Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/323830343a376663383a3a2f33322d3332203d3e20323731373039.roa
File:                     323830343a376663383a3a2f33322d3332203d3e20323731373039.roa (raw, json)
Hash identifier:          Pfl611b4rmr7wnUOxNXeoxryfr29XrfKfRqawK5AR1I=
Subject key identifier:   5C:D6:C1:9E:30:0D:19:B0:96:BD:C5:D7:BB:68:4E:D3:EC:DE:42:EB
Certificate issuer:       /CN=20E9D85E79A546158DBAD7A0569AEE88FB75A3EF
Certificate serial:       4B79F0C754550A48A8C20B686B291D36C3E5FEAB
Authority key identifier: 20:E9:D8:5E:79:A5:46:15:8D:BA:D7:A0:56:9A:EE:88:FB:75:A3:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20E9D85E79A546158DBAD7A0569AEE88FB75A3EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/323830343a376663383a3a2f33322d3332203d3e20323731373039.roa
Signing time:             Tue 12 Dec 2023 15:32:41 +0000
ROA not before:           Tue 12 Dec 2023 15:27:41 +0000
ROA not after:            Tue 10 Dec 2024 15:32:41 +0000
asID:                     271709
IP address blocks:        2804:7fc8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:79:f0:c7:54:55:0a:48:a8:c2:0b:68:6b:29:1d:36:c3:e5:fe:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20E9D85E79A546158DBAD7A0569AEE88FB75A3EF
        Validity
            Not Before: Dec 12 15:27:41 2023 GMT
            Not After : Dec 10 15:32:41 2024 GMT
        Subject: CN=5CD6C19E300D19B096BDC5D7BB684ED3ECDE42EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:ca:07:a4:9d:c3:ce:c4:85:15:0c:cc:f7:
                    ba:fb:86:31:1e:ca:c4:39:71:d7:d5:6c:ec:ed:65:
                    36:6f:ee:87:96:45:38:96:5a:96:bf:23:71:1a:02:
                    72:73:68:d5:39:e5:04:a6:96:c1:c7:97:ac:f6:b4:
                    2f:a5:20:c1:03:a6:70:1c:47:6d:be:e7:d6:15:13:
                    f5:13:60:38:5d:3c:bb:0f:9c:ac:ee:48:ef:cb:ce:
                    97:63:60:1c:75:96:8a:87:4e:90:3f:f2:63:1d:7a:
                    5f:8f:ce:0f:09:54:c0:31:40:10:d8:cd:56:48:18:
                    dc:8c:37:b7:49:68:7e:c3:97:66:5e:c4:01:91:f5:
                    ee:bf:a3:29:c5:ff:3e:64:62:28:f8:1e:61:4e:8b:
                    a3:8c:de:e9:3d:3f:09:f5:d3:fe:ed:76:97:43:07:
                    b2:d9:18:e7:75:4d:22:08:33:55:3d:c8:1b:49:cb:
                    71:2b:aa:c5:40:af:4d:f4:10:ec:b5:b3:fa:0f:2b:
                    79:dc:d1:9d:e6:b4:16:fc:23:c1:02:33:31:8e:60:
                    b9:85:98:d5:20:99:14:a1:aa:88:c0:3e:6d:fc:5b:
                    f1:bf:59:5c:26:c8:1d:ea:3e:e6:04:62:ae:e9:ce:
                    6d:55:6c:f5:4b:6e:c7:16:c2:5c:78:81:a3:8c:34:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D6:C1:9E:30:0D:19:B0:96:BD:C5:D7:BB:68:4E:D3:EC:DE:42:EB
            X509v3 Authority Key Identifier:
                keyid:20:E9:D8:5E:79:A5:46:15:8D:BA:D7:A0:56:9A:EE:88:FB:75:A3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/20E9D85E79A546158DBAD7A0569AEE88FB75A3EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20E9D85E79A546158DBAD7A0569AEE88FB75A3EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/323830343a376663383a3a2f33322d3332203d3e20323731373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:58:93:f2:68:36:09:63:f9:c9:27:5c:03:02:3a:dd:0d:7d:
         27:b3:91:0f:f1:bc:81:9c:82:8f:38:b1:49:f7:31:49:3f:ac:
         01:9f:77:06:bb:15:de:ad:32:08:55:98:36:f3:94:1d:7e:dc:
         bc:cb:9c:49:bc:ca:4c:5e:36:dd:22:c3:84:d4:98:9b:19:1a:
         25:ca:1f:f7:5d:1f:2d:60:09:7f:30:ef:a9:2f:50:c7:ed:d0:
         54:e5:fb:bd:ac:89:8b:ef:05:16:99:b5:7d:01:00:82:dd:76:
         56:41:c8:b7:1d:37:e1:cc:64:9f:17:fb:5c:e0:96:e4:96:68:
         37:da:42:ab:3a:1d:41:2d:fd:35:f7:14:3d:3b:7a:c1:74:2a:
         c3:01:a3:f7:29:84:b4:6b:81:2a:8d:92:1e:b3:d3:af:0d:f3:
         f1:57:32:16:b6:b3:85:9b:24:e2:7f:52:43:fe:3f:5c:9a:9b:
         06:ab:03:31:51:ba:9d:61:b0:98:cc:c4:56:61:08:07:88:90:
         18:60:a4:a3:3c:34:c6:4b:bd:cc:d5:44:eb:af:b6:f0:80:4f:
         78:af:23:52:42:42:78:52:2e:cf:ec:c9:44:23:f1:0a:1a:1e:
         35:c0:e4:db:d5:8c:70:5f:e1:a7:1e:f6:c0:b8:2a:38:cb:77:
         7d:5b:e0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org