Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/323830343a366262383a3a2f33322d3438203d3e20323730343139.roa
File:                     323830343a366262383a3a2f33322d3438203d3e20323730343139.roa (raw, json)
Hash identifier:          vXG8MwIcmeSMofJnXp3Bxo3D6U3Bkj4jizWqGh1u8Lc=
Subject key identifier:   BA:F4:08:0F:8B:FE:6A:B4:2E:AD:02:94:80:65:F2:30:3D:C1:2D:7B
Certificate issuer:       /CN=385279A7156D16CD0E0832BCE576D91211168351
Certificate serial:       79BD056224EFE559A937EDCB6F64AEF5EBE6817D
Authority key identifier: 38:52:79:A7:15:6D:16:CD:0E:08:32:BC:E5:76:D9:12:11:16:83:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/385279A7156D16CD0E0832BCE576D91211168351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/323830343a366262383a3a2f33322d3438203d3e20323730343139.roa
Signing time:             Thu 04 Apr 2024 18:44:51 +0000
ROA not before:           Thu 04 Apr 2024 18:39:51 +0000
ROA not after:            Thu 03 Apr 2025 18:44:51 +0000
asID:                     270419
IP address blocks:        2804:6bb8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bd:05:62:24:ef:e5:59:a9:37:ed:cb:6f:64:ae:f5:eb:e6:81:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385279A7156D16CD0E0832BCE576D91211168351
        Validity
            Not Before: Apr  4 18:39:51 2024 GMT
            Not After : Apr  3 18:44:51 2025 GMT
        Subject: CN=BAF4080F8BFE6AB42EAD02948065F2303DC12D7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:4b:df:30:22:d5:fe:aa:82:07:99:62:07:
                    9c:79:bd:e0:15:de:80:36:fe:c6:2d:a9:2e:81:d8:
                    25:e6:0d:4a:84:23:b8:ca:e4:68:0f:68:51:dd:22:
                    19:4f:4c:ef:8f:87:24:d5:60:b1:92:c3:f9:49:57:
                    58:a5:12:7a:83:d2:75:f8:8f:6b:0a:52:84:31:80:
                    c0:26:c6:5e:a7:db:8f:16:b3:58:23:44:ef:11:ff:
                    55:48:27:24:6d:33:d4:b2:40:91:8b:13:2a:95:2e:
                    9f:20:e3:fc:5f:cf:b3:1c:9e:f3:36:01:7a:d9:45:
                    64:f3:51:0f:07:ad:27:a4:c2:1b:ed:a8:19:9c:d9:
                    01:61:a9:8f:b2:93:15:1a:01:9e:8f:5b:77:96:45:
                    99:c4:42:e5:e7:15:b3:f1:26:a0:65:fb:b0:09:aa:
                    2f:d5:71:0e:2f:d8:d7:81:54:bc:f9:5e:1b:49:29:
                    53:59:39:6f:03:11:da:70:97:27:1a:0c:3d:ae:7a:
                    3b:76:af:35:d0:f6:3f:7b:d7:09:4c:d6:66:c9:e6:
                    ff:6e:b2:7c:55:88:5e:57:08:fb:28:af:50:24:cd:
                    95:eb:b2:a1:20:26:93:ca:2f:17:74:78:35:22:d3:
                    95:7b:4a:96:24:d1:b6:b4:50:b8:26:69:b7:08:11:
                    84:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F4:08:0F:8B:FE:6A:B4:2E:AD:02:94:80:65:F2:30:3D:C1:2D:7B
            X509v3 Authority Key Identifier:
                keyid:38:52:79:A7:15:6D:16:CD:0E:08:32:BC:E5:76:D9:12:11:16:83:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/385279A7156D16CD0E0832BCE576D91211168351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/385279A7156D16CD0E0832BCE576D91211168351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/323830343a366262383a3a2f33322d3438203d3e20323730343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:55:54:6b:ab:d5:ab:35:69:98:44:9d:d4:33:91:fb:15:da:
         e3:fc:6a:ec:27:72:35:80:a2:cb:03:59:03:96:48:b3:48:21:
         c0:ba:b0:87:3b:8a:d5:ca:b3:0e:01:92:84:39:35:0e:25:95:
         35:e6:57:0f:24:2d:e9:8b:82:0c:1b:0a:50:90:0c:92:c3:92:
         7f:fb:70:44:3e:48:57:d4:12:c1:d0:ae:0a:fc:57:e3:d0:98:
         0e:04:27:74:72:41:63:98:c0:d4:8d:b0:3e:57:7f:a9:88:8c:
         ed:fa:82:cc:43:af:9e:04:f0:98:37:a0:65:c6:4a:73:b5:7f:
         5d:f1:0b:13:4f:6b:f4:1c:bb:cc:33:8d:1a:77:cf:18:bc:bc:
         92:d7:a2:1c:53:af:27:36:4d:15:90:10:29:83:56:ef:d1:a6:
         41:ab:5b:95:18:4c:02:be:bb:67:e3:52:99:8d:63:51:ba:1f:
         a0:8a:0b:e2:52:86:e0:d1:ca:0c:de:1e:e9:0a:e7:01:ad:0e:
         7b:19:97:b0:28:73:06:39:0e:9a:fa:2a:69:20:92:bf:07:47:
         59:a3:ee:c2:84:f4:1e:27:83:c8:b3:5d:c8:d7:01:e9:22:11:
         c3:37:1a:ec:ee:3c:2a:a0:22:27:aa:e8:b5:0f:88:c5:0b:30:
         f3:f6:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org