Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/0/323830343a386161303a3a2f33322d313238203d3e20323733363831.roa
File:                     323830343a386161303a3a2f33322d313238203d3e20323733363831.roa (raw, json)
Hash identifier:          BYj4FKm79gz4mqsZzH3m0k70ZG8PKVJxQEc09HWW8hM=
Subject key identifier:   29:4A:59:FB:6A:C3:D7:AA:32:2B:E1:02:06:4C:73:60:E4:3D:D4:19
Certificate issuer:       /CN=B9000DC5D2434698CC43B7C6AB8A3AC918F049B7
Certificate serial:       73846090C9AE16C0A8211EBDEB5FD7B7DB46F218
Authority key identifier: B9:00:0D:C5:D2:43:46:98:CC:43:B7:C6:AB:8A:3A:C9:18:F0:49:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/0/323830343a386161303a3a2f33322d313238203d3e20323733363831.roa
Signing time:             Thu 16 Mar 2023 18:41:32 +0000
ROA not before:           Thu 16 Mar 2023 18:36:32 +0000
ROA not after:            Thu 14 Mar 2024 18:41:32 +0000
asID:                     273681
IP address blocks:        2804:8aa0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:84:60:90:c9:ae:16:c0:a8:21:1e:bd:eb:5f:d7:b7:db:46:f2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9000DC5D2434698CC43B7C6AB8A3AC918F049B7
        Validity
            Not Before: Mar 16 18:36:32 2023 GMT
            Not After : Mar 14 18:41:32 2024 GMT
        Subject: CN=294A59FB6AC3D7AA322BE102064C7360E43DD419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:98:cf:df:38:a5:18:9f:7c:bb:89:45:92:
                    f4:bb:a6:99:77:04:aa:7d:ab:74:89:08:6f:7d:7d:
                    9b:56:12:3d:c5:fc:15:48:aa:c0:32:d8:c8:44:ca:
                    36:0e:8c:e9:05:b2:18:5c:36:d6:7a:13:40:89:31:
                    bf:e3:12:4b:83:9e:73:e7:d4:17:52:0d:99:bf:ea:
                    c9:f3:18:c2:55:58:86:96:8f:96:ab:db:c8:28:d2:
                    a9:19:b3:a5:38:69:1b:0a:99:da:e4:5d:38:33:6c:
                    1b:a3:0e:e8:4f:5a:91:cd:16:5c:00:09:b2:f5:70:
                    57:7b:6b:e1:bc:ab:56:32:58:f2:74:49:3f:d6:a8:
                    cc:78:1b:00:62:cc:f1:c0:d6:41:03:b8:04:bf:a4:
                    a7:04:30:1c:6f:ff:6a:f5:ff:97:34:32:94:49:b3:
                    95:31:44:13:94:0a:3a:1c:eb:30:7d:7c:a3:e8:28:
                    9f:50:9b:79:cd:3f:d4:9b:bb:1e:5a:80:0c:ad:2d:
                    01:9a:d6:d2:b5:20:70:b2:21:e5:b3:56:f3:a2:8e:
                    dd:75:20:31:be:59:b8:e1:83:8e:ea:76:17:a5:91:
                    4c:99:57:eb:44:84:aa:60:df:ff:d0:f2:f3:05:32:
                    a1:41:f0:96:61:3e:11:6c:e6:79:cf:26:39:58:a2:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4A:59:FB:6A:C3:D7:AA:32:2B:E1:02:06:4C:73:60:E4:3D:D4:19
            X509v3 Authority Key Identifier:
                keyid:B9:00:0D:C5:D2:43:46:98:CC:43:B7:C6:AB:8A:3A:C9:18:F0:49:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/0/B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/0/323830343a386161303a3a2f33322d313238203d3e20323733363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:e6:ba:09:af:5e:fa:e4:20:ba:e7:94:59:12:f3:30:17:d5:
         b8:f7:00:cf:b3:30:dc:de:c5:b6:75:25:2a:7f:7a:5e:82:1c:
         bc:78:69:12:3d:c7:04:09:49:1f:9c:7a:a9:d6:38:6a:23:ce:
         20:8d:2d:3d:c9:7f:19:28:aa:8c:b7:d2:0d:91:9c:2e:a9:60:
         33:34:01:c1:5b:e0:9c:a0:f7:65:07:15:5d:d6:54:99:4c:80:
         8d:f4:ed:7d:0d:71:2a:48:c7:0e:38:62:7c:43:55:28:d8:a7:
         fb:d6:e1:13:98:2f:4c:3b:fc:45:86:d1:73:18:76:a7:97:86:
         55:04:51:3d:cf:55:9f:03:a8:5c:01:25:c8:47:42:28:ff:89:
         e5:6e:ee:fc:12:1c:0d:90:b0:db:d4:c9:f7:21:b6:ed:47:e5:
         68:82:c3:71:49:99:11:b2:42:5b:e0:c6:21:9b:86:f5:f4:4a:
         2b:f5:9e:d2:98:39:c2:ac:f9:75:42:71:7b:7a:55:7e:f5:5b:
         26:22:c3:e9:95:49:a5:25:d3:3e:79:f9:21:b3:04:ea:48:11:
         52:00:91:8f:4e:f6:5f:ed:4e:e8:3b:44:59:19:96:df:e9:18:
         29:c1:60:38:7f:41:fb:04:86:9a:ef:90:7c:83:06:a3:dc:57:
         8c:94:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org