Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/323830343a376632383a3a2f33322d3334203d3e20323731363730.roa
File:                     323830343a376632383a3a2f33322d3334203d3e20323731363730.roa (raw, json)
Hash identifier:          2h5W/7Qc+ZlEhmBbE6e9DYJ4cO9mibxZLcIHzFmKHYQ=
Subject key identifier:   F4:23:FB:C4:03:35:F4:EE:FF:72:F9:EA:3F:38:8C:59:85:03:CC:63
Certificate issuer:       /CN=32BE580D860CE57E80548533943E4642B25BEE59
Certificate serial:       6FB9264AA127099E496652DB0DC49EF2C8EB8267
Authority key identifier: 32:BE:58:0D:86:0C:E5:7E:80:54:85:33:94:3E:46:42:B2:5B:EE:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BE580D860CE57E80548533943E4642B25BEE59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/323830343a376632383a3a2f33322d3334203d3e20323731363730.roa
Signing time:             Thu 04 Apr 2024 05:40:43 +0000
ROA not before:           Thu 04 Apr 2024 05:35:43 +0000
ROA not after:            Thu 03 Apr 2025 05:40:43 +0000
asID:                     271670
IP address blocks:        2804:7f28::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b9:26:4a:a1:27:09:9e:49:66:52:db:0d:c4:9e:f2:c8:eb:82:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32BE580D860CE57E80548533943E4642B25BEE59
        Validity
            Not Before: Apr  4 05:35:43 2024 GMT
            Not After : Apr  3 05:40:43 2025 GMT
        Subject: CN=F423FBC40335F4EEFF72F9EA3F388C598503CC63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:15:68:89:b5:9b:9f:e9:33:3a:35:f0:5c:
                    0f:24:a3:d9:ce:38:f0:27:95:fe:df:d7:44:da:66:
                    c6:87:1f:5a:5c:48:6b:c1:25:8a:17:43:24:99:4e:
                    e6:14:f9:3c:d9:78:26:e3:dc:0c:0a:8c:79:78:0d:
                    da:75:b6:56:2c:54:77:9f:4c:6c:d3:58:d9:0b:5e:
                    fd:b4:77:fa:09:5d:aa:a7:13:b4:b1:0d:a7:b1:cf:
                    1b:6b:42:d6:a0:00:5d:02:c5:17:00:f2:10:63:68:
                    35:45:92:f1:ac:79:5c:5f:cc:ee:c9:31:67:9a:63:
                    f1:77:4c:39:c8:22:e4:11:5c:4c:a1:c4:8c:82:24:
                    10:aa:d1:10:b5:19:ac:de:89:c2:b6:97:ff:e3:63:
                    dd:b9:e9:ff:14:fa:8a:66:e2:8e:6b:8b:e9:0a:62:
                    9a:7f:83:19:65:00:4e:ee:e6:c5:95:96:9b:d5:d0:
                    7d:66:f0:00:5d:c9:9f:56:85:03:dc:8a:81:52:fc:
                    5b:65:38:25:ad:2f:0e:a4:48:ad:6d:97:7f:1d:db:
                    5a:43:5a:a7:2d:1d:a4:94:3f:5c:af:8b:dc:51:70:
                    f3:da:eb:b8:54:83:c6:e1:f5:3f:75:f0:02:50:50:
                    7e:ab:3e:d3:04:b4:cc:ab:5d:a3:33:24:dd:4d:dc:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:23:FB:C4:03:35:F4:EE:FF:72:F9:EA:3F:38:8C:59:85:03:CC:63
            X509v3 Authority Key Identifier:
                keyid:32:BE:58:0D:86:0C:E5:7E:80:54:85:33:94:3E:46:42:B2:5B:EE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/32BE580D860CE57E80548533943E4642B25BEE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BE580D860CE57E80548533943E4642B25BEE59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/323830343a376632383a3a2f33322d3334203d3e20323731363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f28::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:14:f6:ff:9a:fd:33:bb:1c:55:0c:f3:f2:5b:57:e4:b7:8a:
         2d:99:e9:1c:dd:df:e7:1c:39:40:13:33:95:fc:48:63:b4:e6:
         f5:81:21:a8:64:c2:da:e4:71:52:14:2c:03:1f:16:9a:a5:c0:
         f7:37:43:87:ce:18:b1:f7:4d:df:44:6e:e9:30:a5:20:16:b5:
         f8:73:75:86:19:a3:31:0b:8c:b2:48:9a:58:6b:32:c6:2b:86:
         39:c3:41:e1:0c:f8:ea:92:d8:84:0f:3b:e4:2e:b9:23:d2:49:
         b0:4c:85:01:7b:bc:94:4d:31:16:5d:2d:8a:bb:13:43:30:21:
         25:18:b4:2c:ad:c0:de:19:7b:d0:ec:a5:62:70:6e:1f:65:e0:
         f0:55:9a:31:ca:7e:9c:a2:d3:c7:a4:c5:1a:bf:c8:5e:eb:67:
         46:7b:ed:f3:4b:b8:e8:0c:5b:20:94:29:a0:7f:fa:e7:60:c1:
         c2:28:43:a2:e2:90:7c:76:55:8c:c5:f2:d2:2a:f5:4f:b7:10:
         70:ee:ba:66:b2:04:9b:00:fc:20:31:29:bb:c6:b8:81:29:37:
         46:14:e5:d1:a8:f5:5c:59:c3:bd:ab:16:0e:b5:10:06:8f:a3:
         c2:93:32:79:29:8d:43:27:d2:78:fa:ae:c4:df:f5:50:e3:22:
         36:f6:1f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org