:77:33:d5:9f:25:05:40:
         ec:97:02:a8:66:8c:c0:35:16:e5:7f:9a:5d:0e:de:f1:b9:d9:
         ec:fd:c3:0e:dd:3d:c1:c4:b1:b3:a0:6f:cb:12:f0:07:88:1c:
         9b:d7:08:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org