Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a343030303a3a2f33342d3334203d3e20323730323735.roa
File:                     323830343a363938343a343030303a3a2f33342d3334203d3e20323730323735.roa (raw, json)
Hash identifier:          uCOpsTuL+2tfn3iwcj7aCJY8/o+sVt1r2ysFFfszySQ=
Subject key identifier:   69:20:3A:63:97:B4:2C:E8:DE:17:E8:66:AF:00:C5:58:3C:80:18:1E
Certificate issuer:       /CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
Certificate serial:       302644C874A4BC638A8373BA12ADF6C82D5F6C64
Authority key identifier: AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a343030303a3a2f33342d3334203d3e20323730323735.roa
Signing time:             Mon 26 Jun 2023 16:15:16 +0000
ROA not before:           Mon 26 Jun 2023 16:10:16 +0000
ROA not after:            Mon 24 Jun 2024 16:15:16 +0000
asID:                     270275
IP address blocks:        2804:6984:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:26:44:c8:74:a4:bc:63:8a:83:73:ba:12:ad:f6:c8:2d:5f:6c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
        Validity
            Not Before: Jun 26 16:10:16 2023 GMT
            Not After : Jun 24 16:15:16 2024 GMT
        Subject: CN=69203A6397B42CE8DE17E866AF00C5583C80181E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:4e:03:08:9f:1d:30:77:3c:47:e9:ef:8f:
                    60:47:8a:74:41:3d:ef:31:0f:9d:8f:e5:93:58:7a:
                    8e:1c:44:3b:df:ea:b0:f2:95:48:e2:c7:5d:8e:e8:
                    1c:d9:ca:4e:f7:66:08:5a:ff:b0:a3:c3:c3:c0:bb:
                    56:5c:cc:61:64:05:37:2c:85:b9:24:74:7d:82:c4:
                    6e:8b:21:4a:70:bd:03:f8:21:b1:af:69:e8:e8:0f:
                    91:0f:0d:fb:0a:61:6d:88:bf:ed:fb:f1:88:78:5a:
                    2d:19:54:d3:26:79:b3:be:7c:a5:36:06:9d:84:41:
                    b6:d3:2b:7d:93:f2:82:73:12:f0:e5:28:3c:ee:9a:
                    19:10:ce:5e:21:8b:f7:be:60:9c:34:f1:27:b9:4f:
                    13:b9:8e:54:04:cf:dc:5f:e1:65:73:35:25:f1:50:
                    8c:06:bd:94:07:f6:a1:d0:cb:e7:79:26:6f:d2:73:
                    b8:63:aa:eb:81:ce:12:4b:79:d8:89:15:6b:8f:5a:
                    c2:85:c6:60:c8:ea:2b:32:34:5f:03:0f:04:1c:4d:
                    f7:7f:85:b7:9c:33:91:71:59:ce:b8:7e:f9:d1:b4:
                    22:9b:ab:26:ef:e6:45:8e:97:8d:2e:26:2a:e0:0e:
                    8a:a3:50:0e:cc:73:27:c9:0c:4c:aa:0a:83:cd:a9:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:20:3A:63:97:B4:2C:E8:DE:17:E8:66:AF:00:C5:58:3C:80:18:1E
            X509v3 Authority Key Identifier:
                keyid:AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a343030303a3a2f33342d3334203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6984:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d0:ba:c4:20:22:fa:b5:21:a5:35:ef:52:44:71:9c:7a:72:aa:
         aa:f2:a2:34:c9:57:d8:b0:06:3e:cd:7e:3c:93:81:8a:f2:72:
         5b:1d:2f:ae:14:1e:7f:94:ca:47:63:1b:b9:d4:e9:96:7c:1d:
         09:c3:8d:27:c3:38:4b:86:fd:c9:4c:c5:05:f8:c4:4a:94:a3:
         dc:89:c9:88:ed:f4:4d:55:3d:08:a5:b3:87:79:84:3f:42:c8:
         d6:be:82:59:fc:dc:f2:45:90:1d:d1:fd:5b:d5:f2:6c:53:0e:
         52:92:ed:06:ef:06:d8:79:4c:42:d1:95:5e:bf:dd:a0:d2:72:
         b8:b8:f1:2a:16:a4:9d:1d:9f:00:40:3a:fd:0b:2d:b9:8c:ba:
         ea:d5:25:87:e3:9e:57:7a:47:23:09:f4:dd:6a:fe:45:70:54:
         76:8d:5d:1a:5f:f2:d3:85:39:9f:e6:36:05:57:eb:f4:87:19:
         9b:b6:cc:3b:99:8e:8c:36:25:b5:11:24:a8:39:88:0a:06:54:
         8c:3b:81:a9:a1:56:d3:8a:6a:f1:86:13:c0:78:e7:8b:bc:ab:
         59:8a:cd:c9:b6:85:11:60:08:98:0a:f2:92:07:96:75:c5:e8:
         75:7b:f2:2f:5a:14:d8:ec:77:77:17:62:b8:83:10:43:f1:4b:
         fc:3a:d1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org