Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a313330303a3a2f34302d3430203d3e203631393031.roa
File:                     323830343a313337303a313330303a3a2f34302d3430203d3e203631393031.roa (raw, json)
Hash identifier:          +PZRa1QjFHFoBFlWXCZQselRYgHW1ujFG0qAiOk9YaQ=
Subject key identifier:   F7:1E:CF:B8:18:E4:CD:42:38:0D:33:1D:52:01:7E:72:A2:6D:87:2E
Certificate issuer:       /CN=834FD73E60D786FC8CCB3F96DB2FA9765CEC8335
Certificate serial:       4C090CA5FFDD11C716008F22F29324C21018D693
Authority key identifier: 83:4F:D7:3E:60:D7:86:FC:8C:CB:3F:96:DB:2F:A9:76:5C:EC:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a313330303a3a2f34302d3430203d3e203631393031.roa
Signing time:             Tue 07 Nov 2023 14:19:07 +0000
ROA not before:           Tue 07 Nov 2023 14:14:07 +0000
ROA not after:            Tue 05 Nov 2024 14:19:07 +0000
asID:                     61901
IP address blocks:        2804:1370:1300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:09:0c:a5:ff:dd:11:c7:16:00:8f:22:f2:93:24:c2:10:18:d6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834FD73E60D786FC8CCB3F96DB2FA9765CEC8335
        Validity
            Not Before: Nov  7 14:14:07 2023 GMT
            Not After : Nov  5 14:19:07 2024 GMT
        Subject: CN=F71ECFB818E4CD42380D331D52017E72A26D872E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:d8:37:12:a8:a9:b0:e5:bd:7f:46:af:a9:
                    cb:92:03:ca:f7:b3:83:35:1f:ab:e0:48:9c:9e:34:
                    da:7f:b1:57:f8:4f:87:33:24:72:7f:8b:21:b9:a4:
                    46:1d:c5:4f:b3:08:2d:d5:c6:ad:9e:d2:b2:03:ad:
                    19:7b:c0:25:2f:1f:27:1d:3f:d7:63:27:23:23:e1:
                    a9:b5:4b:90:95:0b:e0:8a:e2:34:28:43:2a:52:bd:
                    ba:5f:30:3a:1a:d5:d1:a2:9c:71:71:ff:39:a7:a5:
                    42:77:21:59:11:c8:de:2c:63:58:9a:0b:0e:86:28:
                    ad:d9:f3:56:30:1e:4c:6e:95:7e:1c:69:b7:ce:8b:
                    7b:0e:87:a3:6d:e4:16:c9:36:3a:bd:1d:24:be:61:
                    4f:b1:22:c1:60:3c:68:5d:8d:c3:b8:4c:88:32:24:
                    80:d6:07:79:2e:e8:38:87:b6:19:f8:99:ba:b1:6a:
                    d5:fc:e7:d5:cf:c7:89:31:70:f3:ea:b5:bc:3c:23:
                    a4:00:3a:90:6d:66:fc:5e:6a:bb:48:37:3a:4d:71:
                    9c:63:1b:9b:9d:a7:f3:a1:ab:34:0a:b6:14:55:ac:
                    45:f8:9a:cb:fa:ac:c5:c4:ad:1a:eb:02:82:bd:64:
                    43:da:81:65:a5:af:78:00:a3:b3:f4:7e:33:fc:4e:
                    52:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1E:CF:B8:18:E4:CD:42:38:0D:33:1D:52:01:7E:72:A2:6D:87:2E
            X509v3 Authority Key Identifier:
                keyid:83:4F:D7:3E:60:D7:86:FC:8C:CB:3F:96:DB:2F:A9:76:5C:EC:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a313330303a3a2f34302d3430203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1370:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:10:54:75:a5:59:8c:dc:c8:e9:63:06:3a:f4:51:37:ca:8c:
         a8:5d:a4:2f:45:48:47:4c:48:43:b1:9a:e8:bb:69:bb:9b:55:
         89:1e:24:1a:e9:e4:6a:87:cf:d8:97:f9:57:a3:04:15:0e:39:
         e3:f0:07:5c:07:75:ee:3a:44:aa:57:b0:dd:6b:d7:27:ef:1e:
         1b:3c:37:da:6e:40:fb:83:16:90:e8:86:cf:04:02:0b:96:6c:
         0e:43:e4:c9:25:37:c4:08:59:c9:a4:43:15:6c:57:1d:7d:69:
         b3:64:71:00:43:87:e5:f2:1d:0a:18:6a:a5:27:e8:99:96:0a:
         26:43:a4:38:c9:f2:71:b1:f5:b7:97:66:51:4c:dc:18:7c:e4:
         dd:69:74:71:b7:d5:09:dd:a7:04:cd:4b:6a:bb:81:41:31:af:
         33:46:df:dc:d6:15:1b:47:bc:73:a1:29:f9:47:7f:52:cf:c1:
         98:79:3b:13:4a:11:32:c6:68:88:3f:8e:d6:2e:ce:0e:ce:46:
         c5:87:cd:04:2b:09:94:a3:45:b7:77:db:09:bc:d0:54:6a:fd:
         41:cd:12:0b:4e:6d:70:d9:eb:5c:2c:28:13:7b:b4:39:ec:18:
         7b:0c:c6:f2:41:47:e8:d3:fb:cb:f8:2f:06:64:54:f5:0a:f2:
         8c:01:e9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org