Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a633030303a3a2f33342d3334203d3e20323637393939.roa
File:                     323830343a353637343a633030303a3a2f33342d3334203d3e20323637393939.roa (raw, json)
Hash identifier:          WYzYzDRjKmVjinV2FPn1ZsgqgSkQ2ZP5LjirfNj4NHU=
Subject key identifier:   E6:C3:2A:53:C3:F1:4D:A1:DC:34:2C:2D:94:43:0F:4E:6C:90:98:C1
Certificate issuer:       /CN=9F40D2BEE9D013193C0E22A59E4CCB6446BECF7C
Certificate serial:       3296431559483EBA8B7F9EB58652A637172F954F
Authority key identifier: 9F:40:D2:BE:E9:D0:13:19:3C:0E:22:A5:9E:4C:CB:64:46:BE:CF:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F40D2BEE9D013193C0E22A59E4CCB6446BECF7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a633030303a3a2f33342d3334203d3e20323637393939.roa
Signing time:             Thu 05 Jan 2023 20:21:19 +0000
ROA not before:           Thu 05 Jan 2023 20:16:19 +0000
ROA not after:            Thu 04 Jan 2024 20:21:19 +0000
asID:                     267999
IP address blocks:        2804:5674:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:96:43:15:59:48:3e:ba:8b:7f:9e:b5:86:52:a6:37:17:2f:95:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F40D2BEE9D013193C0E22A59E4CCB6446BECF7C
        Validity
            Not Before: Jan  5 20:16:19 2023 GMT
            Not After : Jan  4 20:21:19 2024 GMT
        Subject: CN=E6C32A53C3F14DA1DC342C2D94430F4E6C9098C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:2d:bf:60:87:cb:67:61:91:b8:ea:96:0d:
                    ef:7f:6e:47:98:72:b8:4b:09:4f:fd:ad:d7:e5:1f:
                    85:c3:6f:25:7c:bd:16:cc:1c:67:75:72:ae:4d:ed:
                    d3:78:0c:ac:60:96:06:5c:5f:39:ba:fe:4f:4b:7d:
                    7e:2c:fe:24:84:a4:9d:17:06:2f:e7:fb:2a:3a:07:
                    88:c6:e2:04:f4:2f:ab:29:49:a5:29:d2:a5:a5:44:
                    35:94:e0:66:72:9e:79:b3:63:3f:7b:57:64:c6:06:
                    c8:f0:57:fc:b9:9c:b0:74:4e:0e:18:26:62:40:38:
                    98:46:48:01:16:65:30:4d:fc:be:fa:fa:a1:87:de:
                    ec:8c:32:49:88:4c:f3:0a:dc:e3:6c:dc:b5:75:51:
                    89:90:c2:75:f6:96:33:13:5b:53:66:67:44:9a:6f:
                    11:03:ec:95:9b:7a:e2:98:1f:a1:82:20:d5:9b:1f:
                    05:f7:b5:f5:1a:bf:00:05:a1:80:56:eb:f1:2e:c3:
                    1a:b2:26:0b:6d:17:31:d1:7b:3d:7a:d5:dc:7b:9f:
                    41:26:bb:71:93:cb:ad:32:59:d7:ac:e9:b1:cd:05:
                    69:4b:10:d4:ad:c3:6d:3c:90:21:fa:ce:2f:d7:52:
                    3c:a3:33:b1:54:15:69:39:cd:46:9e:8b:5a:0f:7a:
                    c6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C3:2A:53:C3:F1:4D:A1:DC:34:2C:2D:94:43:0F:4E:6C:90:98:C1
            X509v3 Authority Key Identifier:
                keyid:9F:40:D2:BE:E9:D0:13:19:3C:0E:22:A5:9E:4C:CB:64:46:BE:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/9F40D2BEE9D013193C0E22A59E4CCB6446BECF7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F40D2BEE9D013193C0E22A59E4CCB6446BECF7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a633030303a3a2f33342d3334203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:49:2d:c1:dc:92:fd:6c:63:51:80:51:ae:1a:6e:39:f0:1a:
         33:c2:94:d4:3a:85:d5:2d:0f:fa:26:da:0c:00:37:c7:7a:4f:
         1c:26:05:43:11:fd:f0:07:f4:02:8a:23:e1:11:c6:1f:59:0d:
         6d:a4:f4:7c:2c:b7:4a:92:b5:fb:9d:98:3e:b7:68:e9:e7:36:
         38:37:fa:c4:0b:40:60:71:94:9e:ab:e4:bd:ae:c6:40:03:2d:
         cb:21:8c:bc:c4:5f:a5:57:81:18:b1:1d:45:51:53:31:ec:fc:
         04:9c:46:16:c8:f3:44:db:7f:fa:83:1b:2d:06:5c:c2:22:0c:
         c6:d8:5c:57:d1:ea:d9:47:7e:c5:98:b9:0e:25:dd:96:a5:db:
         81:6a:67:8e:c1:9b:48:ae:81:6d:e2:8b:6d:43:7f:9e:a6:0c:
         cc:f2:d1:3e:14:c9:5f:70:d2:24:11:aa:b1:f4:fc:81:4b:1f:
         dd:c8:b6:6b:eb:5b:34:c3:d2:96:fa:c0:ce:81:dd:99:bf:cc:
         77:60:bc:cf:69:98:96:eb:a0:83:75:e4:b0:73:04:db:bd:e2:
         b3:a0:d6:46:40:84:b9:0b:df:fe:d2:76:e8:32:9d:f0:7e:2d:
         2c:4b:a3:df:3f:95:f4:29:4f:21:6d:4a:9b:3a:ac:32:37:ac:
         4e:2e:2b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org