Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/323830343a326234303a3a2f33322d3438203d3e20323635313433.roa
File:                     323830343a326234303a3a2f33322d3438203d3e20323635313433.roa (raw, json)
Hash identifier:          8ssu7VWsktUG/RxVAtiaAJqU+NuIr2lqwuQphjzWUEI=
Subject key identifier:   6B:93:82:EA:B0:20:4E:C6:C0:17:1A:EE:AB:FD:56:89:17:DD:51:F0
Certificate issuer:       /CN=2F7A4FD2065A1C732A7417998C1B8FAC75226544
Certificate serial:       78F9B8A793AE2EF35B72971A69BD0550EDE0A0CF
Authority key identifier: 2F:7A:4F:D2:06:5A:1C:73:2A:74:17:99:8C:1B:8F:AC:75:22:65:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7A4FD2065A1C732A7417998C1B8FAC75226544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/323830343a326234303a3a2f33322d3438203d3e20323635313433.roa
Signing time:             Fri 02 Jun 2023 00:35:59 +0000
ROA not before:           Fri 02 Jun 2023 00:30:59 +0000
ROA not after:            Fri 31 May 2024 00:35:59 +0000
asID:                     265143
IP address blocks:        2804:2b40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f9:b8:a7:93:ae:2e:f3:5b:72:97:1a:69:bd:05:50:ed:e0:a0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F7A4FD2065A1C732A7417998C1B8FAC75226544
        Validity
            Not Before: Jun  2 00:30:59 2023 GMT
            Not After : May 31 00:35:59 2024 GMT
        Subject: CN=6B9382EAB0204EC6C0171AEEABFD568917DD51F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:19:a1:6e:24:da:2d:8c:18:af:4c:64:73:9f:
                    31:4e:44:24:00:86:d6:92:d7:a5:45:73:8a:a7:96:
                    cb:3b:ce:a2:82:b8:f2:54:8b:e2:1d:da:b7:c6:b5:
                    f2:b7:8b:e9:41:68:98:71:fa:37:1a:86:67:33:22:
                    4e:73:df:6d:e3:36:6c:23:61:6f:14:43:1d:97:09:
                    d1:d5:64:12:0b:4a:99:ce:76:7f:b6:cb:b2:fe:85:
                    31:fe:fc:1a:8d:e0:27:c8:ce:ff:c2:70:12:9b:c3:
                    93:d5:29:28:0b:62:9a:2f:16:e2:64:4f:6c:35:89:
                    fe:ad:d8:d2:46:35:34:84:51:9e:7b:de:4c:5b:8a:
                    32:05:09:53:ab:db:53:9e:18:87:ff:31:e7:e4:e4:
                    02:b1:a8:63:99:aa:02:96:ee:64:4c:0a:70:5f:3f:
                    6d:86:6a:9d:1f:fb:ec:68:ce:09:75:c3:7f:b6:e7:
                    87:6e:4b:80:78:b9:17:95:4d:5b:0c:81:f6:49:a2:
                    58:e3:c4:fa:71:d8:66:75:5e:7b:0e:a9:d7:85:90:
                    d5:a6:8d:ab:02:eb:f2:74:ff:4a:8c:30:38:27:43:
                    2f:be:dd:3a:70:5d:28:17:e6:75:ee:8c:9a:cf:c2:
                    b5:e1:b9:86:ac:76:f7:14:bd:1f:f6:4c:b4:89:16:
                    a3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:93:82:EA:B0:20:4E:C6:C0:17:1A:EE:AB:FD:56:89:17:DD:51:F0
            X509v3 Authority Key Identifier:
                keyid:2F:7A:4F:D2:06:5A:1C:73:2A:74:17:99:8C:1B:8F:AC:75:22:65:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/2F7A4FD2065A1C732A7417998C1B8FAC75226544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7A4FD2065A1C732A7417998C1B8FAC75226544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/323830343a326234303a3a2f33322d3438203d3e20323635313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:3d:2c:e2:10:e1:ee:56:ca:e8:5f:77:fe:4f:4a:32:c5:43:
         dc:21:6c:78:50:94:5a:4e:71:c4:f0:d6:5d:a7:e9:b8:37:98:
         6e:02:3c:2c:69:f4:8e:5d:1c:ca:c5:98:a8:58:3e:c8:3a:ab:
         a4:bd:c5:7b:a9:81:00:1d:e7:13:d8:ac:cd:dc:51:e0:18:07:
         45:fd:d2:c9:9f:2d:24:e7:98:28:a0:10:f7:3f:dd:8b:6a:e8:
         9b:34:14:43:60:f5:2f:3f:70:a2:9e:67:3f:d7:a5:96:d6:fc:
         08:20:73:e0:b3:65:42:1f:69:ca:fd:48:e2:db:02:05:b7:19:
         4a:bf:09:48:7a:56:2e:11:b3:03:50:8b:8b:d8:fa:e2:fb:24:
         98:1e:4e:64:9d:4f:b3:0b:ba:2c:40:ab:c2:26:7c:5b:b9:33:
         08:f8:70:5b:96:f2:16:01:3b:df:6e:08:7f:95:4b:66:80:f7:
         d4:27:d8:75:d3:05:77:f7:c6:86:dc:1a:c0:f9:e0:94:82:28:
         ca:9b:32:08:83:1b:a5:9d:a8:9d:b7:76:1c:03:0d:e4:72:65:
         d9:d6:6f:20:e0:90:0f:0c:0b:7b:e6:47:32:fb:5e:1d:1d:d4:
         50:55:d6:5e:c7:8c:aa:db:98:e4:b0:dd:a2:f3:ca:11:7e:30:
         8a:c6:21:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org