Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/323830343a363462383a343030303a3a2f33342d313238203d3e20323639343434.roa
File:                     323830343a363462383a343030303a3a2f33342d313238203d3e20323639343434.roa (raw, json)
Hash identifier:          eOxw78duj99WnBNK4oAD1oX6B5WZvbrNtFU5lZ4ts+s=
Subject key identifier:   32:37:9C:A8:E5:8D:4D:48:7F:B3:5C:E9:D6:25:73:83:42:F9:B9:34
Certificate issuer:       /CN=78A85BC823101919BCB85BEEFF44762DC0BE72F2
Certificate serial:       0F75DD547CC0C890DF71420FB93F8527121AE9C3
Authority key identifier: 78:A8:5B:C8:23:10:19:19:BC:B8:5B:EE:FF:44:76:2D:C0:BE:72:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78A85BC823101919BCB85BEEFF44762DC0BE72F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/323830343a363462383a343030303a3a2f33342d313238203d3e20323639343434.roa
Signing time:             Thu 16 Mar 2023 19:00:06 +0000
ROA not before:           Thu 16 Mar 2023 18:55:06 +0000
ROA not after:            Thu 14 Mar 2024 19:00:06 +0000
asID:                     269444
IP address blocks:        2804:64b8:4000::/34 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:75:dd:54:7c:c0:c8:90:df:71:42:0f:b9:3f:85:27:12:1a:e9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A85BC823101919BCB85BEEFF44762DC0BE72F2
        Validity
            Not Before: Mar 16 18:55:06 2023 GMT
            Not After : Mar 14 19:00:06 2024 GMT
        Subject: CN=32379CA8E58D4D487FB35CE9D625738342F9B934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:e9:1a:37:4b:f3:4b:2a:84:9c:94:4c:a8:
                    f3:dd:37:09:fa:24:49:a5:e4:f1:60:d5:8f:ba:3a:
                    8f:5a:86:eb:b6:b5:23:67:d9:b3:a4:a6:41:c4:d8:
                    87:ff:3a:f4:fa:25:91:73:0d:38:41:0e:30:16:9a:
                    2b:32:2f:96:e0:dd:1a:45:61:4f:05:c1:60:64:e1:
                    3f:5e:53:bf:c3:8d:a2:42:dd:05:9d:b2:e0:ed:28:
                    59:0e:98:e7:c7:d4:28:e3:10:08:86:87:b3:ae:be:
                    a2:f8:d8:c2:56:89:0a:ee:ee:c4:75:8d:93:e6:cc:
                    53:00:3e:38:6c:9c:20:70:b2:31:6b:42:3f:bf:64:
                    82:73:e2:be:ee:b5:9e:54:ad:4d:6e:96:ce:54:19:
                    eb:0c:fd:04:77:a2:33:94:64:6f:50:87:4f:c5:23:
                    83:af:04:0c:e6:db:b2:94:b2:e8:c9:aa:93:2c:ac:
                    6a:17:25:ea:d4:3f:d9:f7:59:48:66:95:53:3a:97:
                    89:3e:25:fb:02:51:23:93:3e:e0:e0:ee:d4:b9:2b:
                    6e:d9:74:96:50:0e:2f:c1:4b:e9:35:66:2e:c9:f9:
                    e2:dc:d9:a0:c0:75:31:57:0a:2f:eb:b5:41:e2:af:
                    e8:d7:a2:9e:56:f7:ff:29:62:f0:5f:28:13:45:7f:
                    80:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:37:9C:A8:E5:8D:4D:48:7F:B3:5C:E9:D6:25:73:83:42:F9:B9:34
            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:C8:23:10:19:19:BC:B8:5B:EE:FF:44:76:2D:C0:BE:72:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/78A85BC823101919BCB85BEEFF44762DC0BE72F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78A85BC823101919BCB85BEEFF44762DC0BE72F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/323830343a363462383a343030303a3a2f33342d313238203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64b8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         64:41:4d:53:ab:87:75:66:49:bc:fd:7a:bf:83:a4:0f:39:3b:
         b6:f7:e4:0c:04:83:89:bc:38:df:e0:7d:83:23:c0:1a:25:12:
         80:e7:eb:f0:c1:a1:6c:03:47:ac:db:60:90:4e:d3:cf:16:6a:
         7b:ce:36:08:c8:77:0c:88:2c:7b:a8:57:91:19:e0:ae:0c:20:
         c0:8e:c4:ee:a1:29:39:2a:c9:a1:af:6f:07:d4:45:12:5e:f9:
         fc:c1:e5:6e:6d:eb:43:b9:95:73:d3:5a:c2:92:f3:7a:d0:ba:
         23:1a:1a:ea:08:95:5d:b7:52:de:3f:7c:81:2e:f0:f5:61:4a:
         4d:d7:f3:e9:5e:c8:08:1f:8a:1b:80:27:fe:b6:f6:8b:db:32:
         86:f9:7b:e3:35:00:21:3e:a3:a0:14:13:27:ff:63:b7:f5:f1:
         34:f4:33:ef:75:54:ae:f5:70:c6:cb:37:14:b6:f0:28:4d:26:
         ad:03:89:f7:ff:8b:e5:b2:cc:3a:3c:29:7f:7f:32:4b:84:02:
         a3:fa:30:ed:da:f3:19:ce:a6:55:21:5d:9a:48:38:e3:67:97:
         40:cb:7e:5c:a0:7e:74:7e:d5:b9:35:36:1f:94:9f:ef:20:6a:
         91:e4:e0:5d:23:37:35:3d:e5:90:89:7f:76:c3:b1:aa:64:90:
         03:25:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org