Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/323830343a6336343a3a2f33322d3438203d3e203532363939.roa
File:                     323830343a6336343a3a2f33322d3438203d3e203532363939.roa (raw, json)
Hash identifier:          GsieBlKbqmiPSHkN2bhEH1yuHOObRLo3cqFmUZDt6gk=
Subject key identifier:   7A:EB:2A:42:94:F9:07:49:3B:80:EC:39:C6:77:D9:33:75:34:91:76
Certificate issuer:       /CN=B17FDBB2898DEB3128D0DFBC517CB982BDA2D370
Certificate serial:       1AA05F82731D4E25649540C4855680AFBF153DDF
Authority key identifier: B1:7F:DB:B2:89:8D:EB:31:28:D0:DF:BC:51:7C:B9:82:BD:A2:D3:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17FDBB2898DEB3128D0DFBC517CB982BDA2D370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/323830343a6336343a3a2f33322d3438203d3e203532363939.roa
Signing time:             Thu 14 Sep 2023 21:02:47 +0000
ROA not before:           Thu 14 Sep 2023 20:57:47 +0000
ROA not after:            Thu 12 Sep 2024 21:02:47 +0000
asID:                     52699
IP address blocks:        2804:c64::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a0:5f:82:73:1d:4e:25:64:95:40:c4:85:56:80:af:bf:15:3d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B17FDBB2898DEB3128D0DFBC517CB982BDA2D370
        Validity
            Not Before: Sep 14 20:57:47 2023 GMT
            Not After : Sep 12 21:02:47 2024 GMT
        Subject: CN=7AEB2A4294F907493B80EC39C677D93375349176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:0f:a1:7d:3b:0a:43:4e:83:06:96:17:81:
                    bb:3a:cb:78:87:29:5e:0e:3f:73:18:f7:00:9d:8c:
                    41:3f:0e:2e:f2:94:99:53:d8:2b:99:30:ac:0b:a0:
                    1d:d7:43:f8:19:2d:a7:8a:cf:f1:71:28:66:3b:c1:
                    ff:15:f0:40:56:a4:1f:6f:e8:07:6a:ac:48:04:a3:
                    65:1d:c2:f9:fc:73:44:87:d7:2c:dd:2a:87:ae:e6:
                    87:49:e0:44:07:6e:e4:05:be:5b:9a:8b:12:76:85:
                    3f:14:34:50:fa:8d:8e:b3:da:23:2e:0f:52:db:97:
                    f4:35:8f:d4:5a:2e:66:5b:95:d5:1d:48:8d:d2:3b:
                    81:6c:1e:00:c5:e3:20:6c:8b:fa:83:69:89:4f:44:
                    e8:4d:21:ef:5c:4c:46:db:93:ff:41:2b:2e:d4:7a:
                    5a:ec:20:5f:79:fb:74:15:fe:e6:e7:c3:1b:f9:38:
                    1a:6f:c3:ae:6d:c4:a6:d6:6b:3f:78:fa:2d:29:f8:
                    7b:31:74:e0:eb:38:7f:d0:1a:15:3e:83:a2:d9:e5:
                    58:5b:07:40:e0:66:d7:fd:9b:e8:56:e1:66:04:69:
                    41:ad:04:08:b8:e6:cd:70:c5:c6:2c:b7:7a:0d:49:
                    3f:50:6b:c2:7b:0e:24:59:e9:5e:25:27:89:c3:e0:
                    13:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EB:2A:42:94:F9:07:49:3B:80:EC:39:C6:77:D9:33:75:34:91:76
            X509v3 Authority Key Identifier:
                keyid:B1:7F:DB:B2:89:8D:EB:31:28:D0:DF:BC:51:7C:B9:82:BD:A2:D3:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/B17FDBB2898DEB3128D0DFBC517CB982BDA2D370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17FDBB2898DEB3128D0DFBC517CB982BDA2D370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/323830343a6336343a3a2f33322d3438203d3e203532363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c64::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:03:67:aa:fa:54:30:56:32:cc:bf:74:ef:c8:08:d4:f2:24:
         8b:d3:00:19:11:28:ad:4c:91:4c:8f:64:3b:b2:ce:83:04:d8:
         15:da:63:36:e6:45:24:e5:ac:8c:d8:de:19:88:26:44:99:4c:
         5e:bf:1e:50:ff:66:9e:3a:9e:4f:51:67:98:92:bf:57:5b:23:
         0b:e9:0b:c0:9e:4f:f9:81:75:1a:c7:0f:a4:22:22:11:e3:9d:
         b7:67:3d:33:ab:59:fb:b7:45:b3:31:d0:fd:72:97:f1:49:8b:
         7e:b7:95:e4:15:69:66:d8:87:19:c9:16:b4:3f:1e:de:5f:71:
         12:10:c7:f2:dd:11:70:43:3d:fd:61:bd:20:73:ad:28:34:e9:
         34:41:20:ac:e1:5d:af:55:f6:09:e2:d2:04:be:7d:be:80:b7:
         8d:0b:79:b7:46:37:04:77:7e:c8:45:67:60:63:81:40:8b:ce:
         64:cb:f2:af:d7:a5:c8:16:97:c1:10:8d:71:50:95:d5:c8:70:
         7e:20:e3:bd:5a:f4:a4:07:f6:85:07:89:65:9a:e8:d2:ed:a5:
         7d:c1:29:a6:53:29:10:2e:7c:d0:fe:7d:6b:07:71:9c:0b:46:
         46:f7:28:7a:04:72:f6:fc:79:6b:0f:fd:e9:55:a5:e9:bd:5b:
         9f:2a:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org