Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33342d3334203d3e20323635303631.roa
File:                     323830343a333233303a3a2f33342d3334203d3e20323635303631.roa (raw, json)
Hash identifier:          J652hNQjQv7SGC74nnXpQLpQtxdKc5LSKCZz4nuL6ZI=
Subject key identifier:   6D:9F:1E:13:7C:82:CA:CA:07:02:56:57:6F:F7:B2:D1:92:50:D1:E5
Certificate issuer:       /CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
Certificate serial:       2BC7BD8C22814EAAB6E70CF8723F84BF95A10CB0
Authority key identifier: 34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33342d3334203d3e20323635303631.roa
Signing time:             Tue 28 Mar 2023 14:47:51 +0000
ROA not before:           Tue 28 Mar 2023 14:42:51 +0000
ROA not after:            Tue 26 Mar 2024 14:47:51 +0000
asID:                     265061
IP address blocks:        2804:3230::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c7:bd:8c:22:81:4e:aa:b6:e7:0c:f8:72:3f:84:bf:95:a1:0c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
        Validity
            Not Before: Mar 28 14:42:51 2023 GMT
            Not After : Mar 26 14:47:51 2024 GMT
        Subject: CN=6D9F1E137C82CACA070256576FF7B2D19250D1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:97:68:93:f4:5f:86:74:0e:53:5d:11:9a:3e:
                    1d:61:fe:71:28:bf:1b:35:9f:01:31:23:9f:94:c3:
                    27:4a:6d:a3:2b:a6:e6:1d:58:a5:3c:5e:11:28:98:
                    6f:f2:dd:7b:f1:55:f7:3b:39:c8:c3:45:78:5c:8f:
                    81:10:61:4a:24:19:f1:73:55:e3:ae:51:f5:ae:a6:
                    01:6e:d3:4b:70:9d:10:14:e9:d5:d1:96:60:f0:fb:
                    ab:ab:59:97:42:f9:bc:40:33:fb:a4:fc:c9:a5:bc:
                    3e:19:11:d5:df:c3:f5:0f:1e:17:7e:f8:2c:a7:ff:
                    db:06:f2:98:db:cb:80:44:9f:29:ae:cc:ad:0d:83:
                    35:cc:b2:c2:4f:6e:05:6a:e6:d2:97:25:62:c8:8b:
                    63:3e:74:ec:53:21:41:ba:fc:e4:02:11:53:ab:ed:
                    26:11:1e:70:33:77:ce:fc:01:be:f3:ff:35:c3:13:
                    38:fc:95:7b:4b:63:7f:fe:c2:56:6c:45:20:50:b9:
                    a4:39:07:b3:04:6b:75:73:8d:dc:e5:f2:27:99:12:
                    cd:0f:93:ef:a3:4c:8b:fe:6e:bb:d9:71:fc:15:ce:
                    9e:9c:35:9e:62:e9:7f:42:07:e9:4e:58:48:1c:bd:
                    bd:9e:28:f7:05:37:de:bd:5f:87:4a:a6:39:8a:1f:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9F:1E:13:7C:82:CA:CA:07:02:56:57:6F:F7:B2:D1:92:50:D1:E5
            X509v3 Authority Key Identifier:
                keyid:34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33342d3334203d3e20323635303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3230::/34

    Signature Algorithm: sha256WithRSAEncryption
         f1:d2:6c:00:de:99:4b:c8:5a:02:6e:fe:fd:31:6e:9d:29:57:
         7f:47:68:3b:b2:05:a6:81:e5:dc:35:9d:e7:04:9e:e0:94:26:
         7a:f7:8f:23:b5:76:d4:8a:e6:db:23:92:4b:5c:ff:94:22:3c:
         2c:7a:65:d4:d6:59:42:f0:cf:6c:d7:4f:f6:d1:c1:66:a6:69:
         81:c4:ae:b0:1f:14:4c:47:7d:09:c4:00:84:bc:e3:b3:93:ea:
         39:4d:23:ea:4b:5a:e3:0e:1c:47:a1:df:91:3f:09:82:51:11:
         1a:43:f4:66:28:39:b8:ed:25:14:27:56:dd:bf:6a:79:37:d4:
         c9:f8:ac:bd:ff:a7:e9:d8:8a:0e:59:f3:a6:e5:7f:3b:50:09:
         ff:08:35:c9:8e:d2:3f:9a:0a:9b:f9:79:a8:37:f8:dd:20:2b:
         52:e9:84:a4:f9:08:f2:e9:08:2e:2c:0c:5f:da:5c:8a:0b:c5:
         7d:7d:0f:95:b7:97:0d:8c:83:3a:8f:31:e7:29:05:04:b1:9f:
         5d:91:9a:a1:5e:90:f8:d8:da:2a:47:41:c7:95:1b:92:7c:77:
         d4:42:24:40:dc:e9:9b:ed:db:23:5a:20:aa:37:39:3d:90:23:
         60:e7:28:a2:f2:4d:41:be:ee:fb:c4:9f:e3:22:07:90:d6:4c:
         4e:0d:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org