Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/0/323830343a333366303a3a2f33322d3332203d3e20323635343236.roa
File:                     323830343a333366303a3a2f33322d3332203d3e20323635343236.roa (raw, json)
Hash identifier:          Hp2ZEslzH7Lhxxr+b1k5oAPviAlainffSK/udofALOM=
Subject key identifier:   91:CA:F4:6F:43:1C:14:2D:45:E4:31:84:55:00:08:BE:43:7F:89:26
Certificate issuer:       /CN=AFC314DD8C08896724F95C2D3E22E842EC950945
Certificate serial:       7364DCE829909C072268FBA5A98E301A03240D87
Authority key identifier: AF:C3:14:DD:8C:08:89:67:24:F9:5C:2D:3E:22:E8:42:EC:95:09:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFC314DD8C08896724F95C2D3E22E842EC950945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/0/323830343a333366303a3a2f33322d3332203d3e20323635343236.roa
Signing time:             Mon 09 Oct 2023 21:40:36 +0000
ROA not before:           Mon 09 Oct 2023 21:35:36 +0000
ROA not after:            Mon 07 Oct 2024 21:40:36 +0000
asID:                     265426
IP address blocks:        2804:33f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:64:dc:e8:29:90:9c:07:22:68:fb:a5:a9:8e:30:1a:03:24:0d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFC314DD8C08896724F95C2D3E22E842EC950945
        Validity
            Not Before: Oct  9 21:35:36 2023 GMT
            Not After : Oct  7 21:40:36 2024 GMT
        Subject: CN=91CAF46F431C142D45E43184550008BE437F8926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:4c:80:25:37:6d:81:df:6a:41:93:3e:d1:
                    e4:cd:8f:b5:dd:9f:14:9a:b8:83:0c:1a:f5:8b:05:
                    71:d8:d7:97:10:e5:b0:3d:2f:0b:4f:5e:4a:41:63:
                    8a:52:ad:cb:18:d2:02:04:f5:06:45:fe:c6:d1:0d:
                    98:aa:b9:92:5f:f5:9a:28:54:08:a5:21:34:a8:95:
                    a6:04:e1:6a:08:2d:eb:6b:d2:a4:60:b5:f7:90:f2:
                    04:a7:d6:8b:13:75:b3:97:e1:73:53:67:bd:51:b3:
                    be:37:df:19:2d:1d:ab:c7:2c:86:d3:fb:dd:01:48:
                    03:a1:9d:b1:b0:ff:23:2a:4d:c2:14:cb:df:2a:54:
                    f3:95:7b:31:d7:b6:12:9c:d6:4d:1d:ae:ce:73:2b:
                    24:c3:8a:7a:d1:44:93:15:a0:11:78:92:4f:9f:24:
                    3b:02:1a:a3:d5:c2:1f:39:6d:fc:07:49:41:af:99:
                    be:30:63:b3:75:45:13:ce:6a:f2:80:7b:25:04:71:
                    6c:d2:9c:e9:e7:95:9b:d3:10:c7:45:a8:7c:06:cf:
                    4c:76:48:5c:c5:a5:ab:59:be:8b:ec:a5:9c:af:7b:
                    08:8e:b1:ae:4c:f9:ae:a7:94:96:5f:f7:45:87:6d:
                    69:44:5c:02:7e:9a:43:68:90:76:16:af:17:d2:de:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CA:F4:6F:43:1C:14:2D:45:E4:31:84:55:00:08:BE:43:7F:89:26
            X509v3 Authority Key Identifier:
                keyid:AF:C3:14:DD:8C:08:89:67:24:F9:5C:2D:3E:22:E8:42:EC:95:09:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/0/AFC314DD8C08896724F95C2D3E22E842EC950945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFC314DD8C08896724F95C2D3E22E842EC950945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/0/323830343a333366303a3a2f33322d3332203d3e20323635343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:f7:35:a6:6c:ee:50:2a:f5:ce:c6:d5:61:85:72:13:a7:cf:
         ba:7a:0b:33:9f:e5:96:24:ed:69:f7:df:ab:55:6a:ae:9a:b0:
         d1:a7:51:15:76:7c:e7:7d:1d:58:c1:32:5e:13:a9:7a:54:bb:
         4f:79:e7:6f:4a:b8:99:dc:c8:6f:1a:75:e9:7a:8b:21:d6:3a:
         1c:89:d6:26:20:24:e2:c3:fc:35:02:67:b9:4a:70:80:84:e6:
         f2:39:93:51:8e:d5:7d:54:3c:69:90:55:48:41:dc:52:c9:7a:
         b5:5e:f4:b9:82:19:3b:bb:84:3c:05:fe:c0:88:0d:72:d5:06:
         71:29:7f:bb:f8:33:c6:df:6c:c5:e2:b1:2f:da:c8:43:b9:e6:
         c5:40:f1:53:eb:1d:73:94:0a:9b:de:3b:57:b2:69:e6:15:e3:
         ce:a2:99:e8:b7:36:bb:4c:10:1a:7c:cc:47:95:e1:c4:10:a5:
         97:f5:47:64:90:80:7a:12:b6:4c:4a:c8:89:b4:7d:73:0e:00:
         26:de:46:67:d8:55:f0:1d:86:f5:aa:be:1b:e8:30:c2:7d:d2:
         4e:7c:67:52:80:10:63:24:68:ae:b5:22:06:59:69:21:f8:31:
         15:02:05:aa:45:5b:c7:f1:d2:30:0b:70:ed:de:af:f7:da:1a:
         8e:66:5c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org