Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQzhEmzjbHyj1VEcf7kMGgVSsCERT6GPDwr6QqSxnUBU/0/323830343a373332343a3a2f33322d3434203d3e20323730383938.roa
File:                     323830343a373332343a3a2f33322d3434203d3e20323730383938.roa (raw, json)
Hash identifier:          kkKqtn2kY7D2XXa/KuFZ/rIP9yPG5UQeIDKixwh4M1A=
Subject key identifier:   D0:A5:F2:2F:F8:FA:B6:4E:42:6D:3F:E1:3F:AE:3F:5F:CF:57:6B:A9
Certificate issuer:       /CN=176F5430EAF4A89FD89B21007E7E8557D45B6A0B
Certificate serial:       13A69F78817A6AF412C7FE57E8C3CE4DFE287B14
Authority key identifier: 17:6F:54:30:EA:F4:A8:9F:D8:9B:21:00:7E:7E:85:57:D4:5B:6A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/176F5430EAF4A89FD89B21007E7E8557D45B6A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQzhEmzjbHyj1VEcf7kMGgVSsCERT6GPDwr6QqSxnUBU/0/323830343a373332343a3a2f33322d3434203d3e20323730383938.roa
Signing time:             Fri 14 Jul 2023 21:00:00 +0000
ROA not before:           Fri 14 Jul 2023 20:55:00 +0000
ROA not after:            Fri 12 Jul 2024 21:00:00 +0000
asID:                     270898
IP address blocks:        2804:7324::/32 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a6:9f:78:81:7a:6a:f4:12:c7:fe:57:e8:c3:ce:4d:fe:28:7b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176F5430EAF4A89FD89B21007E7E8557D45B6A0B
        Validity
            Not Before: Jul 14 20:55:00 2023 GMT
            Not After : Jul 12 21:00:00 2024 GMT
        Subject: CN=D0A5F22FF8FAB64E426D3FE13FAE3F5FCF576BA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:ce:bb:b2:62:c0:ab:a8:1e:3d:5f:1e:db:
                    02:18:ce:d9:80:35:8c:d6:a5:79:87:e7:d7:d0:a0:
                    7e:7f:8b:56:79:cd:a2:98:75:93:68:6f:4f:95:cd:
                    75:62:5d:d2:a4:0c:bb:be:59:96:fd:c2:04:18:57:
                    c1:c1:e8:fb:78:88:c5:5d:a2:bd:c6:9e:cc:2e:e8:
                    72:e0:ec:df:c3:64:01:f8:08:49:53:03:3c:12:e2:
                    f8:5c:15:d4:c8:10:44:1f:0d:fa:b0:3b:36:0e:af:
                    e7:a2:c2:bc:3f:fb:02:0e:95:26:d6:a6:4d:2d:92:
                    d5:92:ae:bb:f6:91:c9:19:4d:28:89:8b:06:bd:22:
                    60:81:33:61:3b:30:77:61:27:8a:07:0a:26:47:29:
                    97:73:07:59:f2:a6:92:85:fa:f7:31:5a:1a:d5:93:
                    80:66:f1:34:ce:cb:79:d4:f1:c7:25:22:2b:99:fb:
                    17:72:05:e6:0e:3a:fa:8c:60:89:3d:3e:a6:b5:26:
                    df:d7:e1:bc:b6:a5:15:46:f4:1e:cb:42:d0:0f:9f:
                    1b:77:60:d8:73:68:01:70:20:07:aa:62:bd:58:d1:
                    80:dc:85:34:93:11:a0:24:52:95:6c:63:90:21:26:
                    29:c8:75:4f:5b:21:f8:b3:77:75:d4:a4:7e:e8:30:
                    1b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A5:F2:2F:F8:FA:B6:4E:42:6D:3F:E1:3F:AE:3F:5F:CF:57:6B:A9
            X509v3 Authority Key Identifier:
                keyid:17:6F:54:30:EA:F4:A8:9F:D8:9B:21:00:7E:7E:85:57:D4:5B:6A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQzhEmzjbHyj1VEcf7kMGgVSsCERT6GPDwr6QqSxnUBU/0/176F5430EAF4A89FD89B21007E7E8557D45B6A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/176F5430EAF4A89FD89B21007E7E8557D45B6A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQzhEmzjbHyj1VEcf7kMGgVSsCERT6GPDwr6QqSxnUBU/0/323830343a373332343a3a2f33322d3434203d3e20323730383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7324::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:98:a1:ff:85:97:fa:48:53:da:0a:99:a7:b0:91:be:da:2f:
         b9:a0:df:91:c7:e6:e4:c0:1d:a5:68:b5:ce:3f:b2:49:95:a5:
         2b:c9:41:10:48:25:b1:da:42:4d:f8:5a:3b:bb:74:87:aa:cf:
         90:05:26:26:c0:b6:ff:de:31:d1:e5:aa:22:72:95:01:30:2a:
         78:f8:02:e6:5d:17:d6:2f:58:0a:08:f9:bf:60:c8:24:50:cb:
         07:ed:9b:a3:cc:93:cb:7d:f1:ff:d0:f5:9e:b3:b2:b6:ad:87:
         f8:82:10:9c:ca:de:06:e7:18:87:cf:4b:04:67:32:07:76:46:
         68:7c:8b:fa:8b:3f:0e:e8:ea:ac:01:e3:c8:82:10:e3:77:c7:
         5d:34:41:bc:c7:2d:a8:fa:31:94:90:b6:16:c9:89:07:1d:d2:
         ce:61:d6:d3:ee:92:0f:6e:6b:5f:59:eb:60:0a:0c:ae:e4:c9:
         b2:64:a8:fa:8d:3d:ca:16:1a:5a:df:61:2e:a3:05:68:e1:8e:
         7e:a3:50:61:c0:37:31:ef:a9:a9:3b:35:af:7d:cb:1f:b5:9b:
         c1:fe:30:cb:cd:0d:87:2b:34:29:9a:45:d1:9f:dc:38:d6:ac:
         c4:e7:c2:62:de:b3:81:9f:15:8a:0e:a0:0a:6c:84:c2:ad:2a:
         4b:63:a3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org