Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33322d3332203d3e203631363134.roa
File:                     323830343a346166633a3a2f33322d3332203d3e203631363134.roa (raw, json)
Hash identifier:          HNmSOIsUwTaqC7xjpYDm3jm13i1Uy14gIDs5xzPsyTI=
Subject key identifier:   CF:7B:A7:31:7C:49:2A:AF:29:81:4C:3D:E2:27:7A:D3:2A:7F:E1:17
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       31E12D694059DE2F8CA924E5DF3642BEAF7AA2F1
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33322d3332203d3e203631363134.roa
Signing time:             Mon 11 Sep 2023 11:20:11 +0000
ROA not before:           Mon 11 Sep 2023 11:15:11 +0000
ROA not after:            Mon 09 Sep 2024 11:20:11 +0000
asID:                     61614
IP address blocks:        2804:4afc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e1:2d:69:40:59:de:2f:8c:a9:24:e5:df:36:42:be:af:7a:a2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Sep 11 11:15:11 2023 GMT
            Not After : Sep  9 11:20:11 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:6f:ef:3a:32:cb:e1:cf:90:ef:87:37:a7:
                    2e:cb:69:56:65:41:64:38:cf:a9:d3:cb:fe:b5:d2:
                    c3:2a:66:03:cd:b8:91:ff:3f:08:b0:ea:87:21:53:
                    6e:dc:02:4a:9f:fc:d3:09:d6:d3:a0:57:92:0f:92:
                    3a:3c:fb:9a:3b:ac:b7:36:31:30:28:df:7d:85:f1:
                    75:26:81:3e:2c:67:85:31:2f:3d:67:a5:a6:f8:6d:
                    4e:df:59:42:71:63:f8:02:75:b5:a8:8c:65:b9:c7:
                    39:8e:ff:29:bf:ad:6e:88:cb:02:2b:0a:1c:9c:f6:
                    e6:0c:74:60:05:8b:36:59:1c:b8:bd:a8:b6:3e:b1:
                    98:3e:06:e9:e4:39:9c:1f:68:cb:cb:26:c0:e1:70:
                    37:b4:2a:39:11:d7:93:87:cb:ae:fd:ec:d1:18:6b:
                    44:14:11:fc:ce:90:0d:8f:e5:f3:2c:bd:9e:1d:36:
                    14:f4:65:63:79:e5:5a:85:0d:4d:e0:60:03:cd:a1:
                    61:2d:ce:75:5b:54:d1:ff:5f:92:ca:b9:e5:21:70:
                    4c:2d:53:39:28:5d:57:eb:f8:86:0e:b2:1e:5b:9d:
                    08:a0:bf:40:f6:ed:02:b2:7c:a9:5a:e2:92:77:18:
                    2e:79:30:dd:4b:7c:9c:2e:90:5c:13:6c:ee:f7:83:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7B:A7:31:7C:49:2A:AF:29:81:4C:3D:E2:27:7A:D3:2A:7F:E1:17
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33322d3332203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:0b:f2:23:8b:54:44:36:a6:e7:52:ec:14:ab:35:d6:bc:b5:
         2e:9c:0b:fd:0b:7b:00:ea:fd:15:de:44:cf:f5:ed:3c:ec:d0:
         cb:d2:b2:dd:e3:06:b4:c3:a0:fd:02:62:cc:da:19:30:ca:ec:
         64:5d:88:0d:27:1e:3b:67:d5:17:f0:4f:9e:c2:48:8f:b4:be:
         cd:e4:4b:62:aa:94:a3:ab:ae:5a:79:4d:f7:5e:a9:d9:bb:83:
         68:2c:b7:ce:49:da:2b:f0:04:40:b7:f4:45:25:78:23:2a:a9:
         2f:a8:29:0d:9f:15:17:3b:9c:b1:ed:8a:8a:ec:a4:d0:74:bb:
         c9:60:d8:0f:b0:0d:f9:ac:e2:78:56:7d:76:ba:5f:b7:33:c7:
         ae:ad:0c:58:9b:89:49:74:d4:e5:94:b4:ec:e4:62:ce:19:a9:
         65:bd:25:ab:29:f0:8b:71:b1:7f:19:3d:2f:16:35:35:17:8b:
         d0:8e:11:f1:8a:9f:95:97:db:9f:5a:2b:bb:20:18:69:e3:d6:
         b0:39:e3:75:67:03:bd:cf:6b:58:ad:d9:cb:9a:5d:35:cf:27:
         68:07:87:92:ce:9a:e6:37:26:5c:28:72:f4:bb:90:71:9f:c6:
         34:71:50:99:40:84:e0:91:c8:0a:5a:e1:36:da:2c:70:c0:d7:
         26:1d:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org