Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa
File:                     323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa (raw, json)
Hash identifier:          pokhD7c1Re0Mh+dzpxKZoP0bE5jIeA9n4P0Xtc582E4=
Subject key identifier:   83:A8:A9:9B:B7:98:32:9B:58:1E:E6:AD:11:81:2F:38:07:C1:D7:A9
Certificate issuer:       /CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
Certificate serial:       6BFA8BDADF05A3DED573337F7598278698671C65
Authority key identifier: F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa
Signing time:             Sun 05 Nov 2023 16:00:00 +0000
ROA not before:           Sun 05 Nov 2023 15:55:00 +0000
ROA not after:            Sun 03 Nov 2024 16:00:00 +0000
asID:                     269700
IP address blocks:        2804:688c:c000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fa:8b:da:df:05:a3:de:d5:73:33:7f:75:98:27:86:98:67:1c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
        Validity
            Not Before: Nov  5 15:55:00 2023 GMT
            Not After : Nov  3 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:b7:44:0a:3a:87:17:0f:10:2c:5e:3b:df:
                    26:2e:4b:5a:14:f6:40:36:a3:55:e6:a4:ae:6f:9d:
                    db:01:34:bd:83:17:56:ad:d8:75:a7:91:45:58:34:
                    a5:ec:13:d1:71:bd:37:73:c9:17:1e:60:dd:ee:95:
                    46:23:08:d8:19:6c:25:8d:25:1e:5f:90:e1:98:85:
                    53:24:30:00:97:e3:cd:75:ab:3e:b3:32:00:65:29:
                    49:12:4f:ee:d0:b8:d7:42:04:47:c2:36:a8:fb:2e:
                    53:e4:ea:db:78:10:8b:10:fa:83:3d:15:c8:c6:e2:
                    1b:61:a8:4c:53:e6:76:dd:0f:df:14:ed:15:28:e2:
                    4e:a5:2d:ff:fe:19:e7:46:9f:de:f9:05:5a:30:c3:
                    a3:b0:72:c0:82:8e:66:d8:1d:c8:a8:99:06:ab:33:
                    ef:83:33:c6:af:ad:e1:91:b4:72:61:ed:c3:e8:7a:
                    67:4f:d2:0f:af:14:ec:1e:cc:6e:01:6f:b2:95:15:
                    aa:5c:2a:a8:db:4a:16:cd:0d:8c:1c:81:12:ce:fd:
                    de:d8:4b:72:b4:58:c8:e4:d6:ab:99:f2:73:2d:12:
                    4b:25:ea:5d:73:02:26:f9:e5:3c:f7:8d:0a:e3:ba:
                    07:d1:d6:3a:de:64:b1:42:a3:93:49:57:be:3b:94:
                    fe:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A8:A9:9B:B7:98:32:9B:58:1E:E6:AD:11:81:2F:38:07:C1:D7:A9
            X509v3 Authority Key Identifier:
                keyid:F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:688c:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:32:3c:2d:49:e4:65:52:e2:db:2d:69:1b:88:ed:46:41:69:
         80:e4:86:29:1e:10:c9:46:6d:7b:58:9a:80:cf:dc:62:22:f8:
         64:57:16:ed:4d:53:64:6b:a0:53:7c:31:84:bf:82:3d:80:ed:
         44:c4:d5:b1:5a:37:d4:fb:c6:95:23:53:ca:15:c9:56:f6:0a:
         90:aa:19:a2:7e:93:15:64:cd:58:32:24:c2:77:8d:3b:ac:88:
         4c:57:6f:e1:50:83:9c:75:fd:d0:cb:aa:14:c8:a4:d0:f6:97:
         cc:e2:5b:c6:a0:88:68:4b:c7:12:4f:98:cc:92:30:d0:31:05:
         08:b6:8e:f1:cd:fb:9a:34:c6:a8:4b:15:40:00:99:3c:a5:99:
         d6:34:32:9e:94:c9:e6:86:70:bf:4e:15:20:4f:7d:50:74:60:
         b0:49:02:3f:c2:96:86:69:1a:24:96:8d:32:9a:1b:ab:d0:8d:
         92:59:1a:e0:2d:c7:6f:f8:b5:b5:af:2e:07:80:92:16:6c:1e:
         f4:80:ea:45:af:39:be:95:6e:52:b3:1a:a5:a4:2e:42:2a:61:
         0c:12:79:09:6c:99:58:a5:b5:84:47:9e:c3:27:09:3c:14:a5:
         b6:29:aa:bd:0a:40:c7:a1:68:86:07:a8:c7:da:36:13:55:0e:
         c7:fe:1e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org