Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/0/323830343a363766633a3a2f33322d3332203d3e20323639363633.roa
File:                     323830343a363766633a3a2f33322d3332203d3e20323639363633.roa (raw, json)
Hash identifier:          SsWiw2j7x+AMPmkUPMIGe4Gk6nyz+Qcxm+mQjWyAo5o=
Subject key identifier:   71:8E:7A:06:4C:0B:59:38:47:FF:A7:D0:73:F8:DF:3E:D9:76:DE:0B
Certificate issuer:       /CN=C76C7CBC8CF30884D40BCBD789019F6C804563D6
Certificate serial:       2B88AFC1C8D82F81016874107119F4ADAA6BBF21
Authority key identifier: C7:6C:7C:BC:8C:F3:08:84:D4:0B:CB:D7:89:01:9F:6C:80:45:63:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C76C7CBC8CF30884D40BCBD789019F6C804563D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/0/323830343a363766633a3a2f33322d3332203d3e20323639363633.roa
Signing time:             Fri 15 Sep 2023 17:36:29 +0000
ROA not before:           Fri 15 Sep 2023 17:31:29 +0000
ROA not after:            Fri 13 Sep 2024 17:36:29 +0000
asID:                     269663
IP address blocks:        2804:67fc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:88:af:c1:c8:d8:2f:81:01:68:74:10:71:19:f4:ad:aa:6b:bf:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C76C7CBC8CF30884D40BCBD789019F6C804563D6
        Validity
            Not Before: Sep 15 17:31:29 2023 GMT
            Not After : Sep 13 17:36:29 2024 GMT
        Subject: CN=718E7A064C0B593847FFA7D073F8DF3ED976DE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:5a:0c:e5:47:ee:c2:dc:78:61:da:fa:60:
                    b3:70:32:6b:57:8a:c1:77:4f:4a:88:6e:12:06:5d:
                    c0:0f:9a:bd:d5:f4:fe:c1:33:dc:3b:74:9f:d8:7f:
                    8f:be:64:62:6d:4a:05:f6:ba:9d:85:c3:9f:28:57:
                    80:d6:1e:f2:ec:e3:ae:48:b7:e6:06:bc:db:79:f7:
                    82:e6:ad:ad:22:f0:db:60:1c:ec:55:be:c5:c0:f9:
                    bb:6c:0f:f4:7a:1f:0c:59:58:7e:68:18:9d:4d:5b:
                    d7:6b:9b:d8:c2:33:8e:df:3f:89:3c:b6:96:83:84:
                    df:71:84:c6:d2:e5:56:2c:7b:3e:e1:16:fb:ea:96:
                    4d:13:cb:b4:85:3c:f4:db:2d:87:9c:ef:ba:a1:12:
                    9b:68:6b:8a:30:86:10:c0:87:f6:2d:19:78:59:2a:
                    bb:eb:d6:e5:45:58:34:13:4d:57:d1:17:2e:66:ab:
                    f2:6b:e5:53:13:8b:0b:f3:41:8b:dd:0e:b0:cd:1f:
                    15:89:8f:10:73:9e:75:ec:39:62:c9:f1:65:aa:bf:
                    d3:fa:ba:18:b5:b3:95:d5:1e:60:ad:18:b1:f1:92:
                    f9:05:00:28:2a:68:e0:df:ec:06:4e:42:a7:bc:1b:
                    91:30:f0:74:64:6b:76:b9:27:a5:2c:ac:cf:98:0a:
                    7a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8E:7A:06:4C:0B:59:38:47:FF:A7:D0:73:F8:DF:3E:D9:76:DE:0B
            X509v3 Authority Key Identifier:
                keyid:C7:6C:7C:BC:8C:F3:08:84:D4:0B:CB:D7:89:01:9F:6C:80:45:63:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/0/C76C7CBC8CF30884D40BCBD789019F6C804563D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C76C7CBC8CF30884D40BCBD789019F6C804563D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/0/323830343a363766633a3a2f33322d3332203d3e20323639363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:14:3d:af:7f:7e:40:d5:cd:58:b7:aa:8d:75:d3:26:40:7e:
         1d:b6:7c:a4:cd:e3:cf:16:e1:b0:e9:38:c5:11:59:f0:c9:32:
         8d:c3:14:2b:62:00:2a:cb:89:2e:0b:1c:4d:6f:c1:5d:bf:3c:
         5d:79:ea:38:61:49:72:ff:bd:8e:88:41:75:a0:cb:f8:8d:1c:
         5c:ce:d4:22:63:6b:8e:36:8c:bf:d7:63:94:79:d4:2d:4a:c9:
         c0:32:8f:e2:84:76:7a:1c:3f:d2:ca:9a:b8:56:3c:b3:5a:c8:
         77:c3:d2:92:c6:fb:bb:bc:dd:13:90:dd:87:92:0a:ea:30:80:
         e0:ff:60:18:fa:c4:5f:5c:3a:b8:d3:d2:06:5c:68:94:24:5e:
         9c:de:07:e0:9e:39:9e:57:10:28:88:47:a4:d3:fd:12:b4:e8:
         7a:0a:ca:f0:fb:bf:2f:9f:b3:5d:c7:43:00:c7:89:7c:a9:52:
         d9:fe:3e:d4:ed:9c:b2:c8:84:fd:96:3a:ea:09:60:0c:a5:8c:
         57:1d:bb:b7:6d:cd:24:30:af:8a:33:c1:3b:3a:0d:d2:c1:94:
         14:28:0e:39:3d:5b:72:d2:71:b3:c2:b9:6a:ab:36:4e:bb:d7:
         7a:6b:7b:8c:17:84:2d:8e:70:b8:5a:aa:8d:50:90:79:25:01:
         8b:68:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org