Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a383030303a3a2f33352d3335203d3e20323637323736.roa
File:                     323830343a346166633a383030303a3a2f33352d3335203d3e20323637323736.roa (raw, json)
Hash identifier:          1cyEfihX4IrYWxj/XtYXBxQyDtz4al8LB7F4JD+GtK8=
Subject key identifier:   0C:AB:72:12:F6:31:1B:79:46:6B:EF:7B:37:14:E7:33:7C:9C:4E:21
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       6A7678C331BF30F161C62FBA3C7D3CC01AD1A29D
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a383030303a3a2f33352d3335203d3e20323637323736.roa
Signing time:             Wed 07 Jun 2023 17:37:05 +0000
ROA not before:           Wed 07 Jun 2023 17:32:05 +0000
ROA not after:            Wed 05 Jun 2024 17:37:05 +0000
asID:                     267276
IP address blocks:        2804:4afc:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:76:78:c3:31:bf:30:f1:61:c6:2f:ba:3c:7d:3c:c0:1a:d1:a2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Jun  7 17:32:05 2023 GMT
            Not After : Jun  5 17:37:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b4:b3:91:e6:97:54:d7:04:68:a5:f2:f0:35:
                    af:88:f1:0f:5c:f7:83:87:d9:01:e8:51:c6:67:cd:
                    18:4d:6f:c2:0a:46:92:ae:cd:cc:7a:85:38:af:bc:
                    ef:40:25:e7:f0:0a:11:39:1a:a3:90:a5:44:fe:3f:
                    5f:a1:17:ff:80:62:f1:78:c8:09:38:1d:24:71:b5:
                    d1:1f:a6:14:e1:d3:7a:66:60:f0:de:97:0b:b1:c9:
                    5f:71:4f:e9:82:a9:6e:eb:48:2d:98:5c:5c:db:dd:
                    5a:35:65:1d:93:f7:15:10:fe:0c:11:85:4a:04:46:
                    8c:c2:19:2d:61:c9:2e:78:da:2e:36:bc:9b:6d:d9:
                    c1:c2:f6:66:5c:eb:10:98:3d:e1:30:c4:fb:b7:9b:
                    c9:71:c4:f5:48:d2:ab:d3:aa:fd:26:f2:bc:bb:4c:
                    cd:1f:3f:1e:9f:65:43:1c:4b:bc:b6:27:88:45:56:
                    6d:16:46:39:ed:d6:85:b8:77:72:10:04:e5:27:97:
                    82:24:70:e3:1b:e1:1d:80:f7:6f:0b:d1:4e:0f:a6:
                    b8:5e:32:40:b7:09:b3:c8:71:3b:3e:d7:b7:7a:b6:
                    cc:58:29:77:ab:57:6c:38:c5:4c:e3:e6:69:08:46:
                    24:ad:e8:58:30:27:c6:40:ea:dc:d8:38:85:a0:e9:
                    d6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AB:72:12:F6:31:1B:79:46:6B:EF:7B:37:14:E7:33:7C:9C:4E:21
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a383030303a3a2f33352d3335203d3e20323637323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9f:ee:6f:91:15:33:58:d6:fe:98:bd:19:91:70:ac:54:b7:11:
         3f:79:e8:50:14:05:7a:7a:b0:34:b3:d3:26:ca:bf:56:1e:5d:
         13:db:c6:96:0c:3c:9f:fe:2b:ae:49:54:cf:cc:9e:20:fc:73:
         1c:20:76:02:89:bf:c4:c6:3f:36:05:f1:a3:d5:3a:a8:c3:f3:
         c2:c6:52:9d:15:cc:f7:5f:9d:38:16:2b:f4:2f:99:ce:0d:3a:
         49:ce:48:7a:e9:c1:4a:47:83:6d:24:2a:70:2d:bf:c5:9b:43:
         f7:51:02:8c:c1:9b:9a:0b:6f:53:1d:a4:47:23:39:ee:1a:e7:
         09:19:16:ab:c5:b9:68:a9:7f:cf:91:45:22:8c:f6:13:e7:11:
         52:d6:f7:13:99:af:71:f1:c2:7c:7f:c9:81:fc:a3:3c:1c:a3:
         b0:c8:c7:99:c3:62:ed:53:09:a1:74:3b:b2:12:43:bc:4c:50:
         88:1c:c5:c6:18:55:2d:7f:31:df:4f:a3:b1:31:f4:e2:92:1b:
         fe:a2:b6:d3:4c:bf:30:a9:87:f1:ed:6d:2f:a7:23:7a:13:7f:
         67:8f:02:b7:bc:89:8e:c4:4f:10:d5:da:06:3b:a8:06:a9:0b:
         4e:32:5a:01:37:50:a6:b7:62:7f:a3:5b:3c:be:ce:cb:74:20:
         65:45:b9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org