Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f34302d3430203d3e20323731313137.roa
File:                     323830343a373638343a383030303a3a2f34302d3430203d3e20323731313137.roa (raw, json)
Hash identifier:          FAVAqVU3dOlMlFhNEpyim5bjLmujPQ3syVs2tJOVwTE=
Subject key identifier:   10:12:C7:AC:46:29:A2:C3:79:D7:CD:EE:CE:0B:D7:1F:D2:89:20:4F
Certificate issuer:       /CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
Certificate serial:       1869BDC200A19FA650734E369B112BAC7C8E0105
Authority key identifier: F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f34302d3430203d3e20323731313137.roa
Signing time:             Mon 21 Aug 2023 22:51:46 +0000
ROA not before:           Mon 21 Aug 2023 22:46:46 +0000
ROA not after:            Mon 19 Aug 2024 22:51:46 +0000
asID:                     271117
IP address blocks:        2804:7684:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:69:bd:c2:00:a1:9f:a6:50:73:4e:36:9b:11:2b:ac:7c:8e:01:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
        Validity
            Not Before: Aug 21 22:46:46 2023 GMT
            Not After : Aug 19 22:51:46 2024 GMT
        Subject: CN=1012C7AC4629A2C379D7CDEECE0BD71FD289204F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:25:c2:0c:0a:3e:22:a2:45:7b:27:b5:b8:
                    a3:b7:a6:1d:c8:02:71:98:09:26:67:c1:07:03:d2:
                    49:ba:2c:1e:88:59:d8:76:0e:88:ad:31:91:02:92:
                    64:74:52:e2:ab:5f:59:3e:37:a2:63:af:66:a1:7c:
                    19:46:10:45:25:2c:e9:0d:31:40:5b:dc:dd:e9:37:
                    0d:11:e4:af:a1:4a:da:23:27:1e:f8:05:70:2b:ad:
                    a8:80:03:ca:a5:74:77:5f:47:a0:79:13:a8:5a:70:
                    61:a9:47:59:60:17:95:82:ce:d8:1a:04:6d:f5:c1:
                    41:94:b9:9c:d3:ab:b9:1d:f2:fe:db:98:6d:e0:c7:
                    77:3b:c7:31:df:2e:ea:4c:68:61:69:da:91:b2:b5:
                    ca:df:f8:b9:79:7c:37:33:74:3d:4e:a8:c6:25:3c:
                    16:68:42:30:41:dd:97:88:5f:21:89:f2:56:41:e8:
                    f6:2e:12:49:68:19:cf:e3:e9:7e:69:90:25:75:d1:
                    65:4e:0e:a4:cd:59:b4:41:70:9e:55:92:d1:7a:f3:
                    36:7d:64:82:0b:cc:42:b5:b4:46:a1:64:39:27:c5:
                    ae:6f:70:9b:55:0a:3e:a7:9a:c8:53:7d:2f:91:5c:
                    a9:4b:cc:89:5e:89:1b:68:e5:e9:c7:c3:ec:14:6a:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:12:C7:AC:46:29:A2:C3:79:D7:CD:EE:CE:0B:D7:1F:D2:89:20:4F
            X509v3 Authority Key Identifier:
                keyid:F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f34302d3430203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:57:6d:17:6d:9b:4c:6b:ed:49:ca:de:d6:b8:db:6c:17:0d:
         25:18:55:8a:6c:6c:e7:ab:2e:61:53:19:59:b1:a6:ce:a3:6c:
         49:e5:d9:73:71:80:fd:50:39:40:d0:86:a4:e0:00:e3:94:c8:
         8d:8d:19:e2:26:36:18:eb:19:9b:72:4f:8f:96:6d:fc:b1:81:
         e4:af:54:f9:83:b7:7b:55:8f:e4:bb:1d:1f:6a:bc:2b:2d:91:
         d3:58:4c:9b:4f:c8:e3:35:d6:b9:94:02:2f:e8:dc:cd:31:aa:
         58:59:46:59:fb:76:ab:98:89:91:af:f5:7d:c8:9d:f2:88:be:
         76:37:17:d7:4d:bd:41:61:7a:ff:1b:bb:48:c7:66:c0:92:27:
         ce:5e:a1:61:7d:41:98:7b:37:38:4a:e3:41:93:2a:4f:6b:f3:
         b1:a9:7a:fe:b3:dd:72:10:df:10:28:c0:9e:17:49:cf:82:d0:
         03:dc:9d:d9:d1:16:a0:ac:99:cf:3b:0e:19:65:a7:bb:59:d1:
         2c:ac:4b:fe:28:8a:58:81:7a:90:d1:2b:db:81:df:81:c3:62:
         39:78:3e:d8:35:b5:c0:2e:28:6a:e3:37:aa:a4:40:d3:91:d1:
         3c:2d:25:1a:81:cc:b2:a2:82:23:5f:b9:c2:d9:b4:ab:c9:ee:
         03:a1:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org