Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a343030303a3a2f33342d3334203d3e20323731313334.roa
File:                     323830343a373663383a343030303a3a2f33342d3334203d3e20323731313334.roa (raw, json)
Hash identifier:          ytZ2Gj6lZtbxG1D02GYsUV5luWVD0FicXATqxZxTK/M=
Subject key identifier:   68:63:C2:FA:1B:3E:6E:97:27:2B:C8:55:6F:09:DD:2D:10:A0:3D:C5
Certificate issuer:       /CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
Certificate serial:       2379E31BBD1A8406FA8BF40DABAD42E482676DDA
Authority key identifier: 33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a343030303a3a2f33342d3334203d3e20323731313334.roa
Signing time:             Sat 10 Jun 2023 22:26:24 +0000
ROA not before:           Sat 10 Jun 2023 22:21:24 +0000
ROA not after:            Sat 08 Jun 2024 22:26:24 +0000
asID:                     271134
IP address blocks:        2804:76c8:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:79:e3:1b:bd:1a:84:06:fa:8b:f4:0d:ab:ad:42:e4:82:67:6d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
        Validity
            Not Before: Jun 10 22:21:24 2023 GMT
            Not After : Jun  8 22:26:24 2024 GMT
        Subject: CN=6863C2FA1B3E6E97272BC8556F09DD2D10A03DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:d7:18:2a:52:ec:70:f4:b7:93:d2:26:75:
                    ec:f3:9d:cc:87:39:46:03:6c:99:08:44:ac:0c:69:
                    41:cc:88:73:55:80:32:28:65:09:c2:49:1e:d2:f4:
                    e6:a3:19:0e:32:4b:46:f1:23:58:87:c9:61:ce:98:
                    1a:62:2a:56:ec:87:f1:d4:2f:d9:7a:b0:c4:03:2a:
                    19:70:bf:2a:16:b3:44:0b:7a:db:4d:d8:ec:d7:bc:
                    9e:79:8b:46:bf:5e:91:4c:f1:05:6a:bb:71:84:fb:
                    82:83:f4:e1:d6:5d:ca:37:c9:45:62:68:2b:af:45:
                    29:57:45:f6:a8:8d:59:54:d8:c8:21:80:38:98:2b:
                    5e:75:2f:d6:35:ab:66:b6:25:45:07:ce:38:10:e8:
                    b7:5f:82:27:06:2f:7d:b8:25:20:91:c6:e3:3d:84:
                    2b:b3:73:8c:c9:86:e9:26:2b:46:8a:5b:29:b5:3c:
                    62:60:56:da:63:31:f4:f4:a3:60:78:25:f2:6b:52:
                    70:7b:17:af:1a:11:12:d4:9c:7d:b5:71:c4:90:97:
                    70:be:75:ea:68:c7:0b:f6:89:bb:4d:90:3c:43:9d:
                    3d:b4:74:2a:3b:d8:b7:89:08:d9:46:eb:0d:63:5a:
                    c9:62:51:da:c6:a1:56:44:68:e3:d0:39:27:db:6b:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:63:C2:FA:1B:3E:6E:97:27:2B:C8:55:6F:09:DD:2D:10:A0:3D:C5
            X509v3 Authority Key Identifier:
                keyid:33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a343030303a3a2f33342d3334203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76c8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ae:fc:31:1a:f8:c9:cc:03:92:3c:c8:29:8a:d4:d3:9e:ee:63:
         f6:eb:ae:1e:a0:19:b3:7c:87:9b:e0:c2:9c:25:c5:85:42:96:
         0e:4d:93:55:e9:8a:51:c1:5d:05:5a:30:4d:c3:0f:53:fd:a4:
         81:e1:ac:c3:84:bb:2d:c5:04:ac:83:ee:e1:98:71:e4:29:dd:
         e3:2d:21:0b:00:03:2a:6e:f7:76:b6:20:49:ec:f1:e3:3c:4e:
         63:97:3a:c1:43:52:2b:c5:e0:b6:37:a5:0c:39:f8:d8:26:23:
         6a:ed:9b:93:3a:22:35:7f:a4:23:ab:9e:5f:db:45:ba:8f:72:
         2b:de:8e:fb:3f:c6:21:d7:17:6e:83:96:80:ee:b8:08:30:bc:
         98:cd:33:cb:4e:89:a6:4c:fa:78:92:ee:05:d8:b4:2b:ef:ec:
         9d:61:da:db:28:33:6d:94:bc:b3:0c:d1:9c:4f:25:dc:4c:09:
         0f:70:7a:7e:1b:97:92:37:96:bd:27:95:b4:0f:54:65:a5:d3:
         36:b9:d0:09:00:1f:61:6b:6c:af:fd:81:55:53:c7:57:48:96:
         07:0e:70:0f:6c:46:8f:7d:20:78:ab:5f:9e:51:34:54:88:c6:
         22:c7:3c:49:ad:c0:15:55:48:fe:3b:0f:67:08:7a:1d:aa:c8:
         a9:76:9a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org