Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/323830343a383833383a3a2f33322d3334203d3e20323633303237.roa
File:                     323830343a383833383a3a2f33322d3334203d3e20323633303237.roa (raw, json)
Hash identifier:          x7vvLh4jyqPcRgkFvoUxTDhcgtyzAH2IwVS5bvIl2d0=
Subject key identifier:   4B:0D:BC:72:2C:07:EF:DF:0A:5E:BA:C1:64:05:4C:E7:75:F1:06:BC
Certificate issuer:       /CN=B6986C016F3E80BC5D98F8941D5EA43AC8F632DE
Certificate serial:       6AA7AECA6674DAE8821BA6CBF5FA89BA64A6FA12
Authority key identifier: B6:98:6C:01:6F:3E:80:BC:5D:98:F8:94:1D:5E:A4:3A:C8:F6:32:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6986C016F3E80BC5D98F8941D5EA43AC8F632DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/323830343a383833383a3a2f33322d3334203d3e20323633303237.roa
Signing time:             Fri 08 Sep 2023 13:09:49 +0000
ROA not before:           Fri 08 Sep 2023 13:04:49 +0000
ROA not after:            Fri 06 Sep 2024 13:09:49 +0000
asID:                     263027
IP address blocks:        2804:8838::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a7:ae:ca:66:74:da:e8:82:1b:a6:cb:f5:fa:89:ba:64:a6:fa:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6986C016F3E80BC5D98F8941D5EA43AC8F632DE
        Validity
            Not Before: Sep  8 13:04:49 2023 GMT
            Not After : Sep  6 13:09:49 2024 GMT
        Subject: CN=4B0DBC722C07EFDF0A5EBAC164054CE775F106BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b7:71:99:1c:fe:d0:c5:e1:9c:c2:d2:70:38:
                    04:03:25:03:d9:f6:77:e9:9d:ac:2a:76:bd:e6:48:
                    c5:af:2e:bc:ed:26:f1:0a:8a:d8:a8:68:b9:8b:79:
                    24:55:e6:c3:33:ef:9d:e3:48:03:ce:07:9b:eb:18:
                    a9:74:1d:9a:83:a6:8f:be:77:fc:06:2c:e7:21:0f:
                    d0:fb:dd:c1:c1:a5:8e:32:42:f0:26:12:94:8d:1f:
                    cc:2d:18:f7:b0:ba:9b:c7:7a:06:d3:a6:bb:f5:c2:
                    13:da:64:9c:d3:52:29:f2:60:8e:bd:5d:62:66:33:
                    b6:d0:57:96:39:c4:9b:96:15:3e:5b:a9:71:be:55:
                    a6:16:cb:36:50:a9:4f:b1:92:5b:7a:33:8a:6c:b3:
                    a9:23:06:09:a5:ae:44:4d:be:a7:16:d6:0e:7c:91:
                    24:56:7d:27:8e:7e:dc:f8:8b:4e:53:f8:10:f3:d5:
                    38:d2:a6:5c:14:98:6d:b7:fc:19:13:2f:95:0e:d8:
                    da:be:56:72:30:d5:81:3b:2b:db:28:eb:73:dc:a0:
                    7f:fc:ba:0c:2b:61:53:43:a8:f9:7d:5d:40:63:8e:
                    10:99:bc:a9:6e:65:9c:10:a3:98:e3:db:5a:d2:94:
                    15:70:93:f3:2a:fa:b2:74:5c:87:ae:02:55:11:51:
                    11:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0D:BC:72:2C:07:EF:DF:0A:5E:BA:C1:64:05:4C:E7:75:F1:06:BC
            X509v3 Authority Key Identifier:
                keyid:B6:98:6C:01:6F:3E:80:BC:5D:98:F8:94:1D:5E:A4:3A:C8:F6:32:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/B6986C016F3E80BC5D98F8941D5EA43AC8F632DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6986C016F3E80BC5D98F8941D5EA43AC8F632DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/323830343a383833383a3a2f33322d3334203d3e20323633303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8838::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:75:84:82:72:a0:d4:0a:66:85:36:b7:7c:39:28:e0:07:41:
         44:93:ac:33:01:5b:a2:c5:2b:c6:67:7d:c7:08:ea:ff:e4:07:
         6f:f2:f8:d6:24:7f:5b:d8:f2:8a:49:d9:b6:2a:25:fb:94:9e:
         b8:bc:69:25:62:21:b8:05:f3:f6:0b:13:4f:2e:37:ef:ca:ba:
         49:5e:c5:80:9b:17:fc:ef:ad:11:7a:0e:14:7d:17:e0:19:5e:
         21:26:23:13:b6:46:c4:47:06:0b:7c:17:88:24:ab:f5:37:6d:
         79:76:31:bb:63:f8:74:85:ad:1e:e4:ff:82:e8:c7:f7:75:64:
         0d:a8:8a:20:bc:52:a0:b0:04:10:0c:f4:47:e9:18:9b:36:4f:
         d9:fe:32:c2:9f:d8:ab:db:c5:bb:d9:ab:2f:bf:67:bc:47:f7:
         4d:31:d8:71:98:07:32:2c:7f:f4:c9:1b:06:27:b7:f6:26:c9:
         f1:a4:60:94:58:41:20:69:5a:ce:1d:a3:2c:ab:69:f3:c8:d6:
         21:e9:24:59:64:a3:4e:25:62:c0:cb:43:25:ff:94:68:87:79:
         65:76:ac:1a:c5:9b:77:56:56:6f:e4:fa:08:44:d1:d6:98:ab:
         0c:d2:89:7c:10:1c:85:28:28:2e:81:45:fd:57:aa:9e:f3:4f:
         58:bc:f1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org