Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a3a2f33332d3333203d3e20323632333933.roa
File:                     323830343a3863383a3a2f33332d3333203d3e20323632333933.roa (raw, json)
Hash identifier:          nJgTOCFAR3oklyAVq7UOA+FPgyb74mQ3ChK38D8PPNs=
Subject key identifier:   AF:F3:20:41:EE:8A:7D:45:BE:7B:AC:A4:37:65:17:3D:5B:EB:2E:19
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       7BC0336CAD936CDCB51A41CD6E3E0377AB53638E
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a3a2f33332d3333203d3e20323632333933.roa
Signing time:             Sat 05 Mar 2022 15:38:16 +0000
ROA not before:           Sat 05 Mar 2022 15:33:16 +0000
ROA not after:            Sat 04 Mar 2023 15:38:16 +0000
asID:                     262393
IP address blocks:        2804:8c8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c0:33:6c:ad:93:6c:dc:b5:1a:41:cd:6e:3e:03:77:ab:53:63:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Mar  5 15:33:16 2022 GMT
            Not After : Mar  4 15:38:16 2023 GMT
        Subject: CN=AFF32041EE8A7D45BE7BACA43765173D5BEB2E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7c:1e:94:4d:d2:79:8f:0c:5a:89:fd:4e:9c:
                    ca:aa:02:92:90:32:1c:80:b6:d1:d9:f2:4e:bc:21:
                    d7:a6:69:23:21:73:69:45:f2:25:9b:20:d7:af:e1:
                    44:6c:92:9a:49:83:97:07:6f:81:fd:58:5a:8b:8b:
                    bd:97:73:09:f7:41:6e:23:68:b3:14:21:79:50:27:
                    81:d2:56:5b:7a:02:8c:d0:19:ca:a3:00:d1:27:3d:
                    4d:d6:3e:b5:a8:16:27:ff:23:85:bd:49:1a:ef:81:
                    51:15:0d:85:f3:e3:cc:b2:9f:c2:1b:26:8e:3e:84:
                    78:ce:f3:95:b1:12:88:9a:d3:80:e6:05:7d:62:d3:
                    bd:a8:84:d6:bc:b3:65:66:dd:f4:61:9f:de:87:d1:
                    23:f0:9b:42:36:61:bb:af:dc:63:b5:a2:91:17:a2:
                    ef:3d:52:53:f8:6b:ec:26:0b:19:59:e4:ec:77:cf:
                    ec:4d:26:09:e6:04:a7:a0:22:5f:8d:14:93:41:9b:
                    45:25:f1:40:08:01:ab:78:e7:53:f8:a6:19:9f:5f:
                    c7:9c:d8:d3:26:68:0a:3c:d7:7d:a3:c5:f2:91:ab:
                    6e:6b:77:1b:aa:eb:db:1b:34:f7:be:6a:13:6f:5c:
                    84:4c:2c:03:f8:8b:88:c5:8d:13:13:2a:53:b6:89:
                    46:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F3:20:41:EE:8A:7D:45:BE:7B:AC:A4:37:65:17:3D:5B:EB:2E:19
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a3a2f33332d3333203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8::/33

    Signature Algorithm: sha256WithRSAEncryption
         40:ae:ff:ec:7d:80:bc:77:2f:ea:76:51:5b:ea:6d:17:3a:ad:
         a7:de:71:ed:df:93:49:0e:30:d0:c0:8b:76:01:0a:32:b9:78:
         95:76:c3:ca:ec:5f:c9:b5:e8:cb:96:3d:99:20:e4:e9:ce:d1:
         43:fb:c6:c1:21:24:6a:e4:5b:30:05:40:1a:fe:73:0a:56:21:
         80:0d:f2:f2:1f:98:8a:51:2e:76:0d:d0:72:72:19:b8:7d:6f:
         ad:da:c0:28:9f:99:b2:ee:99:25:22:25:03:b3:fe:42:32:6f:
         9e:30:da:3f:d7:5a:ef:7d:aa:18:14:7a:4e:c6:52:46:ef:a8:
         4e:31:1a:bd:d1:21:34:ed:b5:3e:84:be:4a:30:a6:c7:63:8e:
         28:d1:fc:d0:61:7c:13:37:72:c7:1c:10:a6:64:46:44:65:4f:
         b9:19:1a:f6:12:00:2c:92:cb:59:9c:e6:9c:f4:37:6e:52:ff:
         ee:cb:80:94:98:85:f4:11:3d:d3:51:87:10:54:49:2f:3d:bd:
         63:4f:10:70:64:15:d8:35:89:83:a3:f1:6f:16:87:cd:14:66:
         1b:42:76:fa:ad:7d:85:24:5a:61:29:ea:a7:0e:cf:d0:d9:51:
         00:fd:ff:04:57:53:13:b3:1e:ec:ed:de:11:67:56:d2:03:d7:
         02:b9:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org