Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/323830343a356661633a3a2f33322d3332203d3e20323639313136.roa
File:                     323830343a356661633a3a2f33322d3332203d3e20323639313136.roa (raw, json)
Hash identifier:          HmRgHvsUmn1Noyxihn6oMS7zkdYf1xqvO13ysI4OlZ0=
Subject key identifier:   C4:DF:C4:E1:83:7A:7D:C7:20:A3:6E:67:1A:21:84:67:BE:6F:0B:81
Certificate issuer:       /CN=9309FE707145E46FE4C086068E4C9D77076BEB2B
Certificate serial:       1B3BFFEDE997693BF34EF3CA4E486005E9B08F85
Authority key identifier: 93:09:FE:70:71:45:E4:6F:E4:C0:86:06:8E:4C:9D:77:07:6B:EB:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/323830343a356661633a3a2f33322d3332203d3e20323639313136.roa
Signing time:             Thu 07 Mar 2024 22:54:04 +0000
ROA not before:           Thu 07 Mar 2024 22:49:04 +0000
ROA not after:            Thu 06 Mar 2025 22:54:04 +0000
asID:                     269116
IP address blocks:        2804:5fac::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3b:ff:ed:e9:97:69:3b:f3:4e:f3:ca:4e:48:60:05:e9:b0:8f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9309FE707145E46FE4C086068E4C9D77076BEB2B
        Validity
            Not Before: Mar  7 22:49:04 2024 GMT
            Not After : Mar  6 22:54:04 2025 GMT
        Subject: CN=C4DFC4E1837A7DC720A36E671A218467BE6F0B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9c:03:50:2e:fc:6f:b4:0d:bc:ba:a8:e1:c4:
                    c9:9c:12:46:1e:97:96:44:96:29:71:fd:25:6f:13:
                    4e:aa:13:8c:91:e2:82:38:a6:db:2c:bf:54:e3:54:
                    99:d7:0c:39:e9:0d:1c:ec:6c:1f:c9:27:31:85:0e:
                    64:4c:92:46:49:f6:b8:ba:6e:3f:62:58:2a:c2:78:
                    05:6e:50:cb:5d:3c:ca:4c:6a:bc:fd:a0:7e:f1:08:
                    02:2c:c0:a7:cf:55:b4:30:9a:6e:09:6d:f9:a4:3a:
                    75:77:61:df:fb:3d:e0:6d:af:0d:cd:85:1c:15:b6:
                    51:45:da:f4:d0:7c:d9:c3:a8:94:4b:96:7e:40:73:
                    2e:46:c4:44:ee:77:12:8d:9f:32:64:63:c1:d9:ba:
                    ed:1c:cb:f8:e6:ea:9a:56:f5:2d:82:df:e6:91:72:
                    71:36:4a:9c:ea:80:e8:6a:f6:be:f2:52:0c:4d:5a:
                    58:1a:f8:a6:72:46:1c:0d:93:5c:d9:a3:71:b6:13:
                    04:e0:c2:12:f6:86:0c:57:d7:9a:86:40:d4:15:1a:
                    d4:0f:6c:1f:89:af:83:b5:a9:32:84:23:8b:17:44:
                    34:b3:e7:a4:23:81:32:bf:9e:72:9a:7d:64:b8:c6:
                    98:44:2a:b1:91:7e:9c:f4:30:d3:9d:1e:4e:0e:05:
                    fd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DF:C4:E1:83:7A:7D:C7:20:A3:6E:67:1A:21:84:67:BE:6F:0B:81
            X509v3 Authority Key Identifier:
                keyid:93:09:FE:70:71:45:E4:6F:E4:C0:86:06:8E:4C:9D:77:07:6B:EB:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/323830343a356661633a3a2f33322d3332203d3e20323639313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fac::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:9a:e4:a8:0c:ae:a3:c3:82:44:6a:93:72:9e:c3:e7:bd:46:
         cf:fe:c7:5f:9f:cc:9a:42:5f:89:8a:2c:9f:a6:c5:71:88:7d:
         e6:f5:74:55:d9:5e:d0:47:e8:e4:43:db:f8:62:f1:71:4f:c9:
         9d:cd:c9:d2:84:2c:77:94:21:2e:a0:9e:0b:39:5a:6b:ef:64:
         d1:54:9a:a2:e2:19:cc:64:0d:a1:70:4b:ce:31:2d:e7:3b:d9:
         35:0e:9d:72:19:11:4c:66:f5:45:63:12:ab:46:db:54:9d:05:
         6f:f3:64:25:20:40:35:84:a1:21:52:f7:d8:fe:99:59:c6:b0:
         4f:38:67:e1:82:85:d7:bc:c7:cb:44:9b:31:b7:fa:ca:a6:af:
         90:17:2b:30:f9:d7:75:24:af:3a:77:bf:43:14:ee:19:1d:e2:
         4a:30:27:0c:7e:71:d1:18:9a:5c:be:01:c2:c4:28:0b:96:d2:
         0b:20:89:55:e1:00:ea:6f:34:cd:ee:8b:13:45:68:eb:b6:a5:
         91:04:6f:e9:3a:e8:fc:ad:df:41:d5:8b:67:23:5c:3e:ce:e7:
         c0:1a:02:55:c4:d1:f2:eb:39:ee:73:a0:58:97:39:35:eb:66:
         51:d5:7e:97:22:0e:72:b9:15:87:bc:af:3b:ac:94:94:f4:4f:
         00:11:1a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org