Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/323830343a343431303a383030303a3a2f33332d3333203d3e20323637363139.roa
File:                     323830343a343431303a383030303a3a2f33332d3333203d3e20323637363139.roa (raw, json)
Hash identifier:          bDtw+AlrjqQ88gbn37NyDfBQKGlX68i7NVMe1G3BeYs=
Subject key identifier:   2A:85:4A:6C:CE:BF:A4:27:62:59:2B:01:88:8B:85:DA:E3:75:F6:B9
Certificate issuer:       /CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
Certificate serial:       697E2CF0F734A6B593DCD0ADF7EE96A34FD12523
Authority key identifier: 1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/323830343a343431303a383030303a3a2f33332d3333203d3e20323637363139.roa
Signing time:             Wed 13 Jul 2022 16:00:02 +0000
ROA not before:           Wed 13 Jul 2022 15:55:02 +0000
ROA not after:            Thu 13 Jul 2023 16:00:02 +0000
asID:                     267619
IP address blocks:        2804:4410:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7e:2c:f0:f7:34:a6:b5:93:dc:d0:ad:f7:ee:96:a3:4f:d1:25:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
        Validity
            Not Before: Jul 13 15:55:02 2022 GMT
            Not After : Jul 13 16:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:82:27:16:38:a2:5d:62:b2:04:89:36:89:
                    ec:e1:6a:2c:28:01:b2:a9:d8:0d:04:12:d5:16:ca:
                    34:6e:29:ae:f5:80:a2:ed:2c:2d:e2:84:bd:42:9e:
                    9d:bf:25:7a:7b:fb:7a:50:7c:17:73:16:86:ec:82:
                    4b:40:7c:ee:d9:64:55:66:cd:e3:d0:2d:c7:a9:0a:
                    1a:e4:5b:d9:78:85:09:57:8f:56:6b:ff:0d:b2:3a:
                    7a:ce:5f:5a:0e:c2:0a:2a:e1:ed:09:ba:20:c4:5d:
                    10:3c:94:61:4a:e9:4a:53:7e:10:fe:ca:c9:eb:00:
                    20:40:2e:b9:93:62:34:c7:39:7b:d4:63:a8:50:dd:
                    68:3c:a7:d7:a2:7a:c0:9a:fe:f3:bc:37:bd:c8:ea:
                    5c:44:16:84:2e:e4:f1:c3:8d:cb:b2:47:3e:56:5e:
                    67:ca:04:4a:36:5f:e8:f1:5c:6e:fa:33:1b:c3:21:
                    3a:e2:01:99:5d:fb:64:53:47:44:a9:1d:b0:af:e7:
                    96:0b:ae:57:a0:5f:2b:75:73:1e:1b:84:ba:79:d5:
                    4d:2c:52:f4:57:84:b5:9a:b1:c0:99:42:59:1b:30:
                    9e:3d:fc:7f:2d:79:a1:48:e0:14:6e:1d:49:41:a8:
                    9a:fd:3c:fd:96:5d:43:42:5a:0d:1b:9f:6c:2b:70:
                    01:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:85:4A:6C:CE:BF:A4:27:62:59:2B:01:88:8B:85:DA:E3:75:F6:B9
            X509v3 Authority Key Identifier:
                keyid:1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/323830343a343431303a383030303a3a2f33332d3333203d3e20323637363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4410:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         bc:a2:87:8b:73:d4:20:57:f2:a4:ac:3f:5f:ae:ce:fa:a1:37:
         4d:7b:00:aa:0c:69:83:54:3e:b7:84:d8:02:b5:e3:ab:7f:8b:
         cc:c9:5a:2f:1c:d1:88:38:26:46:e9:e7:7e:27:d3:aa:e0:26:
         ff:37:ad:4f:c0:7d:70:5e:89:39:49:a7:23:9a:67:e6:71:5c:
         5a:f6:5a:fa:3d:e5:78:32:81:2b:b1:db:ed:da:0e:37:9b:45:
         17:04:15:86:60:d6:34:b8:33:50:4b:ad:05:ab:ab:e7:7d:bf:
         fe:1a:09:6b:d5:ad:1a:63:11:1a:e5:fa:80:74:71:7e:ff:6e:
         6f:3d:c1:e1:bd:50:cd:e9:20:e1:3d:f6:e2:d9:dc:a7:b9:f3:
         fe:14:7e:62:7d:d0:d3:54:d5:8c:bc:1c:14:da:b2:f8:1a:a7:
         7f:9a:4d:e2:fb:89:dc:e4:fb:00:05:73:79:78:c1:0e:10:e2:
         37:86:be:b3:58:20:99:50:7a:8d:c5:2d:2e:a0:63:30:68:49:
         72:f3:09:d7:cd:23:52:aa:0c:16:47:61:83:70:f6:09:ac:a2:
         ec:32:19:7c:00:04:58:b5:42:1e:35:08:03:e6:40:48:78:5b:
         e4:38:89:bd:9e:03:d3:21:fc:9f:57:44:f4:38:84:ba:c4:d4:
         70:9f:2f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org