Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/323830343a336235343a633030303a3a2f33342d3334203d3e20323636313432.roa
File:                     323830343a336235343a633030303a3a2f33342d3334203d3e20323636313432.roa (raw, json)
Hash identifier:          ktQsh4ovnBRfNcra7HGnUOt70cvgSCQt9Q12mFVCS3Y=
Subject key identifier:   C3:A8:BB:7C:2A:16:48:51:B0:92:CA:7E:5A:19:76:60:11:5B:EB:2B
Certificate issuer:       /CN=AAEBA2B9A371A3B78A412C2614280CF3CED30EB3
Certificate serial:       7F299AAE27E9D7F0EBA989EB280DE25914737280
Authority key identifier: AA:EB:A2:B9:A3:71:A3:B7:8A:41:2C:26:14:28:0C:F3:CE:D3:0E:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAEBA2B9A371A3B78A412C2614280CF3CED30EB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/323830343a336235343a633030303a3a2f33342d3334203d3e20323636313432.roa
Signing time:             Fri 22 Dec 2023 12:55:49 +0000
ROA not before:           Fri 22 Dec 2023 12:50:49 +0000
ROA not after:            Fri 20 Dec 2024 12:55:49 +0000
asID:                     266142
IP address blocks:        2804:3b54:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:29:9a:ae:27:e9:d7:f0:eb:a9:89:eb:28:0d:e2:59:14:73:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAEBA2B9A371A3B78A412C2614280CF3CED30EB3
        Validity
            Not Before: Dec 22 12:50:49 2023 GMT
            Not After : Dec 20 12:55:49 2024 GMT
        Subject: CN=C3A8BB7C2A164851B092CA7E5A197660115BEB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:29:9d:b8:a6:93:1f:ee:c4:a8:4c:2f:33:
                    05:8f:9d:dd:89:03:f2:bb:74:fd:13:db:63:d9:b1:
                    9b:64:80:22:e2:7a:40:df:ed:07:4d:13:d4:68:f4:
                    9a:fe:5e:42:a5:05:e2:a3:29:83:62:7f:e5:8a:db:
                    c2:1d:dc:c8:a1:55:ab:2e:89:93:40:5e:34:ec:8b:
                    03:53:29:be:41:15:90:f9:3b:77:0c:7f:e5:6d:ea:
                    0c:8f:39:8b:b1:a8:93:2b:06:d9:ae:03:10:9e:cd:
                    62:ef:ef:58:9d:0b:d9:e7:ff:85:06:44:44:4c:86:
                    71:05:14:4c:dc:53:54:d7:8b:c2:bc:7b:29:2a:b8:
                    d2:c2:48:10:82:f6:8a:11:8b:1d:e1:96:9c:b8:1a:
                    9b:f0:56:4b:77:4f:4b:bb:a2:c6:05:26:75:6e:a6:
                    ee:36:c9:78:1b:f2:57:40:ba:ae:aa:69:09:ce:46:
                    c0:00:9b:98:2e:3a:c3:64:8c:9e:2d:34:ba:1d:bd:
                    84:ed:8c:81:e8:66:e6:95:ce:52:44:ca:8f:3f:5c:
                    fd:d3:f1:3e:ff:74:2d:1b:ee:d1:9f:7d:23:0e:fa:
                    35:31:70:ff:e4:3c:c2:7f:6e:73:33:cb:41:4a:43:
                    7c:54:b9:af:f6:32:27:b0:31:18:b2:6b:7e:4f:f4:
                    10:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A8:BB:7C:2A:16:48:51:B0:92:CA:7E:5A:19:76:60:11:5B:EB:2B
            X509v3 Authority Key Identifier:
                keyid:AA:EB:A2:B9:A3:71:A3:B7:8A:41:2C:26:14:28:0C:F3:CE:D3:0E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/AAEBA2B9A371A3B78A412C2614280CF3CED30EB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAEBA2B9A371A3B78A412C2614280CF3CED30EB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/323830343a336235343a633030303a3a2f33342d3334203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b54:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         63:7c:a6:3f:5a:4c:c5:68:60:a6:91:14:c5:f0:c5:e1:c4:f5:
         6a:63:b0:60:85:02:84:97:df:d3:01:45:87:b9:7a:da:db:c8:
         ed:ae:4a:74:ea:db:12:82:0c:d9:56:6d:c1:e2:3e:d8:56:6e:
         c4:d3:e1:ce:5d:e6:ce:27:e9:40:12:18:ef:f2:44:16:ec:67:
         bc:37:75:40:c8:59:6b:be:ed:fe:2e:50:21:c8:89:c2:d9:9f:
         fd:9a:c4:0c:c6:fd:5d:c7:ec:6f:78:7e:53:93:c6:f2:85:d4:
         9f:52:d7:de:1f:fc:eb:8c:0a:7f:4c:2d:ca:6c:b1:17:fa:cc:
         b9:5c:cf:9e:43:68:95:b8:e8:8d:30:94:1f:ec:77:34:62:14:
         b8:71:6f:b3:e4:fa:b5:12:e1:13:84:16:fc:15:0c:2c:8a:65:
         39:27:37:ed:96:95:bd:92:8c:58:94:be:33:5f:47:73:12:62:
         ba:2b:c6:29:5b:39:c5:30:6a:f4:d4:6a:62:38:6c:8d:c6:e9:
         d0:81:9e:88:1f:97:10:7b:53:c7:aa:b7:66:9b:6b:44:02:c0:
         04:37:cc:34:d2:7e:d4:80:14:c2:2b:a9:27:84:9e:ca:d5:38:
         16:5b:63:32:b7:e0:30:eb:6d:37:87:fe:66:a3:87:98:e9:10:
         13:4b:44:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org