Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a343030303a3a2f33342d3334203d3e20323639353134.roa
File:                     323830343a363563383a343030303a3a2f33342d3334203d3e20323639353134.roa (raw, json)
Hash identifier:          L1rXR1cJiS2y4qE3chkDDWghk8GPY62WjJzohttksHY=
Subject key identifier:   67:6D:43:BA:37:4A:5F:91:DF:BF:2B:77:09:BD:64:F2:92:FA:87:74
Certificate issuer:       /CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Certificate serial:       292C2555FCA6CACA897C1952F2182BDA2ACFD8F8
Authority key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a343030303a3a2f33342d3334203d3e20323639353134.roa
Signing time:             Sun 07 Apr 2024 03:21:57 +0000
ROA not before:           Sun 07 Apr 2024 03:16:57 +0000
ROA not after:            Sun 06 Apr 2025 03:21:57 +0000
asID:                     269514
IP address blocks:        2804:65c8:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2c:25:55:fc:a6:ca:ca:89:7c:19:52:f2:18:2b:da:2a:cf:d8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
        Validity
            Not Before: Apr  7 03:16:57 2024 GMT
            Not After : Apr  6 03:21:57 2025 GMT
        Subject: CN=676D43BA374A5F91DFBF2B7709BD64F292FA8774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7c:16:94:70:04:d0:6b:03:e1:39:47:0a:1c:
                    43:d1:99:4a:4e:07:c4:57:0b:e8:76:9d:54:d8:16:
                    c9:f8:06:82:22:87:60:14:75:c4:31:c0:2d:f5:79:
                    dc:d4:3f:5a:1f:ae:47:cf:00:3d:23:eb:6b:2f:8b:
                    3a:a1:47:b1:8b:44:42:e9:0f:68:38:db:21:d1:e3:
                    af:94:5e:e0:31:ca:29:66:87:19:a6:c3:0a:bf:a0:
                    77:b6:b0:ed:8c:3d:d3:92:a2:05:65:a7:20:01:d3:
                    71:56:af:7b:07:35:9f:9d:be:28:73:dc:f0:5c:10:
                    30:e4:39:4e:81:4d:86:93:63:a1:c5:d0:c4:41:23:
                    24:cb:94:e5:1b:41:59:73:d9:a4:0c:26:7a:9c:ca:
                    0c:8c:3f:1e:77:d9:3c:16:75:ad:ad:e2:6e:da:78:
                    b1:3b:79:2a:40:62:3e:a2:39:d7:b0:62:df:b6:1f:
                    d2:b6:ae:e5:ba:d9:23:3b:83:ca:48:be:4c:96:6a:
                    12:61:6a:51:cf:f8:9a:99:75:96:34:90:39:b1:76:
                    12:05:e0:a0:6f:3d:65:01:f3:86:da:b0:fe:01:00:
                    56:8e:e5:95:d2:0a:9f:c2:1b:d4:de:d7:74:ec:8a:
                    72:06:ee:55:65:9c:2d:69:3a:51:e6:db:f0:9d:b4:
                    89:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6D:43:BA:37:4A:5F:91:DF:BF:2B:77:09:BD:64:F2:92:FA:87:74
            X509v3 Authority Key Identifier:
                keyid:3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a343030303a3a2f33342d3334203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65c8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ce:74:f7:d9:a6:d8:6e:5f:7f:e2:40:87:5d:a7:d1:ea:d3:14:
         88:b8:81:c3:08:bc:de:ac:15:74:bf:29:4b:a6:a7:bf:b4:80:
         0d:d4:60:10:5c:91:45:2d:95:4a:ad:50:1c:da:23:8a:65:f0:
         b6:8c:99:5e:ac:98:07:00:1f:a1:18:da:fc:8c:76:31:bb:6e:
         31:70:a3:92:37:31:83:bb:54:89:6e:95:c3:aa:82:26:0b:d3:
         35:1f:6c:2c:b9:85:10:09:bc:59:7f:b9:8e:96:b4:d5:e4:6e:
         63:ea:ab:af:96:72:bd:85:45:01:60:0a:93:76:a9:ae:f4:30:
         2e:c1:53:51:b2:33:41:aa:28:84:da:c0:58:0f:ea:c8:28:42:
         a3:ad:17:33:ae:9a:0f:65:5c:48:ea:8f:28:61:75:95:18:7c:
         5b:17:d2:07:f0:34:d0:48:14:f3:4b:75:37:76:fe:40:f1:4a:
         51:8c:37:db:0f:fe:b8:e3:ef:1c:21:96:57:b7:b5:5f:c3:ac:
         fd:4c:91:f7:95:49:e3:c4:54:61:57:9d:b0:b4:17:86:76:8c:
         28:19:cb:85:0b:ba:3f:d8:7c:db:1e:08:62:41:ec:70:03:c2:
         47:a0:83:6a:30:1f:88:83:ae:d1:4c:58:87:52:bc:f0:bb:6a:
         89:41:5f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org