Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a613030303a3a2f3336203d3e20323636303230.roa
File:                     323830343a333933633a613030303a3a2f3336203d3e20323636303230.roa (raw, json)
Hash identifier:          Dk2b4jdysiLGckpwZXNV+2zddjp0V2xdO/iqEP/x52k=
Subject key identifier:   DA:3C:FF:9C:8C:55:50:37:C5:1A:89:8B:74:D3:C5:FD:8C:96:9E:73
Certificate issuer:       /CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
Certificate serial:       6207A9EDDE467DACFA1BFD08C3876B02E8EC06F0
Authority key identifier: 9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a613030303a3a2f3336203d3e20323636303230.roa
Signing time:             Sat 20 May 2023 12:00:01 +0000
ROA not before:           Sat 20 May 2023 11:55:01 +0000
ROA not after:            Mon 20 May 2024 12:00:01 +0000
asID:                     266020
IP address blocks:        2804:393c:a000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:07:a9:ed:de:46:7d:ac:fa:1b:fd:08:c3:87:6b:02:e8:ec:06:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
        Validity
            Not Before: May 20 11:55:01 2023 GMT
            Not After : May 20 12:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:76:78:91:28:c5:1b:fa:05:15:ad:75:4e:
                    82:15:93:aa:e1:29:d4:a3:de:ba:79:27:84:29:b3:
                    d5:ff:89:38:8f:2a:94:1e:c2:b2:b0:59:d7:9f:da:
                    54:c6:24:e9:76:73:3b:6d:27:60:11:19:0e:c6:a8:
                    94:0e:0f:9c:18:cd:94:e0:48:d5:9d:3e:bb:15:27:
                    bb:9e:1e:f3:31:f6:4d:67:8b:38:26:70:cc:41:89:
                    d0:3c:62:eb:c0:49:a4:86:1e:ac:5e:b2:86:ab:86:
                    25:ea:de:3c:23:b4:a0:ab:d0:b3:ba:55:b7:4f:da:
                    97:bd:e2:17:f2:45:da:ca:47:9f:c8:86:7e:a5:25:
                    b5:70:46:ef:ea:6e:57:de:36:09:5c:d7:2f:a3:cc:
                    83:90:85:20:54:0c:9b:68:a0:dd:d9:34:2f:d0:3e:
                    4b:a2:8c:55:3e:fe:c2:49:3b:b6:6f:e4:08:44:5a:
                    4e:8a:18:4d:d7:f7:26:09:87:5a:3b:bc:e9:b0:7c:
                    00:01:f4:67:3a:4e:e4:cd:ef:9d:03:54:dc:24:15:
                    b9:79:6b:48:6e:1c:e4:2c:a3:79:07:a0:a6:67:38:
                    c5:bd:69:1a:c3:01:e2:db:de:8e:44:4a:bc:a5:81:
                    a1:1f:20:2e:1b:00:dc:96:df:38:ea:d9:11:3b:94:
                    17:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3C:FF:9C:8C:55:50:37:C5:1A:89:8B:74:D3:C5:FD:8C:96:9E:73
            X509v3 Authority Key Identifier:
                keyid:9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a613030303a3a2f3336203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         10:93:b8:96:9f:7b:8a:10:e8:1b:38:aa:a6:84:81:23:e8:fa:
         6e:a7:08:de:a8:ac:2b:5a:1c:b2:09:13:d3:bd:ba:ac:aa:8e:
         40:7f:d3:cb:96:3c:43:7e:fe:6f:be:80:fd:14:62:fd:10:e7:
         c1:d8:ac:0c:67:cb:dc:ef:33:1e:c7:db:a2:bf:cb:1b:e6:d0:
         0d:81:83:26:41:7a:90:46:78:0a:ec:f4:09:53:15:0c:25:54:
         97:9a:06:f8:ef:c3:6a:29:9a:58:9e:68:2d:eb:9d:03:cc:7e:
         85:6f:dd:39:c8:d4:a6:e0:55:19:6d:ca:c8:40:1c:3f:38:92:
         f8:52:63:2c:cf:76:48:c9:41:a3:64:e6:4e:0b:67:ac:95:0a:
         43:f5:0b:25:59:9b:d7:1f:f2:87:39:19:a0:db:4d:3b:34:d2:
         ab:6d:61:74:32:97:cd:55:a2:ec:ad:f7:fa:86:ca:85:6e:4e:
         af:d1:6f:b5:af:03:04:89:75:5e:54:bd:a1:fb:89:b0:28:60:
         4b:4a:17:b7:6b:5d:39:b7:ff:52:2f:eb:4e:6d:88:b5:2f:a9:
         ee:77:9c:aa:17:22:40:54:4d:d7:69:66:8e:0a:1c:1b:c3:ab:
         d5:fc:c6:a0:a5:7d:47:67:4d:ca:e3:b5:ea:d4:e3:cb:e4:c5:
         0c:64:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org