Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a3a2f33332d3438203d3e20323730383838.roa
File:                     323830343a373266633a3a2f33332d3438203d3e20323730383838.roa (raw, json)
Hash identifier:          HQGMGFXcuxWIqBfFlR9r/5zzSflKBs4OdGcobLMor5A=
Subject key identifier:   17:3B:65:94:49:99:A7:8F:AA:AC:21:68:9C:14:55:9E:F9:FE:66:11
Certificate issuer:       /CN=8AC235BC60EADB8095B935DFEE5FC7047348B33B
Certificate serial:       126DD126F8C0E6EBF1FF29B9741228EF47C1D46B
Authority key identifier: 8A:C2:35:BC:60:EA:DB:80:95:B9:35:DF:EE:5F:C7:04:73:48:B3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC235BC60EADB8095B935DFEE5FC7047348B33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a3a2f33332d3438203d3e20323730383838.roa
Signing time:             Wed 06 Sep 2023 22:17:55 +0000
ROA not before:           Wed 06 Sep 2023 22:12:55 +0000
ROA not after:            Wed 04 Sep 2024 22:17:55 +0000
asID:                     270888
IP address blocks:        2804:72fc::/33 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6d:d1:26:f8:c0:e6:eb:f1:ff:29:b9:74:12:28:ef:47:c1:d4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC235BC60EADB8095B935DFEE5FC7047348B33B
        Validity
            Not Before: Sep  6 22:12:55 2023 GMT
            Not After : Sep  4 22:17:55 2024 GMT
        Subject: CN=173B65944999A78FAAAC21689C14559EF9FE6611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f7:a0:75:80:b8:62:99:40:c6:57:8c:85:33:
                    64:6d:ad:c4:f6:79:c0:db:29:28:cb:1d:cb:59:be:
                    27:30:30:3e:53:c7:8e:1e:17:6e:31:27:c6:5d:1c:
                    eb:9c:1d:9b:1e:93:b9:b1:6e:68:64:3f:1f:e1:18:
                    59:ab:36:ed:8c:28:83:3f:a4:23:58:9d:9d:e5:5c:
                    b9:a1:93:f0:48:a9:7c:c9:0d:c1:f3:09:bc:db:96:
                    ec:f1:76:5a:a9:06:58:ae:aa:a5:e5:06:bd:3e:7d:
                    ff:e7:a0:b2:5f:82:d5:dc:31:c0:59:33:72:39:86:
                    ce:84:00:4b:9e:2d:78:47:da:9c:0a:8a:54:90:21:
                    8e:28:71:ee:57:41:12:1c:7c:6a:01:1a:12:d5:d9:
                    78:20:00:d7:92:78:15:59:03:66:4c:96:40:ba:af:
                    c9:a8:9a:a2:6a:fe:32:5d:9f:bb:d0:65:41:21:3d:
                    f2:36:52:fb:c0:a3:a5:ba:cd:cc:0e:dc:f2:9b:e8:
                    59:e9:1e:66:fa:31:db:e2:83:b8:05:96:a6:cb:db:
                    65:b3:c5:59:36:56:6a:0e:24:e0:f2:21:5b:8f:a8:
                    ce:82:f8:82:70:c4:4e:c3:80:e5:3c:ed:e9:32:8d:
                    e6:e5:b8:b4:9f:bf:22:b8:2f:1f:a5:70:55:46:b7:
                    c1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3B:65:94:49:99:A7:8F:AA:AC:21:68:9C:14:55:9E:F9:FE:66:11
            X509v3 Authority Key Identifier:
                keyid:8A:C2:35:BC:60:EA:DB:80:95:B9:35:DF:EE:5F:C7:04:73:48:B3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/8AC235BC60EADB8095B935DFEE5FC7047348B33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC235BC60EADB8095B935DFEE5FC7047348B33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a3a2f33332d3438203d3e20323730383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72fc::/33

    Signature Algorithm: sha256WithRSAEncryption
         72:3f:3e:04:d1:a0:9b:f9:b6:3c:28:2e:2d:09:74:31:33:84:
         56:c1:d5:ff:b7:18:2c:36:2c:00:e6:9c:20:c9:24:3c:f0:2f:
         6f:dc:ec:93:33:33:cf:53:63:2d:40:fa:21:61:42:4c:6b:af:
         94:45:4f:c0:36:2b:dc:91:16:9f:09:c0:47:09:a6:4d:a0:6b:
         8f:6c:77:59:71:bd:6e:46:95:6b:68:6c:d9:f3:d5:9a:30:e0:
         fc:c4:cd:08:c4:aa:53:76:ae:1e:b0:84:3f:be:c3:ed:ad:a1:
         50:e7:d6:3c:5f:49:5d:5c:d6:e6:0a:cd:92:ac:1e:d0:2a:fe:
         39:9d:56:b3:a8:e7:d1:48:c9:dc:c2:0a:45:12:f1:05:2f:69:
         fd:32:48:ac:9c:92:2c:05:7c:0d:ff:26:a0:db:d5:8a:44:c7:
         b5:45:03:58:8c:7d:7a:cc:55:18:d8:e4:65:bb:bb:a0:5a:5e:
         f9:8a:37:ad:3a:f2:f0:c1:bd:ba:a8:8b:8c:1d:58:84:cc:94:
         01:f1:21:89:bf:86:df:c7:e5:07:19:f4:49:5b:4f:a4:ef:dd:
         93:82:51:b0:da:58:40:48:11:03:24:93:81:ae:09:7f:95:80:
         47:82:5e:bc:04:41:8c:b6:02:bc:f0:fe:cc:dc:21:5f:bf:32:
         74:31:b2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org