Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/323830343a376466303a3a2f33322d3438203d3e20323731353932.roa
File:                     323830343a376466303a3a2f33322d3438203d3e20323731353932.roa (raw, json)
Hash identifier:          moO0/gFln2OKKsw1orISsKUqs4S9cvLQoJ6IJAyVKFw=
Subject key identifier:   4A:F0:28:B1:BC:40:D2:C4:A7:03:95:F1:B5:3E:B3:C3:44:57:37:C9
Certificate issuer:       /CN=C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737
Certificate serial:       26A37A8A69DAC1712CB2F4ABB4644AD4A0780C57
Authority key identifier: C3:BD:38:EB:FA:0A:23:0A:ED:DD:BE:8D:AF:54:77:CD:71:A4:57:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/323830343a376466303a3a2f33322d3438203d3e20323731353932.roa
Signing time:             Mon 19 Dec 2022 20:28:54 +0000
ROA not before:           Mon 19 Dec 2022 20:23:54 +0000
ROA not after:            Mon 18 Dec 2023 20:28:54 +0000
asID:                     271592
IP address blocks:        2804:7df0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a3:7a:8a:69:da:c1:71:2c:b2:f4:ab:b4:64:4a:d4:a0:78:0c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737
        Validity
            Not Before: Dec 19 20:23:54 2022 GMT
            Not After : Dec 18 20:28:54 2023 GMT
        Subject: CN=4AF028B1BC40D2C4A70395F1B53EB3C3445737C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:c0:54:26:a3:e0:85:8b:43:ed:49:6a:dd:
                    95:d0:1c:60:09:68:dd:69:98:38:3b:98:b3:e5:09:
                    1c:ed:2b:00:71:20:5d:90:71:ff:70:ff:b5:f2:75:
                    75:dc:9f:07:a3:09:d6:1f:70:78:8d:ac:d0:77:d8:
                    1f:75:b2:02:01:be:d3:a5:a4:27:85:84:63:84:71:
                    1b:bd:ac:c2:8b:eb:74:39:37:81:fe:01:7a:5b:69:
                    5a:2b:b5:79:71:84:4c:78:d5:ae:83:4e:0d:17:5e:
                    27:e3:3a:ec:e0:81:44:23:0b:ed:63:c0:1a:8d:c3:
                    e8:5e:7a:f6:76:06:cc:1b:44:bf:fd:c3:ef:4d:f7:
                    16:6e:59:52:e6:3c:26:25:15:ac:e0:30:d2:cb:4d:
                    cc:91:d2:1f:d3:8b:8a:a9:b7:cf:80:dc:0b:d1:01:
                    24:b1:6a:55:c6:f5:42:9f:e1:13:db:90:23:62:93:
                    61:a5:bb:c8:20:70:57:c6:da:15:41:c2:69:f4:0c:
                    07:ef:7e:6d:36:3e:19:0c:cb:0b:a5:20:12:96:ee:
                    1c:00:1e:5c:82:eb:ef:25:8c:21:25:57:b8:44:23:
                    0c:48:22:1e:d9:31:6b:a0:57:c5:07:83:b0:a5:d2:
                    9b:ac:31:1d:5f:e7:30:bb:33:95:e4:c2:c0:f5:a7:
                    1b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F0:28:B1:BC:40:D2:C4:A7:03:95:F1:B5:3E:B3:C3:44:57:37:C9
            X509v3 Authority Key Identifier:
                keyid:C3:BD:38:EB:FA:0A:23:0A:ED:DD:BE:8D:AF:54:77:CD:71:A4:57:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/323830343a376466303a3a2f33322d3438203d3e20323731353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7df0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:20:18:ae:98:71:fb:13:f7:0a:f4:30:16:06:95:21:cf:b0:
         c3:95:77:66:3a:fe:96:be:1f:05:06:00:96:8c:0d:8e:ff:f2:
         38:fe:00:7b:9a:4e:07:ad:5e:ac:ec:56:fc:d4:b8:b6:7e:f0:
         d1:06:2a:b0:f8:09:b6:2b:ee:c0:46:61:11:c6:00:19:e3:a2:
         ca:5e:95:24:ee:c9:d3:11:99:64:8b:bb:a2:81:7a:32:84:2d:
         d0:61:43:fe:1e:e8:b5:b9:2c:11:1a:c6:ac:aa:15:62:f0:03:
         1d:13:67:af:7f:76:a5:db:06:2a:9a:51:d3:54:ff:ee:97:bb:
         6d:60:24:e6:8c:71:3c:5c:ec:e3:2c:3d:9a:a2:e8:61:b9:9e:
         07:ac:b8:7b:c8:e4:4a:f6:38:16:89:37:96:2e:91:a0:b8:2b:
         93:29:67:c0:f4:02:14:22:f1:68:cd:e0:bc:4b:96:3f:95:5d:
         c5:e5:02:66:47:66:a8:18:e8:f6:8f:55:6b:ff:e0:39:33:5b:
         42:1a:50:70:a0:bc:b9:77:6d:c1:5e:47:e4:fa:f2:7b:e3:71:
         4d:05:b0:c6:1e:d2:19:f4:f3:b2:13:07:ab:fe:09:ba:99:b4:
         38:c3:f2:5a:ab:fc:85:17:e5:f8:07:51:5f:1c:9f:5f:35:8d:
         d5:f6:a4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org