Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a633030303a3a2f33342d3334203d3e20323732313634.roa
File:                     323830343a383265383a633030303a3a2f33342d3334203d3e20323732313634.roa (raw, json)
Hash identifier:          gYQmMj89ZfPhQZYj/pUpZYFJnnzD/uPC5X2y+9iAZS4=
Subject key identifier:   E0:2C:EC:84:A4:E2:24:3A:D2:3C:68:21:AB:A8:90:62:91:58:9B:67
Certificate issuer:       /CN=6D0C2E6FED7E38F97A258171425DB7D75B7F8247
Certificate serial:       259746EF3BFE49DBD7605A8D04E0C1D2DC984B1D
Authority key identifier: 6D:0C:2E:6F:ED:7E:38:F9:7A:25:81:71:42:5D:B7:D7:5B:7F:82:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a633030303a3a2f33342d3334203d3e20323732313634.roa
Signing time:             Wed 28 Jun 2023 23:00:00 +0000
ROA not before:           Wed 28 Jun 2023 22:55:00 +0000
ROA not after:            Wed 26 Jun 2024 23:00:00 +0000
asID:                     272164
IP address blocks:        2804:82e8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:97:46:ef:3b:fe:49:db:d7:60:5a:8d:04:e0:c1:d2:dc:98:4b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D0C2E6FED7E38F97A258171425DB7D75B7F8247
        Validity
            Not Before: Jun 28 22:55:00 2023 GMT
            Not After : Jun 26 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:ac:8e:94:d5:04:f8:98:84:31:96:91:a3:
                    c4:20:79:07:98:d9:dd:2e:74:e5:03:d7:48:17:64:
                    8f:56:fc:8e:ca:14:f9:ce:68:1d:c3:16:d9:77:3c:
                    61:b1:3e:6e:99:be:cc:d9:32:6e:9e:9f:5f:dc:fd:
                    5a:88:22:bb:82:e2:f1:a6:58:d6:7c:b8:0a:27:c7:
                    27:24:85:ef:d0:15:98:b3:0b:49:53:d6:83:a2:41:
                    d1:7e:52:ae:43:55:af:44:15:cb:ca:c7:53:3c:81:
                    81:c3:ca:69:c8:e0:58:aa:1f:a4:8e:a8:b9:d4:72:
                    82:b4:cf:cc:fd:7b:33:de:73:87:02:69:6c:c5:2e:
                    f1:9e:0c:03:73:ad:40:88:8b:05:3b:96:92:4c:f6:
                    df:18:9b:cd:ef:3f:91:56:47:7d:54:41:89:3e:25:
                    c2:fc:54:ec:e4:f9:c0:3d:1f:11:93:ef:8b:31:b7:
                    df:3f:b3:93:b5:60:f1:6e:ae:51:e1:ca:64:a5:c4:
                    78:1f:3f:bd:21:42:be:f1:b3:6a:fe:54:1c:ea:f7:
                    d3:d6:d9:ab:12:d9:29:c2:66:1c:54:f7:c9:6d:5e:
                    d6:bb:fe:b4:22:ce:66:1f:73:96:30:91:3c:fc:d8:
                    69:2e:8d:77:76:12:cf:c7:1c:d1:75:5f:1b:62:88:
                    36:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2C:EC:84:A4:E2:24:3A:D2:3C:68:21:AB:A8:90:62:91:58:9B:67
            X509v3 Authority Key Identifier:
                keyid:6D:0C:2E:6F:ED:7E:38:F9:7A:25:81:71:42:5D:B7:D7:5B:7F:82:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a633030303a3a2f33342d3334203d3e20323732313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cb:71:4b:2f:40:cc:05:d0:37:52:3e:df:85:30:59:06:47:84:
         9c:9f:2e:60:dc:d5:8b:3a:cd:db:4b:c7:a7:ea:9a:3f:7a:6c:
         f6:b9:12:e9:95:10:78:ed:7c:35:8a:50:2c:b5:62:8c:f5:bd:
         4a:3e:91:e5:5c:57:90:f2:13:65:77:ac:46:e1:cb:aa:da:ba:
         44:47:39:99:18:49:5f:be:59:74:a3:f4:53:ee:f7:96:c0:db:
         93:a8:48:28:ce:cd:db:35:a6:91:19:c4:8e:21:69:95:99:c4:
         dd:cf:00:98:7e:87:9c:bb:28:f9:42:65:8d:6e:42:9e:18:b3:
         8e:62:12:82:38:bb:66:a7:40:b2:8e:83:ee:e6:83:88:78:ed:
         3a:6a:3f:7f:7c:9a:5c:89:29:b3:a1:26:dc:7f:c4:0f:39:0b:
         08:26:12:91:31:03:b0:0c:25:7d:a7:a0:55:09:0c:f5:e5:e9:
         79:b7:e3:e9:b0:33:f0:c6:ea:88:a4:a0:7c:ea:6b:e4:d1:bc:
         4c:ee:b1:1b:f9:9a:83:a2:94:9c:d5:f1:19:80:59:d3:11:dd:
         3f:2c:e1:4c:88:39:f2:77:9a:d1:f2:28:34:d5:12:86:d1:09:
         97:3f:e9:2e:12:6c:88:84:03:8e:c0:a3:77:e3:d7:77:f8:43:
         1f:23:b4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org