Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3334203d3e20323732373037.roa
File:                     323830343a383736383a3a2f33322d3334203d3e20323732373037.roa (raw, json)
Hash identifier:          Jf+3YQKrguJTtCjZakRdufly+TmG87bPBDxDfpaw1eY=
Subject key identifier:   32:9B:DF:27:32:1D:74:22:2B:17:14:A3:68:46:62:9D:20:E8:B1:65
Certificate issuer:       /CN=CAD1D2DF056D677A9269E37D134D100165F8CB7A
Certificate serial:       494B76F3B65693D2E0A8170A5A06064DF86104CA
Authority key identifier: CA:D1:D2:DF:05:6D:67:7A:92:69:E3:7D:13:4D:10:01:65:F8:CB:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAD1D2DF056D677A9269E37D134D100165F8CB7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3334203d3e20323732373037.roa
Signing time:             Tue 14 Nov 2023 12:55:39 +0000
ROA not before:           Tue 14 Nov 2023 12:50:39 +0000
ROA not after:            Tue 12 Nov 2024 12:55:39 +0000
asID:                     272707
IP address blocks:        2804:8768::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4b:76:f3:b6:56:93:d2:e0:a8:17:0a:5a:06:06:4d:f8:61:04:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD1D2DF056D677A9269E37D134D100165F8CB7A
        Validity
            Not Before: Nov 14 12:50:39 2023 GMT
            Not After : Nov 12 12:55:39 2024 GMT
        Subject: CN=329BDF27321D74222B1714A36846629D20E8B165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:04:17:6c:1a:d7:b1:51:75:f3:2c:b2:36:
                    97:e4:f7:92:f8:e4:7f:06:18:3d:4c:59:f7:74:14:
                    1b:6e:d4:5a:9c:e5:8e:5b:ca:99:a9:47:a7:c8:03:
                    ae:56:cc:b1:17:7d:22:cb:a9:2c:9d:c8:78:f4:c9:
                    a9:c5:87:4c:a0:b4:be:eb:ce:79:cf:dd:29:44:a2:
                    94:1b:b0:d2:27:aa:27:1a:95:9f:03:3f:9c:e1:2a:
                    c2:17:5e:bb:49:48:c6:97:c0:d1:09:c7:fd:9d:c1:
                    ad:be:0a:90:ad:c3:de:65:09:82:95:da:e2:c2:fc:
                    10:43:3a:ab:36:25:a4:fa:f0:23:9e:89:1b:9d:14:
                    6a:94:f3:ef:ef:2b:fd:ad:e7:42:82:ac:5a:f4:8c:
                    83:a5:5d:be:cb:ee:d3:6e:04:91:0f:80:1b:92:04:
                    ed:29:02:4d:57:f2:c5:5f:23:a1:73:33:83:0c:11:
                    5e:28:56:75:1e:48:5d:7e:a3:13:0d:51:09:4b:96:
                    1f:fb:be:15:82:9e:8c:96:78:e1:d8:ed:c1:cc:45:
                    a3:84:b6:b3:2a:73:e1:1e:3a:76:47:04:24:d2:26:
                    49:ca:dd:86:c7:21:20:63:26:00:f1:29:58:c9:93:
                    13:d3:c6:9e:29:02:5a:23:55:d1:37:95:38:0c:71:
                    2d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9B:DF:27:32:1D:74:22:2B:17:14:A3:68:46:62:9D:20:E8:B1:65
            X509v3 Authority Key Identifier:
                keyid:CA:D1:D2:DF:05:6D:67:7A:92:69:E3:7D:13:4D:10:01:65:F8:CB:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/CAD1D2DF056D677A9269E37D134D100165F8CB7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAD1D2DF056D677A9269E37D134D100165F8CB7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3334203d3e20323732373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8768::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:f2:64:2f:67:12:b0:ce:bc:47:13:cb:d5:de:82:ec:04:f2:
         b4:12:53:dd:bc:b4:b1:0e:dd:f1:6a:c0:2f:97:bf:82:94:7e:
         7d:29:49:37:91:2e:01:e5:b1:4f:50:93:61:71:89:be:5c:cd:
         cc:67:f4:a5:b9:6b:21:1a:51:4b:05:b9:b6:95:dc:c7:a7:81:
         66:d6:bc:a4:15:15:03:38:84:76:1f:15:e8:57:59:b9:1a:73:
         07:f0:62:11:4b:74:b8:74:fe:2b:f4:12:b7:4e:58:66:0a:93:
         9b:05:fb:13:70:d0:43:4e:f9:5f:dd:1c:98:16:e2:94:41:f3:
         70:9f:61:fb:26:4f:fd:40:58:9c:49:3e:2c:0e:c2:ff:b7:4e:
         5b:fa:19:bd:1e:43:07:03:49:67:32:ba:12:3d:52:3e:77:d4:
         c5:2f:1e:8f:6e:03:1b:01:a6:da:45:06:9c:fb:4e:f3:cb:cd:
         75:35:ae:c9:c2:a8:aa:a9:73:81:77:3e:5e:61:24:68:e1:81:
         d2:6c:4a:fa:ec:89:7e:52:a7:b6:53:c5:2c:19:d4:ed:3a:17:
         fe:52:40:15:1d:be:02:40:b8:1a:66:ba:12:21:50:da:f9:75:
         da:3b:cc:74:d6:a5:ca:35:d7:f4:b8:96:5d:42:aa:07:cc:ac:
         fc:09:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org