Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/323830343a343431303a3a2f33332d3333203d3e20323637363139.roa
File:                     323830343a343431303a3a2f33332d3333203d3e20323637363139.roa (raw, json)
Hash identifier:          9DQ6E3hUoTVlkq/UVCaT1qTC3dHFcQ8KujKH1vjidr0=
Subject key identifier:   28:5A:F2:64:92:D8:78:BF:85:43:77:37:DD:F3:45:A0:7A:74:9D:E6
Certificate issuer:       /CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
Certificate serial:       67BA06CA0A137F1FC63ADC008565A88B4519334F
Authority key identifier: 1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/323830343a343431303a3a2f33332d3333203d3e20323637363139.roa
Signing time:             Wed 13 Jul 2022 16:00:03 +0000
ROA not before:           Wed 13 Jul 2022 15:55:03 +0000
ROA not after:            Thu 13 Jul 2023 16:00:03 +0000
asID:                     267619
IP address blocks:        2804:4410::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ba:06:ca:0a:13:7f:1f:c6:3a:dc:00:85:65:a8:8b:45:19:33:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
        Validity
            Not Before: Jul 13 15:55:03 2022 GMT
            Not After : Jul 13 16:00:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e7:90:d3:b0:f7:e4:66:d8:c1:ab:4b:e7:18:
                    c7:18:93:0d:b0:13:e8:21:f7:c8:3f:49:fd:9d:f2:
                    d8:37:9f:14:14:3b:c4:a1:b8:81:de:70:6f:5d:65:
                    c2:17:25:38:ab:60:76:8e:aa:58:9e:38:0f:d4:9f:
                    71:39:8f:58:8f:b6:1f:bf:6a:1d:3e:aa:ee:a3:8c:
                    88:22:85:98:02:5f:6b:79:ca:61:a6:7c:f4:c2:20:
                    f8:08:03:24:9a:ce:a7:5b:0e:55:da:56:43:a1:b0:
                    40:1e:a3:a9:7d:7a:59:15:75:8b:88:00:08:ec:ba:
                    5f:fa:68:8a:e6:33:75:25:92:57:f3:63:d3:c4:ea:
                    1c:25:60:50:28:f6:f9:92:ce:52:d9:1a:9d:aa:10:
                    ac:45:6d:46:27:e8:4a:b8:aa:88:8b:3d:b3:8f:8f:
                    ad:26:71:c2:d4:09:fe:8e:f3:5a:01:46:16:4c:c2:
                    2a:ea:66:92:0f:1b:43:92:45:bd:da:fb:bd:ee:b2:
                    86:32:8e:06:36:e1:37:b6:65:43:1b:e7:e7:14:b9:
                    a2:32:9c:0d:ef:94:20:a3:20:a8:09:21:c8:be:20:
                    c9:ef:82:4a:2d:7e:8b:ce:99:09:da:f2:89:3a:34:
                    23:57:b1:e1:d7:1d:39:ae:8a:d1:9e:1a:88:5c:0f:
                    5c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5A:F2:64:92:D8:78:BF:85:43:77:37:DD:F3:45:A0:7A:74:9D:E6
            X509v3 Authority Key Identifier:
                keyid:1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/323830343a343431303a3a2f33332d3333203d3e20323637363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4410::/33

    Signature Algorithm: sha256WithRSAEncryption
         ae:6b:da:5d:7a:11:32:80:13:01:cf:6a:56:8b:65:ab:6a:28:
         92:f8:78:40:b2:58:eb:81:f3:22:91:59:c0:7c:2f:59:d4:68:
         3c:53:f6:d1:d4:15:72:a2:80:18:2a:7a:df:58:76:87:8b:fa:
         74:99:47:d8:99:19:ab:c6:f9:0e:4e:5a:08:73:99:16:9b:5c:
         b3:49:73:f5:4a:ac:4e:2b:87:67:6f:fc:09:47:3f:86:23:b0:
         77:2c:e2:43:7f:00:5e:c7:0b:17:35:91:c1:8f:2f:84:73:70:
         88:b5:c6:ae:2b:a7:b0:d3:fc:17:90:e6:55:c4:cb:4d:22:11:
         47:07:61:52:80:58:df:07:38:0d:aa:6a:75:76:b0:d1:28:52:
         4b:7c:c3:ec:04:e0:87:c7:42:57:fd:3f:85:a6:79:13:6e:2a:
         2c:57:29:99:1f:bb:8d:e5:12:83:47:13:b4:b8:b8:41:fd:6d:
         5b:46:4d:c3:82:b5:c7:3a:3a:bf:1e:8a:95:d3:75:66:26:d3:
         bd:42:4e:bc:5a:68:69:36:32:80:f1:47:66:64:11:b4:ca:ab:
         1e:dc:f6:d7:1c:28:aa:e5:7a:8c:55:7a:75:80:74:7a:ed:96:
         85:b7:7d:2d:00:9a:68:43:9c:64:d4:98:f0:45:64:4d:8e:0e:
         ac:f3:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org