Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a383030303a3a2f33342d3334203d3e20323730363030.roa
File:                     323830343a366537633a383030303a3a2f33342d3334203d3e20323730363030.roa (raw, json)
Hash identifier:          wxhdDgKYydq5xJUYFz8Kfyzlyx0iNH/shhQRYm6TgUI=
Subject key identifier:   04:2A:A3:A3:AF:EB:2D:76:AF:A0:FF:0E:23:AA:24:CE:C3:E2:07:33
Certificate issuer:       /CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
Certificate serial:       3DC82002525520569016793AB150B238E5DB7815
Authority key identifier: 91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a383030303a3a2f33342d3334203d3e20323730363030.roa
Signing time:             Fri 07 Jul 2023 12:28:46 +0000
ROA not before:           Fri 07 Jul 2023 12:23:46 +0000
ROA not after:            Fri 05 Jul 2024 12:28:46 +0000
asID:                     270600
IP address blocks:        2804:6e7c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c8:20:02:52:55:20:56:90:16:79:3a:b1:50:b2:38:e5:db:78:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
        Validity
            Not Before: Jul  7 12:23:46 2023 GMT
            Not After : Jul  5 12:28:46 2024 GMT
        Subject: CN=042AA3A3AFEB2D76AFA0FF0E23AA24CEC3E20733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:b8:db:81:17:16:29:72:49:31:5a:26:a8:
                    ff:a8:b1:1b:89:fe:df:32:48:b1:51:e3:9c:1e:90:
                    c9:ad:c2:03:1f:f9:4f:78:17:45:bc:d2:06:fe:90:
                    0a:d5:b9:e9:97:44:c0:8b:ab:1b:9b:a1:e0:f0:d7:
                    6c:5d:16:64:b8:4e:bf:d2:74:06:bd:17:ee:cd:95:
                    65:07:62:99:6a:66:93:be:15:50:76:dc:9f:4c:15:
                    e1:32:15:f7:17:ac:ce:47:08:33:23:f3:c8:0d:aa:
                    9f:1a:7e:27:79:1e:7f:bc:28:97:3a:cb:3e:bf:82:
                    4f:76:11:a8:ae:85:30:a6:b7:49:2b:dc:fb:f2:8f:
                    41:9a:07:e4:99:ef:72:fe:34:6d:56:05:12:33:d4:
                    f3:8e:14:a2:60:21:cc:fb:06:66:1e:55:d6:8f:40:
                    72:92:e2:ce:9b:8c:a2:d5:3c:d3:4f:ef:7c:cf:bc:
                    b1:6e:7c:7d:4a:26:e8:ae:a3:18:4d:56:43:d6:18:
                    fe:1c:f6:b0:f4:df:85:f6:e5:8c:54:07:66:36:39:
                    8e:83:3e:f7:92:59:16:4c:b7:cb:39:fd:50:25:7a:
                    c4:cc:53:ae:d3:03:95:dc:a4:ae:de:8e:46:e4:24:
                    74:a9:1b:ac:fc:b4:ae:f1:64:3f:15:9d:52:a4:f1:
                    e4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2A:A3:A3:AF:EB:2D:76:AF:A0:FF:0E:23:AA:24:CE:C3:E2:07:33
            X509v3 Authority Key Identifier:
                keyid:91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a383030303a3a2f33342d3334203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e7c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7e:06:fc:9a:60:96:a4:da:62:49:d3:1d:fa:78:b4:16:0b:41:
         35:e5:51:69:dc:f7:22:d6:f0:41:05:79:88:a5:00:2b:cd:b1:
         75:69:7d:31:a4:18:6c:d5:37:48:4d:6d:6b:09:cd:6c:27:cb:
         ae:e8:76:12:1d:8d:81:5a:82:4e:da:cb:7e:46:b0:74:21:5e:
         6e:64:db:c3:99:28:28:d6:0e:45:3c:7a:43:8b:2b:b7:2e:b0:
         c6:67:88:ce:8b:bc:e6:9e:20:ee:63:33:46:f1:40:1a:32:e1:
         b3:67:f7:9d:6d:05:d6:f3:17:82:b6:46:c2:ca:94:92:84:a7:
         91:43:13:87:6f:83:9a:1b:51:66:39:71:01:f8:ed:d8:57:5c:
         3b:e9:8f:19:4f:0d:7a:61:03:66:6e:43:91:c9:45:a6:ca:c3:
         42:d9:da:2a:0f:a1:ae:b4:0b:2e:fd:4f:ba:b2:6a:cd:21:24:
         01:db:55:2b:fb:7a:68:f7:79:29:d4:06:47:13:7c:aa:97:97:
         be:7c:95:2c:f4:1d:b3:99:ea:9a:9b:63:8e:99:d4:60:c3:c7:
         1d:2c:e7:34:28:e8:c9:e6:ff:4c:89:82:cd:2c:6b:07:bb:6f:
         d6:7d:33:be:45:26:fb:84:be:31:05:41:76:0d:8c:40:53:e8:
         59:36:52:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org