Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/323830343a6662303a3a2f33322d3332203d3e20323632383431.roa
File:                     323830343a6662303a3a2f33322d3332203d3e20323632383431.roa (raw, json)
Hash identifier:          vZLQdlihHX7B/0Rdoa3GRPRXxdgU3CTVSbzsZBWDwbI=
Subject key identifier:   95:49:60:C1:04:AE:30:36:2E:C5:39:23:46:51:55:D0:8B:D4:74:D6
Certificate issuer:       /CN=7C6FDECE05E8F2BEA15333D9AF84310947309C98
Certificate serial:       7C0D7CB8990AFFF5FCAA98D8F3B4BCC464BBB8F6
Authority key identifier: 7C:6F:DE:CE:05:E8:F2:BE:A1:53:33:D9:AF:84:31:09:47:30:9C:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C6FDECE05E8F2BEA15333D9AF84310947309C98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/323830343a6662303a3a2f33322d3332203d3e20323632383431.roa
Signing time:             Thu 02 Nov 2023 03:40:50 +0000
ROA not before:           Thu 02 Nov 2023 03:35:50 +0000
ROA not after:            Thu 31 Oct 2024 03:40:50 +0000
asID:                     262841
IP address blocks:        2804:fb0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0d:7c:b8:99:0a:ff:f5:fc:aa:98:d8:f3:b4:bc:c4:64:bb:b8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C6FDECE05E8F2BEA15333D9AF84310947309C98
        Validity
            Not Before: Nov  2 03:35:50 2023 GMT
            Not After : Oct 31 03:40:50 2024 GMT
        Subject: CN=954960C104AE30362EC53923465155D08BD474D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:df:16:f2:6f:c7:7d:6f:f2:8c:0b:ad:3c:
                    dd:5b:7a:99:cc:8d:81:3e:a3:79:8e:0e:27:3d:6c:
                    2e:97:86:75:73:d4:6c:50:82:d0:21:7b:1c:91:73:
                    f5:ea:0b:ef:dd:fc:1c:66:65:eb:d0:a0:2f:24:42:
                    07:d7:85:e3:33:e4:5d:ae:84:af:d5:1d:29:0a:42:
                    cb:f8:12:5f:1f:4e:f0:b2:43:47:b8:91:94:9a:27:
                    d9:06:f0:0f:76:12:38:28:e5:37:0e:69:a7:0f:e5:
                    08:4f:9f:78:5d:0b:d6:af:22:6e:83:16:1b:e1:f1:
                    78:51:c9:04:2c:31:c5:f6:2b:ad:63:e0:51:06:33:
                    8f:15:c2:db:6b:82:d6:f9:5c:3b:f1:6d:4b:32:92:
                    8e:8b:6b:99:5a:8f:fb:06:b3:4a:ba:9b:4c:dd:80:
                    2f:b9:b1:7c:b8:2f:e2:65:e9:8f:4e:b6:a3:f0:37:
                    22:41:69:6e:27:c9:bf:d8:03:04:bc:41:68:da:a5:
                    a3:53:32:9f:a0:00:c0:1e:69:ea:8c:39:b6:5a:f3:
                    6e:76:af:09:7e:fc:cf:8e:2d:f1:10:a6:19:d4:1d:
                    a1:2e:31:cf:a8:91:22:3a:db:f4:45:28:26:8e:c6:
                    64:a8:52:2c:56:15:f2:2c:63:73:2a:df:e6:b7:b3:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:49:60:C1:04:AE:30:36:2E:C5:39:23:46:51:55:D0:8B:D4:74:D6
            X509v3 Authority Key Identifier:
                keyid:7C:6F:DE:CE:05:E8:F2:BE:A1:53:33:D9:AF:84:31:09:47:30:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/7C6FDECE05E8F2BEA15333D9AF84310947309C98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C6FDECE05E8F2BEA15333D9AF84310947309C98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/323830343a6662303a3a2f33322d3332203d3e20323632383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:6c:cd:d9:1c:29:36:b8:c7:9a:60:ca:76:d2:68:82:61:f5:
         00:d5:fa:11:65:71:45:68:99:f5:05:17:ed:d9:e3:13:1e:45:
         7f:bf:46:cd:91:2c:09:df:8b:b9:c6:2e:e6:4f:c3:d8:0e:d7:
         63:b1:5d:34:8e:fa:9f:c8:aa:b4:21:49:5f:32:36:49:02:8b:
         9a:33:2c:d8:4b:96:dd:e6:cd:04:68:9d:d6:00:fd:3a:23:f8:
         d3:8e:b7:25:4a:6f:2e:6d:92:9b:99:a5:ab:b5:fa:e8:d9:5c:
         12:ba:7b:04:d5:fc:52:74:e9:39:2d:2c:cd:b3:92:92:33:12:
         71:ca:d7:e8:cf:dd:e5:42:51:a2:cf:6a:b9:80:df:26:e1:b5:
         1d:e7:94:df:97:ed:59:dc:6e:d2:77:5d:87:3d:96:ae:61:12:
         dd:80:7e:bf:1b:40:c4:5c:9a:66:40:2d:81:56:07:ea:69:00:
         f1:cc:f1:ea:7c:8c:81:32:0d:4d:fd:f3:7f:fc:f1:32:df:94:
         ab:ca:96:37:dc:9b:0d:81:12:f8:3d:91:5d:6a:5b:fd:18:f8:
         f3:52:0f:85:9f:66:bc:ee:8a:f8:a7:ed:df:94:97:8c:54:20:
         be:7c:17:cf:92:16:a4:62:56:ad:84:5b:51:87:50:fa:6f:5d:
         02:b5:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org