Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a343030303a3a2f33342d3334203d3e20323733343132.roa
File:                     323830343a386533633a343030303a3a2f33342d3334203d3e20323733343132.roa (raw, json)
Hash identifier:          6tRj3GDZv/CsFx6Loz4eNmdWtj0vSEb+vN4g6NEvyVI=
Subject key identifier:   3E:E7:FD:98:6D:B0:B9:7B:64:5E:62:05:DF:FE:CF:E1:B7:B7:45:24
Certificate issuer:       /CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Certificate serial:       2045DD4BD68498504A1CD735A51AE5759CDCE77F
Authority key identifier: CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a343030303a3a2f33342d3334203d3e20323733343132.roa
Signing time:             Mon 22 Jan 2024 14:55:51 +0000
ROA not before:           Mon 22 Jan 2024 14:50:51 +0000
ROA not after:            Mon 20 Jan 2025 14:55:51 +0000
asID:                     273412
IP address blocks:        2804:8e3c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:45:dd:4b:d6:84:98:50:4a:1c:d7:35:a5:1a:e5:75:9c:dc:e7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
        Validity
            Not Before: Jan 22 14:50:51 2024 GMT
            Not After : Jan 20 14:55:51 2025 GMT
        Subject: CN=3EE7FD986DB0B97B645E6205DFFECFE1B7B74524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:63:34:a8:43:ec:59:26:de:9a:67:30:36:78:
                    6e:6d:9e:29:b2:8b:c8:19:e0:cc:1a:92:cd:96:78:
                    eb:37:dc:26:be:af:5f:0c:34:42:a2:3c:87:8e:01:
                    8c:ad:aa:1d:8e:18:56:fa:fa:3b:a3:fd:79:4d:42:
                    23:3f:33:2b:a2:75:b6:a8:a7:06:e6:06:f8:92:5c:
                    9d:4f:7b:18:47:b4:55:7a:29:c2:95:4d:ea:10:74:
                    de:01:39:68:94:79:82:20:89:b3:d2:d8:7b:5d:f6:
                    f7:e9:13:81:69:0e:01:96:78:bf:fe:a5:10:33:2f:
                    aa:0b:c9:57:e3:88:09:8a:00:bc:9f:06:41:46:13:
                    a1:66:b9:16:ee:dc:c2:ff:29:9f:b4:c2:77:43:91:
                    71:16:ab:b4:83:1e:f6:67:6f:71:8b:af:c1:a5:63:
                    69:a2:30:e2:0d:98:da:aa:7c:ec:d8:f7:e3:82:ac:
                    e0:c2:36:6e:fa:e6:3d:d6:fe:17:f6:3f:67:c7:fb:
                    9b:20:a1:a3:cd:1a:37:3f:3f:29:5d:39:1f:da:4b:
                    6a:d2:ae:48:dc:47:4a:6d:18:fe:23:a1:f2:95:74:
                    4e:88:ba:ec:f1:96:70:9b:c9:6a:f3:d4:46:81:d2:
                    f7:f8:fc:cf:df:bc:f0:d7:b8:82:bc:b7:a4:2f:cc:
                    65:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E7:FD:98:6D:B0:B9:7B:64:5E:62:05:DF:FE:CF:E1:B7:B7:45:24
            X509v3 Authority Key Identifier:
                keyid:CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a343030303a3a2f33342d3334203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e3c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         00:49:8b:7e:81:58:a8:a3:f9:93:f1:1e:4e:fb:45:61:0e:9c:
         f4:c8:50:95:a0:c3:b7:e6:f4:b3:69:ce:0e:9d:3f:2b:37:ba:
         27:18:20:2a:d9:e2:dd:9a:99:c3:2e:79:8f:ee:6b:13:1b:e8:
         dd:eb:d8:e7:7b:30:98:1f:cd:31:b0:21:bf:7f:ba:a0:bc:8a:
         17:67:b0:b2:b5:8f:8c:c6:42:60:a3:36:34:6a:2b:8d:75:7e:
         24:0d:90:4a:dc:cb:72:2a:17:03:62:af:70:3d:a2:04:9a:f9:
         cb:5e:39:2f:c1:44:f7:01:75:63:e1:b7:b1:6e:41:5a:68:ed:
         9b:c7:8b:27:5c:31:cb:ae:54:ed:37:c0:26:cf:77:31:2f:16:
         b6:b2:a9:4d:88:50:b4:5f:63:b0:0d:4b:0d:d2:82:49:11:47:
         90:60:8c:08:6b:21:d8:90:70:ee:29:43:d3:91:75:52:5f:55:
         5e:2a:80:00:04:8d:b3:f8:1a:1d:46:c6:a3:77:cd:96:f1:43:
         4e:c6:d0:24:34:34:03:47:46:f3:72:4e:67:59:86:7d:ca:af:
         ba:29:0d:02:06:c8:54:b4:3f:69:41:61:46:91:54:6f:37:36:
         a9:cb:a7:a3:a7:d0:92:f0:d8:cf:0a:9f:6a:63:f6:52:a2:b6:
         4a:e8:f4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org