Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa
File:                     323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa (raw, json)
Hash identifier:          zBKzfDXrX8g0jziN9ejja0xv7ucJdx6wnOpxBkvPqH4=
Subject key identifier:   ED:83:9A:F1:DC:F7:C8:63:81:5F:69:FB:00:74:FA:F2:E3:13:CB:2A
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       2CF57FD91102701A6CB44E0630428E3CCE3C8BE3
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa
Signing time:             Thu 07 Sep 2023 21:41:20 +0000
ROA not before:           Thu 07 Sep 2023 21:36:20 +0000
ROA not after:            Thu 05 Sep 2024 21:41:20 +0000
asID:                     61672
IP address blocks:        2804:1cbc:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f5:7f:d9:11:02:70:1a:6c:b4:4e:06:30:42:8e:3c:ce:3c:8b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Sep  7 21:36:20 2023 GMT
            Not After : Sep  5 21:41:20 2024 GMT
        Subject: CN=ED839AF1DCF7C863815F69FB0074FAF2E313CB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f0:6f:3a:03:30:38:26:6f:0e:cb:68:5f:d4:
                    3c:e9:a5:39:6b:bc:79:2c:5a:8d:6c:df:ad:5b:04:
                    44:56:74:41:05:89:06:06:42:bd:dd:e0:73:d4:45:
                    4e:b6:87:58:a8:de:05:18:bb:20:ff:4f:6a:d7:c7:
                    1a:f7:5f:79:c5:23:ae:0b:dc:67:6c:56:98:27:3d:
                    28:40:6f:ae:ff:01:a0:fd:be:2d:50:ce:77:95:91:
                    2b:9f:b3:6f:ab:8f:6b:61:c3:f6:88:2d:6c:ab:20:
                    3e:87:8a:f0:ee:41:5d:9b:15:e0:d6:e8:d7:29:b3:
                    af:31:54:1d:7c:50:ce:b3:56:7d:4f:1b:02:a9:cf:
                    c4:ee:06:e8:b8:82:99:69:dc:19:be:c5:29:9d:29:
                    49:3f:c7:28:e4:97:80:32:4c:21:b1:cc:cb:47:d4:
                    dd:d0:78:92:e3:4f:36:e3:43:e2:3f:b0:50:6b:6d:
                    31:e2:86:fc:28:38:1b:80:39:9f:e0:e1:9b:4a:69:
                    64:2a:11:67:18:f5:91:f2:f9:cf:a0:20:61:af:7e:
                    2e:83:74:d3:49:22:dc:e7:36:ab:48:be:ca:5e:57:
                    09:f1:66:17:ce:bd:a5:ff:b4:70:eb:81:3a:20:ef:
                    6a:c6:c9:ef:e1:12:23:75:2e:34:8b:2d:81:29:cd:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:83:9A:F1:DC:F7:C8:63:81:5F:69:FB:00:74:FA:F2:E3:13:CB:2A
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cbc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         88:44:50:ad:84:1d:4a:6d:30:c7:da:77:a7:a1:73:5f:9e:e9:
         ac:07:54:f4:3b:22:7e:9e:10:0c:c0:9b:16:c2:98:79:e9:06:
         7f:ca:d0:6d:8f:7c:38:86:58:b8:67:64:00:99:53:b9:4e:7c:
         52:03:66:44:a4:81:7a:dc:af:2d:0d:24:d6:8d:e6:25:7b:ae:
         d2:70:aa:ee:a2:4d:cd:36:66:b3:8b:cd:51:42:96:4f:e4:7b:
         cb:6b:65:1d:01:94:0e:6c:0f:eb:69:f5:62:8a:65:eb:6f:01:
         96:dc:92:88:97:69:85:93:6a:7b:51:0f:5d:f3:3f:e6:e4:17:
         7c:e6:04:ec:7f:8d:ed:8f:5c:81:2d:dd:54:5b:f5:fe:2e:28:
         d7:ed:bc:1d:8e:ab:45:6a:38:7d:6c:0b:ba:52:c8:82:28:75:
         ae:c5:80:b8:27:1c:eb:97:4d:b8:5f:b6:17:55:eb:2c:b2:10:
         ff:a3:9d:57:f0:19:97:9d:2a:bd:9c:eb:1a:33:55:e1:c9:ea:
         74:f1:b7:00:97:2c:72:6f:ad:a5:e4:ab:9c:4b:28:07:f3:e0:
         d0:be:f6:e1:cc:c5:7e:49:c8:9b:84:d8:24:9e:0c:5b:e3:43:
         04:2b:93:8e:cb:5d:39:fe:36:7e:f0:1d:59:f2:d9:cd:5b:c0:
         7f:cb:09:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org