Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a383030303a3a2f33342d3334203d3e20323638373836.roa
File:                     323830343a356161343a383030303a3a2f33342d3334203d3e20323638373836.roa (raw, json)
Hash identifier:          2BDDkwFLS5xcWXBMN17rTVRLuo8rZiOKoK/pZeCR/pk=
Subject key identifier:   95:29:D3:D0:FF:5B:51:D5:91:71:2A:2A:F4:5D:20:A6:5C:F1:6C:D4
Certificate issuer:       /CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
Certificate serial:       3DFF1C4B9B16E487F92BA57412FF585D7A9F7524
Authority key identifier: A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a383030303a3a2f33342d3334203d3e20323638373836.roa
Signing time:             Thu 04 Apr 2024 10:25:57 +0000
ROA not before:           Thu 04 Apr 2024 10:20:57 +0000
ROA not after:            Thu 03 Apr 2025 10:25:57 +0000
asID:                     268786
IP address blocks:        2804:5aa4:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ff:1c:4b:9b:16:e4:87:f9:2b:a5:74:12:ff:58:5d:7a:9f:75:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
        Validity
            Not Before: Apr  4 10:20:57 2024 GMT
            Not After : Apr  3 10:25:57 2025 GMT
        Subject: CN=9529D3D0FF5B51D591712A2AF45D20A65CF16CD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:ae:f1:0a:8b:ef:ee:79:60:92:4e:c5:c8:
                    17:cf:90:e9:8a:cf:80:d2:a5:3a:96:0f:d0:05:79:
                    d3:8f:43:aa:fa:c6:54:5f:55:3b:fd:7a:85:2b:3c:
                    f9:dd:3e:da:51:98:d1:30:ec:51:8c:7e:c1:08:a6:
                    59:f9:dd:e4:1b:a5:7f:71:05:27:24:ef:68:23:52:
                    9a:4d:c2:4f:0a:ab:db:29:64:98:df:74:57:be:12:
                    a3:c5:ef:3c:53:a2:4d:57:cb:c2:7d:2c:9e:d9:bf:
                    85:b9:f7:d6:7a:78:91:88:8d:dd:fa:2e:6f:8e:f3:
                    06:50:f4:82:45:7a:5c:17:bc:b9:92:aa:7e:67:35:
                    b9:12:7f:3a:ec:ea:15:05:6f:fa:4c:ec:1c:8c:b9:
                    54:36:74:93:11:20:65:38:56:c7:c0:ad:a0:91:01:
                    91:69:1b:e8:23:d9:1c:9a:90:1d:c2:80:95:18:fe:
                    27:0b:90:18:33:c5:f4:b5:63:54:35:08:50:c0:cc:
                    d7:db:fc:55:1a:4a:af:21:19:3b:98:09:3f:c6:41:
                    ae:46:0d:6d:21:7f:55:49:0b:1b:9d:e5:05:34:83:
                    6a:fe:59:1d:2d:3d:7f:98:6b:e5:74:92:c8:c3:f8:
                    cb:b5:00:77:4a:ac:06:5f:52:e3:81:3c:39:01:37:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:29:D3:D0:FF:5B:51:D5:91:71:2A:2A:F4:5D:20:A6:5C:F1:6C:D4
            X509v3 Authority Key Identifier:
                keyid:A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a383030303a3a2f33342d3334203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:5b:f1:83:8f:b1:9f:a2:c9:35:b8:8f:e3:9c:66:1a:a9:48:
         f4:1b:78:52:81:0d:55:06:2e:72:0c:b4:64:70:6d:e1:03:4f:
         9b:a6:95:53:35:09:a7:31:a4:90:35:23:69:cb:b0:c2:1b:33:
         d1:8a:38:a9:51:bb:ec:18:3a:5b:88:1f:53:cc:90:00:73:35:
         10:9c:76:aa:95:f1:83:27:97:4e:23:5c:2b:a8:b3:e4:05:da:
         fa:57:9a:38:18:5e:01:4c:d3:ea:40:6c:f7:8a:41:0a:84:d4:
         3f:68:41:21:be:1f:97:71:be:f4:fb:69:8c:ea:4a:74:71:06:
         ae:a9:22:09:05:bf:57:01:10:ea:4f:bf:a6:c5:89:60:44:30:
         7f:c4:ad:e9:12:a0:06:7b:af:f6:99:91:f8:9d:91:f0:e6:2e:
         1f:c9:a0:74:37:32:63:20:0d:ad:05:67:a4:8a:be:92:71:c6:
         c8:33:fd:a6:c2:b0:eb:a7:5d:e3:65:54:af:50:52:42:83:29:
         7c:10:a1:ba:ec:c8:06:5e:20:99:75:af:4b:da:5f:1c:0b:71:
         81:72:78:68:32:49:e3:57:26:14:8e:a4:6d:1c:a8:d2:f3:3a:
         c7:91:87:93:12:4b:02:94:b4:e1:58:86:a7:41:f7:7b:08:f1:
         29:95:7a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org