Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33342d3334203d3e20323338333230.roa
File:                     323830343a346635343a383030303a3a2f33342d3334203d3e20323338333230.roa (raw, json)
Hash identifier:          MLdqtytmNK64vpkRGpRpN7HvDgS3wTIXORBQA2Ld2gw=
Subject key identifier:   D4:0B:FA:CC:0D:D5:04:58:2F:98:7C:67:11:3E:99:13:EB:10:75:94
Certificate issuer:       /CN=7E870936463A4C49A47872CB9BDBE77E9EF1EE14
Certificate serial:       1CCD2E565A0E8C74480B00A7D7A72CA4864FB394
Authority key identifier: 7E:87:09:36:46:3A:4C:49:A4:78:72:CB:9B:DB:E7:7E:9E:F1:EE:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33342d3334203d3e20323338333230.roa
Signing time:             Wed 02 Aug 2023 14:14:41 +0000
ROA not before:           Wed 02 Aug 2023 14:09:41 +0000
ROA not after:            Wed 31 Jul 2024 14:14:41 +0000
asID:                     238320
IP address blocks:        2804:4f54:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cd:2e:56:5a:0e:8c:74:48:0b:00:a7:d7:a7:2c:a4:86:4f:b3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E870936463A4C49A47872CB9BDBE77E9EF1EE14
        Validity
            Not Before: Aug  2 14:09:41 2023 GMT
            Not After : Jul 31 14:14:41 2024 GMT
        Subject: CN=D40BFACC0DD504582F987C67113E9913EB107594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:9e:50:49:8d:d1:8f:5d:01:69:e4:8e:00:
                    ac:92:89:52:6c:f0:df:eb:6b:23:7a:b8:54:3d:ae:
                    99:1e:df:ac:c9:d2:3d:6f:43:71:1d:2c:fb:40:f1:
                    31:ba:36:c2:38:61:85:13:68:dd:aa:75:9d:e7:ce:
                    c0:b4:2c:96:02:b5:0d:c1:f8:db:50:65:e5:c0:e3:
                    07:80:9c:53:b6:03:56:6d:7f:fd:af:53:31:d8:8a:
                    57:7b:a2:ad:f5:7b:46:be:36:f6:78:dc:78:28:f5:
                    e4:51:bf:74:3f:de:db:9c:d5:16:51:0c:5b:1e:25:
                    0e:b2:a0:2f:44:ab:35:f5:d9:f3:51:8e:1b:6a:45:
                    ba:3c:f9:46:13:42:48:10:9f:97:b2:fd:d9:0b:6d:
                    79:5e:91:e6:19:01:f7:b9:2e:c1:f1:52:de:39:b9:
                    61:d7:06:4e:94:b3:59:3e:e9:6c:7c:40:8b:d3:5b:
                    85:d1:e7:bb:8a:6c:78:e4:a2:0d:84:86:e9:bd:01:
                    75:18:1f:bd:16:94:d4:ca:ea:95:4e:aa:87:db:c0:
                    b9:e5:4a:c9:4a:d8:7a:ed:d1:65:21:5e:fa:1b:a4:
                    12:a3:7d:d7:d2:4e:2a:de:0d:a1:38:21:6a:2a:b4:
                    94:fc:01:ed:de:7f:81:2a:5d:08:79:b0:02:11:fd:
                    e6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0B:FA:CC:0D:D5:04:58:2F:98:7C:67:11:3E:99:13:EB:10:75:94
            X509v3 Authority Key Identifier:
                keyid:7E:87:09:36:46:3A:4C:49:A4:78:72:CB:9B:DB:E7:7E:9E:F1:EE:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33342d3334203d3e20323338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f54:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:b2:7d:04:74:da:17:80:42:78:e7:a0:84:41:be:c7:75:f2:
         a5:c5:54:ea:87:d7:75:47:d6:88:76:f4:c0:69:f6:c8:2f:2a:
         24:96:6d:0e:da:77:c1:18:d8:f6:f1:06:e7:15:79:bc:cf:b5:
         7f:2e:0e:9e:69:88:a3:2d:ae:7a:5a:47:c2:28:4f:7c:6f:c2:
         57:43:ed:ec:12:6b:c2:6d:1c:91:f3:49:58:03:4c:ae:1e:73:
         1e:af:c1:95:97:0e:66:a9:8d:fd:2d:24:12:f7:62:60:35:ac:
         2d:81:3a:73:1a:44:46:c4:cb:19:d5:dd:25:20:73:8d:87:86:
         0c:38:a5:d5:29:21:b1:07:a2:f3:c8:83:6a:12:eb:25:0d:b2:
         6f:5c:e2:12:1b:bf:dc:71:56:91:00:2a:c1:fc:94:ec:d8:0b:
         c2:1a:42:f1:95:34:13:7c:a7:0e:5c:28:16:62:6a:48:ab:63:
         17:59:ab:33:c0:1d:13:5e:28:1c:df:4a:7e:31:25:7c:db:d1:
         72:7a:f0:a5:f3:5b:c2:42:3f:ac:68:46:86:5e:07:d5:b8:ae:
         1f:de:2b:5f:05:6d:db:58:15:3d:78:28:bd:34:82:e0:de:cb:
         68:91:d1:9c:0d:22:e9:d5:e0:18:66:83:3d:b3:c9:fb:be:4d:
         a8:70:72:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org