Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a343030303a3a2f33342d3334203d3e20323637393939.roa
File:                     323830343a353637343a343030303a3a2f33342d3334203d3e20323637393939.roa (raw, json)
Hash identifier:          cpGanbHOsaa8VDV/fev8B3UgnxT/wmu3Y0owCJ1cgoo=
Subject key identifier:   7C:4B:92:7A:FF:E4:2D:4C:46:CB:16:75:C9:F1:1A:62:86:DC:DD:44
Certificate issuer:       /CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
Certificate serial:       3BEB22F443E8923AC83C2075030D0F86AA9F61DB
Authority key identifier: 38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a343030303a3a2f33342d3334203d3e20323637393939.roa
Signing time:             Tue 26 Dec 2023 16:15:39 +0000
ROA not before:           Tue 26 Dec 2023 16:10:39 +0000
ROA not after:            Tue 24 Dec 2024 16:15:39 +0000
asID:                     267999
IP address blocks:        2804:5674:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:eb:22:f4:43:e8:92:3a:c8:3c:20:75:03:0d:0f:86:aa:9f:61:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
        Validity
            Not Before: Dec 26 16:10:39 2023 GMT
            Not After : Dec 24 16:15:39 2024 GMT
        Subject: CN=7C4B927AFFE42D4C46CB1675C9F11A6286DCDD44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:2e:d7:3e:8a:ce:1b:6f:50:f7:a1:a5:36:
                    e2:db:a0:d5:ec:f2:e0:cd:f8:78:c8:46:13:73:60:
                    bc:78:03:a8:89:28:0c:d4:89:0a:7e:e1:3f:0d:f4:
                    10:57:8a:ed:65:c7:a9:50:8d:05:19:44:ba:36:14:
                    3e:7b:46:ac:1d:b0:2e:ba:ff:ae:74:5b:fe:39:0e:
                    78:6c:48:3c:2b:63:1c:37:b3:28:43:7a:3a:66:75:
                    b8:2d:c1:a2:65:e4:5f:01:92:02:02:9e:3a:be:6a:
                    92:74:94:ea:61:8f:8b:de:50:3f:c8:f3:3f:63:83:
                    c5:c5:91:2d:3c:d6:e1:98:39:d3:13:af:e3:9f:32:
                    ca:8a:3c:cb:9a:f0:cc:17:20:eb:f6:19:99:7a:28:
                    73:a9:13:c2:89:83:60:c9:33:2d:4e:56:ef:66:fd:
                    e4:50:f9:6b:cf:1f:4f:78:ca:f4:ba:11:28:82:37:
                    12:6e:ee:2e:09:a4:de:2f:08:1a:06:80:ff:3a:f4:
                    b2:cf:42:af:9d:78:21:a6:3a:34:57:90:89:7c:d0:
                    6d:d5:7f:97:73:30:3b:77:d7:65:ae:b8:1c:dc:55:
                    3b:78:ca:3d:bb:46:85:08:0a:a5:52:ab:64:eb:5f:
                    8e:28:50:15:3e:1b:ec:f1:ea:f7:96:a3:7e:14:61:
                    b1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4B:92:7A:FF:E4:2D:4C:46:CB:16:75:C9:F1:1A:62:86:DC:DD:44
            X509v3 Authority Key Identifier:
                keyid:38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/387AF1348EDD63172DB6EE8E38682949F9D3E956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a343030303a3a2f33342d3334203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:ed:c0:2d:32:d7:72:8d:74:2c:48:c8:d1:87:4c:5b:9b:1e:
         ed:4a:bc:40:91:40:4f:5e:e4:80:c4:83:77:74:29:dd:8a:72:
         05:13:63:14:a3:04:a7:b3:49:df:9f:3e:91:67:d0:a9:3b:ac:
         14:60:ae:ba:5c:6d:59:e5:49:7d:ca:7b:56:ff:85:9a:c5:96:
         cd:ab:bf:a1:94:cc:3a:46:5e:03:ac:9a:f0:a4:d3:ca:4a:5c:
         35:9a:1b:e3:a8:dd:a4:c1:54:e3:9f:1c:6c:62:19:08:d3:0c:
         a0:49:ab:fd:e6:21:46:3b:41:a8:3f:dd:42:84:15:48:72:2b:
         74:92:92:07:7b:46:fb:05:f5:95:b3:5b:d4:df:2d:c9:be:a9:
         d2:e3:d6:29:b3:d4:cc:25:4b:7f:70:89:6b:a5:fa:e7:04:bb:
         af:c4:1e:63:fc:1d:dc:41:0d:ae:86:6b:a9:e7:19:c1:19:bb:
         92:47:2d:09:89:a7:76:82:2b:96:c6:b5:f4:29:bf:cb:1e:58:
         6c:bc:21:89:30:15:f7:5c:e8:2c:51:41:30:a9:a8:2d:26:cb:
         bc:99:5c:76:6d:48:73:a6:fb:96:8d:54:7b:61:c0:e4:67:22:
         4d:11:bf:9c:69:87:07:4b:3b:52:26:e2:80:69:14:f7:17:c7:
         62:64:00:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org