Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33322d3334203d3e20323637343239.roa
File:                     323830343a343136303a3a2f33322d3334203d3e20323637343239.roa (raw, json)
Hash identifier:          kuNsbd3qvpg9KFwW8cukGDViyastuvPln1G/LXnuvSs=
Subject key identifier:   8D:77:AA:F9:75:C7:E4:C8:59:43:34:E9:39:B6:E0:06:90:67:5F:30
Certificate issuer:       /CN=84128BC80C2445D3BAEE8706CBE22C10D4BB33C2
Certificate serial:       297966FA6930BC96DE9014D16E4EA34D24949C91
Authority key identifier: 84:12:8B:C8:0C:24:45:D3:BA:EE:87:06:CB:E2:2C:10:D4:BB:33:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84128BC80C2445D3BAEE8706CBE22C10D4BB33C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33322d3334203d3e20323637343239.roa
Signing time:             Thu 17 Aug 2023 18:32:10 +0000
ROA not before:           Thu 17 Aug 2023 18:27:10 +0000
ROA not after:            Thu 15 Aug 2024 18:32:10 +0000
asID:                     267429
IP address blocks:        2804:4160::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:79:66:fa:69:30:bc:96:de:90:14:d1:6e:4e:a3:4d:24:94:9c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84128BC80C2445D3BAEE8706CBE22C10D4BB33C2
        Validity
            Not Before: Aug 17 18:27:10 2023 GMT
            Not After : Aug 15 18:32:10 2024 GMT
        Subject: CN=8D77AAF975C7E4C8594334E939B6E00690675F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:fc:cd:fb:fc:0f:60:9b:d0:a9:d0:6c:6a:
                    50:d0:7e:f9:fc:d3:b9:ef:ea:fc:e8:56:8c:19:6c:
                    31:35:95:aa:fe:67:44:ec:e8:e1:93:0e:ed:f0:5c:
                    04:de:13:3c:05:ad:a5:69:b5:37:b2:c8:f9:d0:54:
                    96:e6:8c:57:69:8c:e4:97:55:ce:03:0c:70:5d:6e:
                    f6:a2:cd:ea:b1:2e:7e:e0:6a:92:d4:11:86:98:a4:
                    a3:75:f1:7a:eb:a4:0f:65:5b:2e:44:2b:de:88:c6:
                    8f:43:45:44:c5:36:2a:fc:22:1e:fb:2f:ca:e4:69:
                    f3:15:4b:c8:58:c2:1f:ab:89:bb:e4:97:b2:a5:1f:
                    85:28:49:76:37:0e:f7:40:29:9a:c9:e7:6d:c1:8f:
                    2b:eb:4c:63:dc:56:ba:a2:f2:22:9d:00:63:75:10:
                    cf:89:5b:95:c1:46:f6:fd:b7:fa:af:96:81:9f:67:
                    ec:17:53:54:c4:2e:f3:1b:87:0f:11:21:0b:67:c1:
                    9a:aa:f9:27:00:09:d9:dd:48:74:b1:0c:49:11:6f:
                    e6:90:9d:66:02:17:85:f4:9e:b3:e0:03:ca:d8:8b:
                    ef:7f:db:0e:a4:b6:69:07:4d:97:52:4f:d6:a3:83:
                    ae:fb:b1:bf:5e:2c:11:bd:2c:51:09:cb:df:87:8c:
                    95:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:77:AA:F9:75:C7:E4:C8:59:43:34:E9:39:B6:E0:06:90:67:5F:30
            X509v3 Authority Key Identifier:
                keyid:84:12:8B:C8:0C:24:45:D3:BA:EE:87:06:CB:E2:2C:10:D4:BB:33:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/84128BC80C2445D3BAEE8706CBE22C10D4BB33C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84128BC80C2445D3BAEE8706CBE22C10D4BB33C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33322d3334203d3e20323637343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4160::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:84:85:bf:5a:6d:93:c4:10:21:00:be:a0:a8:c8:f7:1a:98:
         73:10:2b:4b:47:55:30:b8:8f:87:cb:0b:41:13:2e:1b:e6:cd:
         eb:90:51:1e:7e:9d:f9:74:6e:90:6a:05:4c:3b:ed:89:79:0a:
         48:94:66:d4:9e:d3:6b:74:35:ab:e6:66:28:d5:7f:77:3d:9e:
         e9:f4:76:5e:b7:e4:ec:21:64:ac:03:3f:29:af:63:60:fc:80:
         16:87:a3:a1:b8:af:0f:a7:aa:e4:8e:8b:6a:22:76:b6:df:8c:
         1e:08:6d:e6:42:66:c5:c6:85:43:64:0e:9d:9d:0d:cb:b0:f8:
         05:06:72:d4:0f:2e:55:26:1a:51:2c:63:c5:fb:05:f8:b3:55:
         e2:90:57:5e:cd:ff:99:24:b9:e2:6f:77:04:7b:83:7c:73:e3:
         a2:00:a2:60:ae:6c:bc:6f:37:6b:e9:ef:cd:bb:cf:9a:01:fb:
         85:41:d7:d3:72:6e:a9:9b:1b:d2:b8:55:18:ed:9e:cd:4f:06:
         7a:9c:c0:6b:47:dd:97:68:0e:1a:fa:e6:f5:b1:29:5c:c1:b5:
         02:6a:9e:dd:41:d7:84:b9:d7:80:c7:b5:e8:72:37:91:7e:66:
         08:ac:bf:49:25:b7:57:9f:2a:be:a5:9c:19:4a:f9:2e:f7:44:
         5b:50:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org