Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/0/323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa
File:                     323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa (raw, json)
Hash identifier:          3tX64HSkiTyfmCZj7AncGSoS9AObmSW2nAdM2WzsEoY=
Subject key identifier:   AC:36:CF:B6:D9:9D:5F:D7:36:9D:E2:30:6B:07:DA:76:B9:3E:3A:8C
Certificate issuer:       /CN=3C4CB5A739493355B552E0184545C33D55B37DD4
Certificate serial:       0E295D99286C6F7AABA467416096A4D1E5817DF4
Authority key identifier: 3C:4C:B5:A7:39:49:33:55:B5:52:E0:18:45:45:C3:3D:55:B3:7D:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4CB5A739493355B552E0184545C33D55B37DD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/0/323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa
Signing time:             Mon 20 Nov 2023 12:16:12 +0000
ROA not before:           Mon 20 Nov 2023 12:11:12 +0000
ROA not after:            Mon 18 Nov 2024 12:16:12 +0000
asID:                     269181
IP address blocks:        2804:60a0:8000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:29:5d:99:28:6c:6f:7a:ab:a4:67:41:60:96:a4:d1:e5:81:7d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C4CB5A739493355B552E0184545C33D55B37DD4
        Validity
            Not Before: Nov 20 12:11:12 2023 GMT
            Not After : Nov 18 12:16:12 2024 GMT
        Subject: CN=AC36CFB6D99D5FD7369DE2306B07DA76B93E3A8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:b4:a4:f6:41:5b:7f:62:79:21:37:37:69:
                    90:11:78:9a:f0:8e:d8:3c:28:a8:b7:29:26:cc:69:
                    db:24:89:35:a8:9c:39:3f:d9:7e:03:13:ba:bb:68:
                    70:04:02:c1:38:5f:f6:6a:6c:1b:7f:fa:d2:e8:34:
                    21:cf:2d:b6:62:f7:f5:a6:8e:2a:aa:f4:ea:91:a5:
                    39:f0:0b:c5:71:fa:f3:70:37:35:bd:0b:4c:51:39:
                    b6:62:08:d2:f9:68:85:1d:1a:0a:59:fd:6a:53:e5:
                    cd:89:7b:f6:ea:08:30:9c:4a:7d:d3:cb:f2:3b:88:
                    20:93:33:76:0a:be:8b:e6:e1:ae:e0:b4:09:13:43:
                    7c:4a:e3:24:d6:5d:a8:c8:fa:b4:fe:a0:4a:11:12:
                    9f:5a:28:79:29:2c:04:be:08:36:f0:89:0c:e5:c9:
                    92:55:14:07:8d:f2:37:b1:c2:1e:79:d2:eb:9d:f7:
                    1c:48:bb:04:09:2b:94:cb:70:99:2a:ab:ae:30:17:
                    e0:ea:a4:c2:66:e2:44:d2:6d:78:41:cf:f3:a7:b3:
                    4b:d4:c3:b8:6a:6a:d8:91:40:79:c5:b2:6b:c9:b8:
                    f8:b0:47:92:54:c3:cf:75:e6:c2:f1:b8:1f:44:b6:
                    b0:0b:e5:99:72:86:45:db:50:e4:5a:bc:72:58:c2:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:36:CF:B6:D9:9D:5F:D7:36:9D:E2:30:6B:07:DA:76:B9:3E:3A:8C
            X509v3 Authority Key Identifier:
                keyid:3C:4C:B5:A7:39:49:33:55:B5:52:E0:18:45:45:C3:3D:55:B3:7D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/0/3C4CB5A739493355B552E0184545C33D55B37DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4CB5A739493355B552E0184545C33D55B37DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/0/323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60a0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         79:5b:fd:4e:f8:5f:97:c2:36:17:f4:f4:2b:65:fa:ce:95:4e:
         af:bf:bb:14:05:47:88:c4:35:ea:e3:9c:6a:57:3c:a6:29:ab:
         6a:36:50:26:7c:a5:05:58:e8:27:2a:76:45:57:aa:09:65:65:
         bf:93:3d:34:17:2b:89:81:5e:64:80:08:5b:09:14:05:26:4b:
         70:0b:b2:00:c0:24:af:29:b3:c0:bf:2f:5a:53:64:ca:32:f0:
         bb:43:33:20:05:2e:7c:e4:fe:84:c3:40:92:fd:41:e2:b7:bc:
         48:93:20:71:13:26:37:21:1e:ee:58:b4:79:57:61:12:36:e0:
         14:cd:af:8a:ac:60:47:ba:94:10:13:0d:aa:82:2e:8f:d3:3f:
         19:b1:0e:42:d8:3b:5e:44:76:c9:ba:47:20:06:46:ec:8a:4b:
         08:f2:3a:29:2f:93:f7:f5:e7:c1:ce:a6:8a:1e:f7:e8:37:f9:
         35:16:62:54:f1:ab:23:6a:c8:99:58:6f:3a:54:f5:3c:3d:34:
         30:9d:32:ba:42:13:df:47:98:c9:fd:9f:46:0a:3d:64:5d:35:
         5f:f9:e8:f2:22:20:7e:66:70:8b:24:35:81:d3:ff:1c:9c:02:
         fc:84:18:e5:f6:e8:a5:a1:4e:85:01:e2:3d:7a:55:ff:20:56:
         70:c7:2f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org