Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjBSw1QUtDuLXh9da2BGXtp6JWJokEpVfZUhM3YDC8Ht/0/323830343a373563303a3a2f33322d313238203d3e20323731303637.roa
File:                     323830343a373563303a3a2f33322d313238203d3e20323731303637.roa (raw, json)
Hash identifier:          UqTvQP4Y/JKSJ5jSF+xwbtBW5AWluCthVDrZF3JmrGE=
Subject key identifier:   1B:3E:BB:BE:00:CC:E8:1C:4B:99:3E:C5:CD:D6:EB:0D:E7:40:88:27
Certificate issuer:       /CN=A9DCB7B28996884B1987B2F01D8A8836002CDE29
Certificate serial:       270AECFE3F2880755C297C38BDB6FCD57D6850C2
Authority key identifier: A9:DC:B7:B2:89:96:88:4B:19:87:B2:F0:1D:8A:88:36:00:2C:DE:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9DCB7B28996884B1987B2F01D8A8836002CDE29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjBSw1QUtDuLXh9da2BGXtp6JWJokEpVfZUhM3YDC8Ht/0/323830343a373563303a3a2f33322d313238203d3e20323731303637.roa
Signing time:             Sun 30 Apr 2023 02:45:04 +0000
ROA not before:           Sun 30 Apr 2023 02:40:04 +0000
ROA not after:            Sun 28 Apr 2024 02:45:04 +0000
asID:                     271067
IP address blocks:        2804:75c0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0a:ec:fe:3f:28:80:75:5c:29:7c:38:bd:b6:fc:d5:7d:68:50:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DCB7B28996884B1987B2F01D8A8836002CDE29
        Validity
            Not Before: Apr 30 02:40:04 2023 GMT
            Not After : Apr 28 02:45:04 2024 GMT
        Subject: CN=1B3EBBBE00CCE81C4B993EC5CDD6EB0DE7408827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2d:28:68:f6:f0:fc:7d:36:f9:92:ea:f6:47:
                    8c:b4:e6:41:f4:f1:ca:e8:b3:30:a8:76:e5:fc:85:
                    95:87:67:c1:fc:90:fe:b4:c8:08:36:fb:5d:9b:75:
                    fc:d5:84:68:88:11:92:1d:74:7a:c0:2e:4e:42:93:
                    f0:01:4b:ca:a7:e3:46:ab:be:af:75:77:a1:bb:50:
                    a8:3a:e3:ba:65:e2:90:f7:a9:e2:16:12:b1:6f:c0:
                    33:60:34:9d:01:8f:04:8f:a9:38:21:07:ba:30:47:
                    7b:86:be:85:ee:e9:8d:59:43:d2:c4:17:e9:07:9f:
                    33:9a:e0:52:e7:14:59:55:a3:ec:33:eb:16:70:0f:
                    17:a4:97:d3:a6:61:01:2f:b4:7c:c0:5b:97:e0:ad:
                    13:8d:bd:5c:1b:0b:e7:04:6e:7d:08:30:3f:d4:47:
                    9e:e2:6c:dc:f9:f4:36:75:fb:56:ef:8d:af:75:f1:
                    98:1f:8d:35:0d:b7:b2:d8:a8:41:03:64:2c:d3:30:
                    d4:ae:99:12:76:36:10:ec:92:0e:eb:06:73:8b:24:
                    2a:1c:ea:51:66:f0:2c:90:e8:1e:be:ef:16:1d:83:
                    ba:1b:e1:62:1b:01:2b:f3:f4:5d:34:d3:25:86:91:
                    7f:00:e4:77:2d:99:3f:64:a3:e9:9d:76:fc:d5:4f:
                    da:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3E:BB:BE:00:CC:E8:1C:4B:99:3E:C5:CD:D6:EB:0D:E7:40:88:27
            X509v3 Authority Key Identifier:
                keyid:A9:DC:B7:B2:89:96:88:4B:19:87:B2:F0:1D:8A:88:36:00:2C:DE:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjBSw1QUtDuLXh9da2BGXtp6JWJokEpVfZUhM3YDC8Ht/0/A9DCB7B28996884B1987B2F01D8A8836002CDE29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9DCB7B28996884B1987B2F01D8A8836002CDE29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjBSw1QUtDuLXh9da2BGXtp6JWJokEpVfZUhM3YDC8Ht/0/323830343a373563303a3a2f33322d313238203d3e20323731303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:2c:11:a4:b4:4d:f6:9e:b3:d8:ca:d2:32:b8:76:1a:8a:54:
         2e:bd:95:5a:f7:fc:db:81:fb:54:57:b2:eb:d2:db:e5:7f:d9:
         71:05:52:b4:61:cf:37:dc:e1:88:a3:e2:3c:65:f0:4e:26:c2:
         ae:87:79:e4:50:0a:c1:df:eb:38:bf:7c:34:7d:71:ec:88:32:
         31:dc:56:2d:0a:87:26:f5:e1:ec:b9:f4:65:7d:b9:e0:82:0b:
         d8:69:0a:0a:4f:bd:01:10:c2:18:44:c2:19:bb:61:e9:11:fe:
         58:ce:82:7c:54:85:06:65:4c:12:e5:4c:0d:49:c4:7d:14:8f:
         85:59:55:77:c6:81:b3:9a:c8:fa:d5:a1:5e:c8:b0:40:03:c2:
         ea:ca:f2:e4:76:ef:33:45:45:0d:44:c4:e2:9d:37:be:75:dc:
         df:e0:61:a8:dc:1a:b0:5a:b1:01:23:a5:23:e8:64:bd:e0:5d:
         22:0f:c4:40:9e:28:d5:f6:ed:54:75:16:2c:fa:1b:a7:1f:a2:
         b5:01:b0:d1:62:54:b3:25:dd:ad:e2:19:4d:13:cb:59:23:56:
         21:31:71:a7:7b:84:f7:79:3b:8b:e5:7b:5d:4b:1c:65:04:04:
         59:41:05:65:12:2a:d3:45:f7:0e:65:65:c6:da:69:aa:b6:62:
         de:e1:bd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org