Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a383030303a3a2f33342d3334203d3e20323639353134.roa
File:                     323830343a363563383a383030303a3a2f33342d3334203d3e20323639353134.roa (raw, json)
Hash identifier:          GjmtUhWL5wqxCFeE1tWcNHTwnZ5Zv54dqu13xmoJhZk=
Subject key identifier:   AD:24:0E:BE:E2:F0:AE:FC:63:EC:D1:E6:D7:F6:4D:43:4F:69:EA:94
Certificate issuer:       /CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Certificate serial:       47F2FDA040DAA7713FCA8CFF0FCA965F00EDC5A7
Authority key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a383030303a3a2f33342d3334203d3e20323639353134.roa
Signing time:             Sun 07 Apr 2024 03:21:57 +0000
ROA not before:           Sun 07 Apr 2024 03:16:57 +0000
ROA not after:            Sun 06 Apr 2025 03:21:57 +0000
asID:                     269514
IP address blocks:        2804:65c8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f2:fd:a0:40:da:a7:71:3f:ca:8c:ff:0f:ca:96:5f:00:ed:c5:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
        Validity
            Not Before: Apr  7 03:16:57 2024 GMT
            Not After : Apr  6 03:21:57 2025 GMT
        Subject: CN=AD240EBEE2F0AEFC63ECD1E6D7F64D434F69EA94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:69:5f:08:de:67:9d:d0:82:7c:ba:c0:46:
                    24:d9:0a:7a:57:a0:42:09:b7:65:ef:68:80:31:dd:
                    13:67:f0:4f:b0:2e:67:ae:2d:31:f7:64:5f:d2:5b:
                    4f:ee:90:dd:bf:40:6d:25:e7:47:e5:f8:86:8a:a8:
                    76:4b:5e:d3:fc:b2:be:15:dd:7c:6b:6a:c7:64:ce:
                    7c:2c:5e:e0:12:9b:e1:ee:00:51:a5:aa:84:1d:a8:
                    a3:8e:75:eb:e4:f5:08:ff:c1:14:4f:2e:95:1c:a9:
                    9c:c9:d7:56:49:05:b7:e0:e0:9e:05:07:ee:bd:d4:
                    9a:47:05:63:f9:a9:11:e0:4b:f5:5c:71:13:e7:aa:
                    67:a2:5f:12:cc:28:cd:48:44:d1:49:d9:45:fc:b4:
                    b7:c2:b6:7d:08:00:48:6b:ce:09:48:3b:a6:98:ad:
                    83:f1:83:7e:02:12:8d:6b:fc:dc:a9:3f:7a:55:21:
                    0b:d5:35:79:0b:d5:7c:72:3e:08:43:5a:aa:b2:bf:
                    72:13:72:b9:8d:d0:23:c0:23:75:cf:69:bf:8c:4d:
                    1e:53:55:96:83:78:45:af:00:e5:f3:01:c7:fa:37:
                    84:50:76:6d:47:ae:2c:52:f0:12:15:c0:34:79:91:
                    ff:b3:43:ad:bd:22:a4:31:7c:21:35:d6:25:d6:0d:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:24:0E:BE:E2:F0:AE:FC:63:EC:D1:E6:D7:F6:4D:43:4F:69:EA:94
            X509v3 Authority Key Identifier:
                keyid:3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a383030303a3a2f33342d3334203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65c8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:5a:c9:87:16:dc:2b:5b:a6:23:bd:86:3e:40:49:7b:3f:ee:
         80:6f:0c:7b:4e:cb:97:87:23:8c:e3:3c:5a:c2:31:d6:8d:c5:
         89:2a:a4:5b:77:f7:8b:35:4b:a6:e3:9b:4b:79:95:ad:6b:28:
         cd:1a:b7:8c:01:b8:3d:23:d3:40:a8:7f:d3:56:d9:09:63:a3:
         af:48:a5:e9:80:97:b0:65:09:de:b6:94:24:ad:e2:a8:51:ab:
         48:fc:52:d5:a3:81:aa:a5:48:47:a1:17:ec:53:94:00:0b:26:
         de:0f:ca:fa:4c:f4:29:b3:28:75:3d:21:63:50:b1:99:ee:31:
         de:0a:35:36:9f:44:92:e9:25:84:fe:d0:b2:9b:05:d8:3f:5e:
         49:ba:d6:49:c2:37:fb:b5:b2:fd:f0:c4:f8:ea:b5:12:98:b5:
         5f:d0:ea:60:20:bd:5a:17:3c:4c:68:aa:ad:28:90:8c:5e:3e:
         1a:48:c8:9c:9a:72:28:e2:2a:de:86:25:45:4e:ce:ef:9c:ee:
         a4:fd:09:14:c2:09:4d:bc:3b:31:31:32:72:a1:2c:c7:61:5d:
         98:8f:94:1d:02:dd:de:5a:ab:a6:90:ce:43:f1:9f:6e:42:2e:
         f8:f2:3d:2b:56:b3:49:d3:8d:4d:71:fe:1f:87:96:2a:50:52:
         5c:ff:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org