Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/2/323830343a336132303a3a2f33322d3438203d3e20323636303732.roa
File:                     323830343a336132303a3a2f33322d3438203d3e20323636303732.roa (raw, json)
Hash identifier:          PqHwJ45NLuX2u1CwGGvl4nqJc0VRURrELF3/XFsNclw=
Subject key identifier:   28:BA:2F:38:A0:1C:FA:90:30:70:A4:A4:ED:A6:E8:3C:47:B8:9D:32
Certificate issuer:       /CN=787B33A6F56C87694312588DB1C965482FE21F46
Certificate serial:       0AD2DB7C6961183EDBE86D36BEC20F680852550B
Authority key identifier: 78:7B:33:A6:F5:6C:87:69:43:12:58:8D:B1:C9:65:48:2F:E2:1F:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/787B33A6F56C87694312588DB1C965482FE21F46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/2/323830343a336132303a3a2f33322d3438203d3e20323636303732.roa
Signing time:             Tue 07 Feb 2023 18:05:20 +0000
ROA not before:           Tue 07 Feb 2023 18:00:20 +0000
ROA not after:            Tue 06 Feb 2024 18:05:20 +0000
asID:                     266072
IP address blocks:        2804:3a20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d2:db:7c:69:61:18:3e:db:e8:6d:36:be:c2:0f:68:08:52:55:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787B33A6F56C87694312588DB1C965482FE21F46
        Validity
            Not Before: Feb  7 18:00:20 2023 GMT
            Not After : Feb  6 18:05:20 2024 GMT
        Subject: CN=28BA2F38A01CFA903070A4A4EDA6E83C47B89D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:dc:dd:8a:24:a8:f8:d1:8a:b2:2d:a6:ad:
                    61:d2:52:57:84:63:c3:00:9c:37:31:eb:03:ba:4d:
                    83:f3:2a:23:92:46:8e:18:65:e5:d3:99:3c:25:15:
                    df:4c:aa:40:b1:27:39:c8:72:cb:27:7d:ad:bc:b0:
                    6e:34:ee:37:99:37:c3:44:1b:51:91:74:76:5e:a8:
                    27:91:a6:56:de:46:ee:9b:ca:ac:ff:4d:89:36:b0:
                    f2:af:2a:78:2d:b5:03:dd:f6:19:1e:30:0d:17:08:
                    dc:c5:03:33:b6:f4:bb:6f:2e:21:c1:80:1d:fd:47:
                    f7:d6:7d:01:15:a7:d5:5b:e9:23:46:77:01:f5:1f:
                    c2:88:c4:20:19:69:a2:af:3b:ed:b9:b0:81:d3:1b:
                    21:33:26:ae:5a:4e:aa:b2:11:e3:99:be:7a:ed:ae:
                    7b:26:27:0a:1a:48:d5:0c:4c:69:ec:78:c6:3a:7b:
                    74:d6:9b:84:e1:ba:66:73:7b:a6:ae:65:eb:47:78:
                    4a:94:29:a1:1a:e0:14:5d:c2:67:bb:3d:bd:04:b5:
                    99:f2:7d:63:29:7c:f8:17:7c:b5:40:a4:ef:91:85:
                    58:78:42:37:2b:29:e9:87:f5:5c:57:ab:c3:3e:a5:
                    4f:96:f3:c0:69:49:65:57:dd:62:8d:92:21:49:fa:
                    27:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BA:2F:38:A0:1C:FA:90:30:70:A4:A4:ED:A6:E8:3C:47:B8:9D:32
            X509v3 Authority Key Identifier:
                keyid:78:7B:33:A6:F5:6C:87:69:43:12:58:8D:B1:C9:65:48:2F:E2:1F:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/2/787B33A6F56C87694312588DB1C965482FE21F46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/787B33A6F56C87694312588DB1C965482FE21F46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/2/323830343a336132303a3a2f33322d3438203d3e20323636303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:3c:ab:a6:dd:0e:a0:dd:62:c5:0b:83:ad:65:e0:63:f5:44:
         2e:14:87:70:35:cb:b6:72:2b:a8:4f:7e:e8:13:4d:2f:ec:fc:
         96:13:4c:1b:fa:f5:f0:56:71:cb:35:47:ca:02:1c:8f:e3:e0:
         db:0d:44:dc:48:e1:a8:0e:b9:80:98:93:67:52:86:34:b3:7b:
         f1:ae:76:2d:e1:e6:29:8e:9f:ea:76:b2:3e:60:01:3d:e4:8f:
         1b:de:ef:b1:60:1c:a1:23:65:45:a0:23:7b:a7:5a:b0:db:44:
         a0:2e:84:6c:3a:73:ea:7c:de:09:4f:3a:a9:1c:f0:63:64:eb:
         b2:d3:1e:a0:9e:4c:41:ec:c0:7d:2f:6a:b9:82:24:27:a1:73:
         4e:62:ee:9d:14:03:8a:cd:45:b9:16:ad:f2:3c:25:3e:20:5f:
         d9:cd:a9:19:46:b8:a1:9b:f7:91:5f:37:3f:9b:27:95:c5:5c:
         fa:e1:0a:44:1f:2b:23:bc:5f:53:04:4a:03:57:67:42:33:11:
         1c:93:92:57:6c:af:0a:f2:d6:4e:0f:89:bf:7f:71:aa:13:b9:
         20:2a:cb:0c:77:54:bb:60:93:1f:65:ba:f9:2e:f2:28:a4:80:
         fb:38:0a:ac:12:37:a2:9c:32:87:7e:fe:e9:3f:90:86:88:07:
         ff:18:eb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org