Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/323830343a376663383a3a2f33322d3336203d3e20323731373039.roa
File:                     323830343a376663383a3a2f33322d3336203d3e20323731373039.roa (raw, json)
Hash identifier:          xth6sWS7jnU25I+UtzaXn0cHM3qQsQSJME8m1cm/te4=
Subject key identifier:   DC:2B:4C:42:8E:84:52:5C:EF:B5:5F:11:19:25:09:D8:E6:E5:8B:FA
Certificate issuer:       /CN=6FF8AADDFC591015FA1AADC08B1B258BB6366A79
Certificate serial:       5C61409E6066951D7B8E5FE01265398C4179F517
Authority key identifier: 6F:F8:AA:DD:FC:59:10:15:FA:1A:AD:C0:8B:1B:25:8B:B6:36:6A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FF8AADDFC591015FA1AADC08B1B258BB6366A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/323830343a376663383a3a2f33322d3336203d3e20323731373039.roa
Signing time:             Wed 16 Aug 2023 17:50:15 +0000
ROA not before:           Wed 16 Aug 2023 17:45:15 +0000
ROA not after:            Wed 14 Aug 2024 17:50:15 +0000
asID:                     271709
IP address blocks:        2804:7fc8::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:61:40:9e:60:66:95:1d:7b:8e:5f:e0:12:65:39:8c:41:79:f5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF8AADDFC591015FA1AADC08B1B258BB6366A79
        Validity
            Not Before: Aug 16 17:45:15 2023 GMT
            Not After : Aug 14 17:50:15 2024 GMT
        Subject: CN=DC2B4C428E84525CEFB55F11192509D8E6E58BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f3:cf:3e:6c:8d:87:0e:57:68:b0:be:36:23:
                    4c:79:b6:5a:72:55:3a:c6:b6:c4:0b:cd:80:16:32:
                    be:ac:71:b9:5b:6e:e9:ad:97:c8:a4:24:53:ad:78:
                    3b:b4:6f:7e:a1:2b:f7:46:38:1c:8f:19:ea:26:d4:
                    76:6f:e1:8d:90:11:2f:63:35:d6:1f:f2:1d:54:69:
                    62:fd:22:d3:4e:cf:9c:78:6c:f3:f0:b5:6e:91:24:
                    57:8b:3f:21:94:4b:2e:3a:7f:c3:00:54:6d:af:8e:
                    af:58:9d:33:e4:e9:e5:dd:0c:bb:63:b3:ab:6a:24:
                    87:02:6b:b0:30:5d:67:17:3f:4c:34:a2:66:2d:fd:
                    b2:47:2f:3e:7a:4e:19:b5:19:3a:c4:37:c0:61:10:
                    70:4f:54:77:5a:2a:d9:6c:eb:fe:94:fc:90:15:82:
                    7d:e2:2c:9a:9d:b6:dc:a5:89:6f:46:a8:35:51:e9:
                    41:91:ea:8e:d5:09:7d:d1:0a:e9:2a:4b:0b:37:79:
                    e6:87:11:ed:6c:7a:9b:af:97:cf:e6:fe:52:b9:25:
                    8b:a4:13:96:67:bd:5f:5b:0b:24:df:3c:f2:18:56:
                    90:ef:0a:df:5d:fc:71:b7:11:8b:7e:82:b3:cf:cf:
                    a3:1c:e6:90:7d:28:47:e8:37:67:e8:b9:45:5a:e0:
                    23:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2B:4C:42:8E:84:52:5C:EF:B5:5F:11:19:25:09:D8:E6:E5:8B:FA
            X509v3 Authority Key Identifier:
                keyid:6F:F8:AA:DD:FC:59:10:15:FA:1A:AD:C0:8B:1B:25:8B:B6:36:6A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/6FF8AADDFC591015FA1AADC08B1B258BB6366A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FF8AADDFC591015FA1AADC08B1B258BB6366A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/323830343a376663383a3a2f33322d3336203d3e20323731373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:8d:33:06:59:af:a8:02:6f:13:db:82:62:1d:78:cf:12:14:
         15:df:d0:32:23:30:b6:09:9d:4c:14:7f:a8:d3:54:60:fe:63:
         1b:2a:63:56:e7:29:0c:79:54:7b:22:ff:e8:74:a6:8f:ee:d9:
         79:fa:bc:de:36:24:0f:83:e7:2e:c8:59:d9:96:f6:cf:a9:03:
         6f:58:9c:ad:b8:25:e5:8a:cc:ea:19:db:b9:8e:a6:7d:35:44:
         e8:60:b8:86:1a:ce:35:a6:05:4f:bb:6c:53:97:e2:2b:f0:c4:
         6d:f1:3a:e8:74:16:77:38:fa:28:bb:41:48:2d:d9:f4:25:6e:
         70:0d:f9:59:9c:49:ec:e2:c1:1f:59:68:9d:d0:ca:21:8f:9d:
         31:42:65:06:40:9b:0b:28:93:b1:8b:2e:bd:60:16:03:25:b3:
         7d:4f:6f:9c:a7:d2:46:48:fd:b8:99:b3:4e:3e:d8:23:82:0a:
         7c:a9:da:43:8b:0d:90:19:c5:eb:c9:11:d0:0f:a8:70:ff:7b:
         9f:c6:9c:7a:6f:8c:aa:f0:eb:04:01:0c:b4:90:86:1b:c1:c1:
         e4:c1:7e:82:55:53:52:82:e5:90:96:92:d7:e1:9c:1e:ba:d8:
         7c:06:bd:60:9a:a2:3a:9a:6e:a9:68:b4:2e:a0:07:30:bf:f3:
         e3:5a:95:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org