Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/323830343a373831383a3a2f33332d3333203d3e20323731323230.roa
File:                     323830343a373831383a3a2f33332d3333203d3e20323731323230.roa (raw, json)
Hash identifier:          NhBpv1nKCwlV/cGDMzrvI/zQ0woEA4CLKjc5DHsZLw0=
Subject key identifier:   9D:D0:61:8A:2A:AF:08:21:F3:89:0A:C3:8C:7C:66:17:68:B7:CB:8D
Certificate issuer:       /CN=6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833
Certificate serial:       668ADE64FE548F665111022D7BA42A0AFD545728
Authority key identifier: 6A:9C:DB:21:CB:C7:29:20:35:9F:90:CB:77:FF:7E:CA:FD:AB:08:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/323830343a373831383a3a2f33332d3333203d3e20323731323230.roa
Signing time:             Sat 12 Aug 2023 11:47:48 +0000
ROA not before:           Sat 12 Aug 2023 11:42:48 +0000
ROA not after:            Sat 10 Aug 2024 11:47:48 +0000
asID:                     271220
IP address blocks:        2804:7818::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8a:de:64:fe:54:8f:66:51:11:02:2d:7b:a4:2a:0a:fd:54:57:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833
        Validity
            Not Before: Aug 12 11:42:48 2023 GMT
            Not After : Aug 10 11:47:48 2024 GMT
        Subject: CN=9DD0618A2AAF0821F3890AC38C7C661768B7CB8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:e4:26:56:6e:ac:41:97:dc:da:94:a6:7d:
                    db:69:93:12:84:68:13:01:1a:76:0b:64:d1:43:0e:
                    fc:05:63:4c:65:5c:69:bd:b7:f9:eb:e2:5e:05:63:
                    cb:8d:a9:31:43:a3:c6:a0:80:eb:89:18:d2:5d:04:
                    b1:9c:c4:5b:d9:63:98:18:8e:9f:6f:9d:28:58:b8:
                    37:4a:eb:6c:9b:27:d7:e3:8e:05:ce:52:7e:90:6a:
                    18:ea:8a:2d:15:80:36:37:d8:c8:41:50:9b:b6:5f:
                    92:47:1d:cb:28:70:90:70:b4:c3:0f:9f:a9:e4:d0:
                    a7:3f:0f:89:29:02:75:68:84:54:2c:ba:cb:75:99:
                    db:90:8b:8d:91:5f:34:75:45:53:b8:22:ff:9c:5b:
                    4b:65:2f:3c:89:e3:59:cb:c4:94:f0:f7:47:eb:01:
                    f7:27:79:d6:d7:80:a2:31:8a:e5:51:c8:de:d8:da:
                    96:84:9e:6a:7e:92:29:8c:0c:c1:31:be:8b:8a:16:
                    39:47:fe:e9:f3:90:18:ff:36:0a:97:37:07:51:3e:
                    24:4c:ab:77:96:1f:fe:20:da:75:e5:31:1c:99:56:
                    80:6c:ee:6f:41:c5:5a:e2:62:c9:43:4c:f2:b3:9f:
                    c6:53:60:28:74:03:f3:b4:cb:f4:ab:ab:6c:cf:28:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D0:61:8A:2A:AF:08:21:F3:89:0A:C3:8C:7C:66:17:68:B7:CB:8D
            X509v3 Authority Key Identifier:
                keyid:6A:9C:DB:21:CB:C7:29:20:35:9F:90:CB:77:FF:7E:CA:FD:AB:08:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/323830343a373831383a3a2f33332d3333203d3e20323731323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7818::/33

    Signature Algorithm: sha256WithRSAEncryption
         a7:8e:94:01:5b:47:41:0e:f5:cb:45:f3:25:27:a4:79:b6:5e:
         e4:95:27:e0:0e:37:66:a3:06:ec:b7:d2:77:86:01:ea:27:3b:
         4a:35:35:c8:87:ec:55:9a:c8:6f:e6:ad:3c:65:08:82:34:2a:
         94:a4:98:bd:a7:f2:9e:03:ed:47:e9:d9:d1:7c:57:af:7c:11:
         d0:73:b5:6e:fe:e4:df:a0:8c:21:37:eb:8d:8c:4b:6d:62:3c:
         50:57:2f:bc:9b:95:2b:68:11:14:e7:09:20:c0:4d:2e:a4:c1:
         7c:b4:45:13:bc:22:a8:9b:bc:9a:86:89:fb:00:3e:ce:a2:00:
         69:f0:31:0f:2c:a0:d0:59:f1:31:cc:59:78:72:67:21:72:dc:
         72:d0:98:2f:df:57:fa:4b:7e:8b:22:b6:ca:64:0b:13:fc:aa:
         cf:02:98:eb:cf:67:8e:a3:84:ea:89:3e:18:d5:87:f7:99:42:
         04:3e:cb:81:33:12:3b:63:ea:b8:51:47:e4:28:db:eb:15:6e:
         39:53:d7:03:4b:6c:3f:63:c2:9f:fb:00:b4:dc:11:91:28:94:
         a6:64:a5:ef:f9:af:6e:72:29:2c:e9:47:b5:17:1e:29:56:06:
         5a:1c:32:b1:82:fd:27:95:71:0e:aa:da:d4:b7:c0:bb:e3:e7:
         61:7c:24:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org