Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/323830343a323736633a383030303a3a2f33342d3334203d3e20323633393030.roa
File:                     323830343a323736633a383030303a3a2f33342d3334203d3e20323633393030.roa (raw, json)
Hash identifier:          tMKrFL1WNiQtCx5n4tk70sTv02XszIp/CJCH/OGdqFw=
Subject key identifier:   A0:34:0E:FA:5D:76:94:E7:38:E9:F0:95:26:2E:67:0B:7F:B3:A3:50
Certificate issuer:       /CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
Certificate serial:       6FB055E395E0CA212A5D471FDA387D26F2DCF589
Authority key identifier: E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/323830343a323736633a383030303a3a2f33342d3334203d3e20323633393030.roa
Signing time:             Wed 20 Dec 2023 14:06:14 +0000
ROA not before:           Wed 20 Dec 2023 14:01:14 +0000
ROA not after:            Wed 18 Dec 2024 14:06:14 +0000
asID:                     263900
IP address blocks:        2804:276c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b0:55:e3:95:e0:ca:21:2a:5d:47:1f:da:38:7d:26:f2:dc:f5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
        Validity
            Not Before: Dec 20 14:01:14 2023 GMT
            Not After : Dec 18 14:06:14 2024 GMT
        Subject: CN=A0340EFA5D7694E738E9F095262E670B7FB3A350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:74:dc:17:9a:3a:68:9f:2b:22:87:96:b0:
                    42:a4:c8:5c:df:b8:5b:9c:f6:57:da:31:c3:ce:3a:
                    18:8d:8d:d7:41:86:24:5b:49:a7:5a:38:3f:e2:54:
                    a7:cc:13:a0:bd:b3:4d:f8:3e:3c:ce:98:cb:5a:8b:
                    a3:7c:11:a8:84:74:f5:08:27:ba:05:5b:68:b5:e4:
                    37:ee:c6:b2:f1:6f:af:aa:49:4b:6d:e1:dc:87:5e:
                    17:fd:8b:b4:7a:1d:c7:42:9b:f7:7d:4e:d4:73:97:
                    75:34:c2:a4:74:db:36:3c:06:2c:2a:7c:a5:df:7b:
                    2e:fc:5d:f6:ee:ff:4c:d3:4d:f7:c9:3a:f5:bc:9b:
                    4c:a3:4f:c7:8b:fb:c4:49:72:1f:38:b1:26:82:90:
                    b0:a0:88:01:18:78:7e:bf:91:d4:a0:ad:c4:f8:7b:
                    43:17:5d:75:47:bb:de:04:69:01:33:01:1d:57:0a:
                    4b:bc:5a:74:f9:a2:b3:1f:da:c5:31:8f:0f:d4:e0:
                    32:97:10:ec:2e:20:e1:c1:95:56:d9:db:79:cf:7b:
                    d3:f4:c2:cf:83:05:0f:8c:12:4a:5e:22:bc:3b:d0:
                    42:a0:66:3f:0b:52:cc:68:02:90:7c:09:0a:e0:94:
                    35:cb:4e:9e:6d:c5:b0:44:b0:a5:b1:3e:3b:2f:1b:
                    b2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:34:0E:FA:5D:76:94:E7:38:E9:F0:95:26:2E:67:0B:7F:B3:A3:50
            X509v3 Authority Key Identifier:
                keyid:E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/E09AEFBAB9FAA20F5629757DA668E610219ED98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/323830343a323736633a383030303a3a2f33342d3334203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:276c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a3:34:b6:f0:d5:6f:7c:df:f7:36:fe:18:27:7f:85:6a:6d:a9:
         11:54:38:4c:e8:29:e8:14:34:ab:2d:dc:d9:6c:81:cc:ab:23:
         f6:fd:c3:4e:54:55:33:de:5d:4a:ff:b7:65:f9:3a:51:c6:d4:
         ec:b0:85:bf:5f:8e:23:f7:d0:c8:2e:e0:81:20:08:18:83:2b:
         48:d4:03:57:0e:58:00:ae:ba:8b:76:a7:ee:d3:45:95:3a:2f:
         00:1a:c2:6f:2b:6d:3d:a6:03:9f:b5:ef:bf:87:fd:02:c4:4a:
         d2:b6:5d:fd:47:69:84:37:02:db:6e:12:20:b5:85:e4:4a:e9:
         16:c0:ca:7e:70:18:d8:79:b1:1d:f3:1c:f3:e4:f3:fd:30:d7:
         99:7e:3a:80:c8:21:00:8e:67:79:b6:b4:d3:9f:db:04:98:0b:
         ce:cc:8d:d7:37:a4:b9:79:45:d4:f1:b0:be:a9:23:bf:0c:64:
         bb:6e:db:eb:d3:2e:47:63:c6:df:f4:9b:26:7a:49:12:4e:21:
         ab:d6:5d:8e:5c:2d:62:c7:0b:64:b9:01:11:af:55:d4:b7:00:
         a6:ef:dd:9b:df:28:1c:d7:47:c5:25:d8:f9:ca:98:1a:2d:30:
         01:9f:6e:a4:ea:43:2e:5f:f9:7e:70:45:62:10:42:ea:a7:78:
         bf:39:ab:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org