Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a343030303a3a2f33342d3334203d3e20323639353339.roa
File:                     323830343a363632633a343030303a3a2f33342d3334203d3e20323639353339.roa (raw, json)
Hash identifier:          9c9G29wC6GYQL2WOgVwFCJMhfW38OIqLfrGzR8Kdyq8=
Subject key identifier:   0C:79:40:D4:9E:73:66:93:D4:90:28:56:86:B0:E1:8C:61:4F:C3:55
Certificate issuer:       /CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
Certificate serial:       1EBDC0CDDF815E011857133F3D5DF0D7B5161C96
Authority key identifier: C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a343030303a3a2f33342d3334203d3e20323639353339.roa
Signing time:             Mon 21 Aug 2023 23:15:26 +0000
ROA not before:           Mon 21 Aug 2023 23:10:26 +0000
ROA not after:            Mon 19 Aug 2024 23:15:26 +0000
asID:                     269539
IP address blocks:        2804:662c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bd:c0:cd:df:81:5e:01:18:57:13:3f:3d:5d:f0:d7:b5:16:1c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
        Validity
            Not Before: Aug 21 23:10:26 2023 GMT
            Not After : Aug 19 23:15:26 2024 GMT
        Subject: CN=0C7940D49E736693D490285686B0E18C614FC355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:fa:7f:2a:d5:81:ee:85:cd:36:d4:34:48:
                    b7:69:ee:92:7b:8b:f3:e2:df:ce:b0:c6:a0:b4:fc:
                    73:25:4f:50:0c:2c:e9:aa:81:7d:2f:db:37:f8:8f:
                    b5:32:90:48:f5:04:d2:60:2b:4e:fa:7d:f1:c1:59:
                    67:fb:fd:94:8e:33:15:8f:3d:5f:4c:24:6a:0b:2e:
                    eb:f5:cd:c4:98:c7:71:4a:57:77:42:58:ae:04:e6:
                    98:8c:d3:8d:22:dd:1b:c2:0d:70:4d:5a:1e:da:a1:
                    01:1d:69:29:10:eb:1f:f0:28:82:58:31:fd:a9:6b:
                    c5:ae:d2:95:c4:12:8e:89:06:93:6c:ca:c5:51:87:
                    9c:b0:96:53:ef:47:3b:3f:fc:3a:46:e2:1c:9a:3f:
                    6f:7c:76:ad:03:37:b7:35:61:97:ce:07:e4:de:a1:
                    25:99:c7:fe:94:71:9c:bf:16:6b:0a:44:b4:5a:2d:
                    c7:e4:a4:e4:8d:ca:5c:ba:cd:6f:f0:76:94:67:2b:
                    db:f9:56:82:13:65:04:f9:ca:0f:84:b1:c7:2c:27:
                    55:04:a5:ad:16:93:73:cd:47:d4:80:e2:51:57:d7:
                    03:6f:ba:73:5c:c5:27:4d:35:97:16:51:b7:e1:3f:
                    cf:c0:d4:1c:01:69:34:d7:cc:85:97:58:e0:32:aa:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:79:40:D4:9E:73:66:93:D4:90:28:56:86:B0:E1:8C:61:4F:C3:55
            X509v3 Authority Key Identifier:
                keyid:C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a343030303a3a2f33342d3334203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:662c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0b:b7:ff:93:bb:02:54:2d:d0:20:6f:56:16:03:37:68:f0:db:
         9c:d4:14:0b:6a:04:cf:8c:9b:1a:63:d1:2d:78:ab:4b:4a:07:
         df:d3:f9:54:90:45:41:6c:a4:4c:18:a4:68:c0:93:17:1a:a0:
         f4:65:a9:45:6a:80:85:e9:7e:de:9d:db:52:b0:a4:c7:05:c7:
         49:72:0c:29:08:17:c4:81:21:a1:7d:ae:a8:a1:14:77:09:ed:
         70:56:2f:4d:68:bf:55:1c:c3:67:0c:98:d7:97:48:06:9b:05:
         c9:98:14:23:8b:8c:77:99:e9:23:51:f9:1b:78:3d:58:1d:13:
         4e:9c:43:b8:6a:85:bb:d2:0a:fd:f3:ad:0b:c3:14:9b:d0:61:
         62:62:e3:4e:7b:7a:0a:d1:28:11:11:83:7d:3b:eb:b3:52:3b:
         37:42:d3:fd:1e:5c:54:0b:bb:5b:e3:98:bf:9d:5d:e0:70:78:
         cd:08:b5:19:97:6b:05:ae:81:94:e0:e2:09:74:c0:81:42:ad:
         3b:c1:50:93:07:d3:d7:78:53:d3:86:65:7f:9a:70:98:14:9f:
         10:a1:89:b0:e2:84:af:93:81:38:ed:1f:ae:0f:27:22:08:67:
         8c:a0:75:d8:db:dd:26:5e:42:c6:20:f5:59:b5:65:1c:44:50:
         60:bb:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org