Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a3a2f33342d3334203d3e20323635313430.roa
File:                     323830343a326233343a3a2f33342d3334203d3e20323635313430.roa (raw, json)
Hash identifier:          KwYlYFrqK6ph7i1QjmdP+5PHy/+tmrBVd+NV/KOoV3k=
Subject key identifier:   9A:E7:A2:83:AE:3D:03:49:65:44:40:BC:AF:67:17:B9:E8:48:9B:40
Certificate issuer:       /CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
Certificate serial:       7B2EA3B2FBDBF1292C001E2B63293C73CBCA0673
Authority key identifier: AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a3a2f33342d3334203d3e20323635313430.roa
Signing time:             Thu 04 Apr 2024 15:20:51 +0000
ROA not before:           Thu 04 Apr 2024 15:15:51 +0000
ROA not after:            Thu 03 Apr 2025 15:20:51 +0000
asID:                     265140
IP address blocks:        2804:2b34::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2e:a3:b2:fb:db:f1:29:2c:00:1e:2b:63:29:3c:73:cb:ca:06:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
        Validity
            Not Before: Apr  4 15:15:51 2024 GMT
            Not After : Apr  3 15:20:51 2025 GMT
        Subject: CN=9AE7A283AE3D0349654440BCAF6717B9E8489B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:a3:17:b6:fe:70:00:f8:10:06:ed:f8:a5:
                    8b:f0:24:e8:3c:da:d1:3a:d2:80:b2:49:dc:24:4c:
                    b8:79:8b:20:2e:b8:08:ea:74:bf:c4:79:51:13:fc:
                    77:57:72:91:04:8d:99:83:cf:42:a1:69:45:be:70:
                    9f:a3:c8:1e:ec:10:e0:19:f1:df:64:49:a9:53:da:
                    b1:80:fb:f8:c2:d9:77:9a:b8:39:16:52:9c:14:3f:
                    e5:5d:29:c6:9a:8e:bc:b0:a2:e2:05:cb:12:de:76:
                    40:05:06:c4:a5:c1:77:2d:50:9a:46:af:98:b7:1b:
                    90:b3:d9:38:00:8e:2e:23:9f:86:cf:6e:c6:31:ab:
                    72:67:7c:16:7f:0f:b3:00:e3:8d:38:c8:d8:0f:b0:
                    58:6f:2d:e2:06:55:f8:99:76:b7:f7:d5:d7:6d:94:
                    15:2b:bb:d9:8c:03:fa:90:a1:4c:47:81:00:5c:fd:
                    91:5b:30:d5:10:23:c0:9b:ad:af:7b:aa:e2:76:a6:
                    08:8f:ee:cd:43:2e:15:7e:f6:99:a9:a8:bc:7c:e6:
                    a7:63:81:0c:cd:94:b6:69:ab:93:8d:cc:7f:a4:97:
                    70:76:7b:b1:22:45:0b:c1:4d:5c:ed:d7:f8:13:0f:
                    a3:59:05:60:96:e8:9a:2d:a7:d6:d3:7f:43:89:cc:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E7:A2:83:AE:3D:03:49:65:44:40:BC:AF:67:17:B9:E8:48:9B:40
            X509v3 Authority Key Identifier:
                keyid:AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a3a2f33342d3334203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b34::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:3d:f7:cb:83:2f:3f:ad:76:8e:76:98:8e:cb:c7:91:b8:d2:
         48:db:15:36:f7:65:10:08:6a:4f:e5:f7:61:29:3f:e0:51:fd:
         09:f3:6c:c6:4e:4c:49:17:22:9b:79:93:56:65:7c:44:30:45:
         a9:ac:3d:39:0e:8d:24:2a:93:e7:ab:8f:8a:d7:a4:63:90:39:
         5a:df:33:8b:90:d3:80:d9:62:01:9b:4d:ef:90:cd:e9:10:b2:
         1b:01:81:a5:b0:84:d1:bd:b2:f1:01:c8:24:76:ac:5b:9e:8c:
         d5:cd:dd:6d:b7:70:2c:5d:12:ef:df:2c:5d:aa:b8:3e:e5:1f:
         be:a4:94:37:6d:6b:64:26:55:c7:84:27:e4:7c:8a:88:2f:55:
         df:9b:99:2f:de:06:6a:86:87:77:89:8c:a6:ba:d2:fa:dd:fc:
         a4:e0:db:8e:31:cf:b0:fe:8e:7c:49:1e:8d:56:9e:7c:63:14:
         54:0c:c9:24:9b:97:42:14:5c:51:1c:31:72:bf:2c:28:90:59:
         d2:0d:9b:d9:30:62:be:47:36:6b:7d:df:d4:e4:1f:d3:79:06:
         15:3a:48:66:69:1a:b0:8e:1d:5a:15:90:02:1b:80:17:cf:f8:
         30:bc:f7:82:bd:31:26:ba:31:f2:d0:df:37:87:ca:02:69:ee:
         24:56:a0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org