Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa
File:                     323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa (raw, json)
Hash identifier:          6Rtyam00avfj1ds/8u7MsfGetuVZazf1iARtAOJzKOQ=
Subject key identifier:   26:F5:60:A0:B5:DD:8C:47:D6:85:23:36:C9:BC:AA:22:80:AF:B8:25
Certificate issuer:       /CN=8676DCF1D873533AB6D8D41ADF1DB8078DE7F289
Certificate serial:       16A2162D82FCFCEEE90A2F693766A4374C386FC2
Authority key identifier: 86:76:DC:F1:D8:73:53:3A:B6:D8:D4:1A:DF:1D:B8:07:8D:E7:F2:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8676DCF1D873533AB6D8D41ADF1DB8078DE7F289.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa
Signing time:             Thu 29 Jun 2023 20:00:01 +0000
ROA not before:           Thu 29 Jun 2023 19:55:01 +0000
ROA not after:            Thu 27 Jun 2024 20:00:01 +0000
asID:                     272182
IP address blocks:        2804:8330:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a2:16:2d:82:fc:fc:ee:e9:0a:2f:69:37:66:a4:37:4c:38:6f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8676DCF1D873533AB6D8D41ADF1DB8078DE7F289
        Validity
            Not Before: Jun 29 19:55:01 2023 GMT
            Not After : Jun 27 20:00:01 2024 GMT
        Subject: CN=3082010A0282010100912F049E1DC6056F776CECE3C2ED68C26BB3D1A5C3C21301BAD6F0B72E74C959B59C9485F2E657B17F8E7F8ACF4C56865C51DF1763D6B3A20B08D9732D1F887059482692242C190B6908A50AF83FC07E7C8AC3D3F25B8BE543ED7D189411193585FDF95B3CDA04EF89C52E10A29810E665EF30C3AAA44D8009E9D9B421910A4A85F8A492E769EDCD378EC57CC89DBB0C64D2C0360554CD9570B0457836F7068C2FF0E4C89FF42C56FC28B5CC6A8581827AF1D2DCACA6A589CC0EB053FD496A37169507F61D0A2D2D6E3A45ACFB119CA51AB0DB06409D3A60BD39A5EF1CCE18619F5FE7DF7A37D0712730A70EE1DE5E1BBFAFE4034F2A4DA85BBEE2753AB2D9430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2f:04:9e:1d:c6:05:6f:77:6c:ec:e3:c2:ed:
                    68:c2:6b:b3:d1:a5:c3:c2:13:01:ba:d6:f0:b7:2e:
                    74:c9:59:b5:9c:94:85:f2:e6:57:b1:7f:8e:7f:8a:
                    cf:4c:56:86:5c:51:df:17:63:d6:b3:a2:0b:08:d9:
                    73:2d:1f:88:70:59:48:26:92:24:2c:19:0b:69:08:
                    a5:0a:f8:3f:c0:7e:7c:8a:c3:d3:f2:5b:8b:e5:43:
                    ed:7d:18:94:11:19:35:85:fd:f9:5b:3c:da:04:ef:
                    89:c5:2e:10:a2:98:10:e6:65:ef:30:c3:aa:a4:4d:
                    80:09:e9:d9:b4:21:91:0a:4a:85:f8:a4:92:e7:69:
                    ed:cd:37:8e:c5:7c:c8:9d:bb:0c:64:d2:c0:36:05:
                    54:cd:95:70:b0:45:78:36:f7:06:8c:2f:f0:e4:c8:
                    9f:f4:2c:56:fc:28:b5:cc:6a:85:81:82:7a:f1:d2:
                    dc:ac:a6:a5:89:cc:0e:b0:53:fd:49:6a:37:16:95:
                    07:f6:1d:0a:2d:2d:6e:3a:45:ac:fb:11:9c:a5:1a:
                    b0:db:06:40:9d:3a:60:bd:39:a5:ef:1c:ce:18:61:
                    9f:5f:e7:df:7a:37:d0:71:27:30:a7:0e:e1:de:5e:
                    1b:bf:af:e4:03:4f:2a:4d:a8:5b:be:e2:75:3a:b2:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F5:60:A0:B5:DD:8C:47:D6:85:23:36:C9:BC:AA:22:80:AF:B8:25
            X509v3 Authority Key Identifier:
                keyid:86:76:DC:F1:D8:73:53:3A:B6:D8:D4:1A:DF:1D:B8:07:8D:E7:F2:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/8676DCF1D873533AB6D8D41ADF1DB8078DE7F289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8676DCF1D873533AB6D8D41ADF1DB8078DE7F289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:5a:b4:74:6c:ad:d5:41:f6:a4:24:34:64:1d:de:ac:f9:3d:
         45:ac:38:ca:3b:3e:5d:f9:01:ab:03:a1:41:8e:7a:70:ad:42:
         c9:83:a8:83:73:98:cc:de:98:4c:75:55:91:a4:2f:db:a9:9b:
         0b:57:3b:08:41:63:bb:0f:d7:4b:32:e3:1c:53:00:28:06:5b:
         06:7c:ec:bc:54:94:d4:e6:50:53:01:7e:c3:35:e8:4c:ff:c6:
         2f:03:c0:7d:61:47:7c:34:52:8d:e9:5f:d2:07:0e:30:e1:58:
         c5:b4:5f:50:46:3f:b7:43:4c:17:6c:b3:37:f6:43:b8:14:8d:
         45:2a:f2:15:03:82:60:95:25:c7:01:4d:c6:b7:94:5e:aa:4a:
         2f:87:7e:01:f1:85:1d:f5:5c:40:55:f9:7a:83:07:aa:57:46:
         8b:a7:41:bf:15:83:27:7c:bc:9c:db:db:8a:6e:8c:71:b2:a0:
         31:8d:73:47:57:76:83:81:d1:a3:df:bc:5c:29:13:93:98:54:
         44:ad:9a:d1:5d:03:4e:03:13:16:5b:d6:fe:1c:22:d2:e4:44:
         a2:4b:7c:1d:1d:93:74:6e:b5:a9:6a:ec:56:da:ac:10:af:cd:
         9d:91:2f:21:c0:a4:ed:f7:41:1b:fb:03:47:b7:a3:f2:19:7f:
         f1:e6:77:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org