Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5NratkMaQP27fSvKBo4DYu9KzMwbZGYMcK2TrLFe7SKd/0/323830343a343430303a3a2f33322d3336203d3e20323637363135.roa
File:                     323830343a343430303a3a2f33322d3336203d3e20323637363135.roa (raw, json)
Hash identifier:          aKKgAoCzZktoDoqXpfgf6BVHNi/IgEBSX/Krj/uOx14=
Subject key identifier:   2B:50:2E:63:BD:57:33:56:77:30:FE:BD:FA:D8:F8:E9:D9:05:AB:06
Certificate issuer:       /CN=41BBCAF32C7158F069662D048CCCA087F19C8448
Certificate serial:       7ABD0CBB6D1833BF0484F4B73EE657914AAF2258
Authority key identifier: 41:BB:CA:F3:2C:71:58:F0:69:66:2D:04:8C:CC:A0:87:F1:9C:84:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BBCAF32C7158F069662D048CCCA087F19C8448.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NratkMaQP27fSvKBo4DYu9KzMwbZGYMcK2TrLFe7SKd/0/323830343a343430303a3a2f33322d3336203d3e20323637363135.roa
Signing time:             Mon 23 May 2022 19:40:04 +0000
ROA not before:           Mon 23 May 2022 19:35:04 +0000
ROA not after:            Mon 22 May 2023 19:40:04 +0000
asID:                     267615
IP address blocks:        2804:4400::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bd:0c:bb:6d:18:33:bf:04:84:f4:b7:3e:e6:57:91:4a:af:22:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41BBCAF32C7158F069662D048CCCA087F19C8448
        Validity
            Not Before: May 23 19:35:04 2022 GMT
            Not After : May 22 19:40:04 2023 GMT
        Subject: CN=2B502E63BD5733567730FEBDFAD8F8E9D905AB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e2:cf:ee:49:58:70:15:6e:a6:02:aa:33:68:
                    82:8b:37:43:c5:47:1e:95:3d:bf:d0:41:82:f6:9d:
                    2b:6f:b7:35:40:f0:5f:71:af:3e:80:af:29:09:d5:
                    5c:12:af:6c:f2:d2:3b:77:0d:fa:fc:b9:9a:aa:2f:
                    b4:21:31:70:4b:47:18:a8:c0:2f:97:bb:dc:16:85:
                    3f:b6:da:40:36:66:b1:3e:16:31:e3:12:26:67:98:
                    80:b8:14:7f:6a:30:37:b1:f7:17:d4:4b:ef:f0:71:
                    f8:e9:55:cb:50:12:eb:b7:45:fd:58:4b:cb:ac:42:
                    78:b3:02:de:af:2f:48:b6:a9:c4:96:3b:a3:7e:d4:
                    2f:d9:2e:e0:02:53:39:b6:f2:fa:03:96:4b:c8:ad:
                    2c:52:22:99:a5:f5:66:d0:f1:48:77:34:57:0d:c0:
                    f7:55:6b:6b:44:50:31:ff:8e:9b:03:34:f3:ef:be:
                    ba:b0:98:0b:9f:1e:c1:ef:76:8f:70:a5:b3:9c:44:
                    72:0f:24:50:23:94:b3:d9:57:9f:96:7b:20:8f:b4:
                    e0:30:d0:86:f2:9f:02:ce:37:5c:98:66:2e:dc:8e:
                    35:4f:46:32:e6:0e:11:1e:c8:ef:f5:7c:39:52:43:
                    d2:4f:ba:12:01:05:8c:8a:53:ab:f1:83:13:59:77:
                    35:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:50:2E:63:BD:57:33:56:77:30:FE:BD:FA:D8:F8:E9:D9:05:AB:06
            X509v3 Authority Key Identifier:
                keyid:41:BB:CA:F3:2C:71:58:F0:69:66:2D:04:8C:CC:A0:87:F1:9C:84:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NratkMaQP27fSvKBo4DYu9KzMwbZGYMcK2TrLFe7SKd/0/41BBCAF32C7158F069662D048CCCA087F19C8448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BBCAF32C7158F069662D048CCCA087F19C8448.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NratkMaQP27fSvKBo4DYu9KzMwbZGYMcK2TrLFe7SKd/0/323830343a343430303a3a2f33322d3336203d3e20323637363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4400::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:41:ce:22:3a:9a:7a:d4:1f:29:39:e0:0c:0c:4f:92:cd:
         79:34:46:2a:2a:fd:9f:66:60:97:20:61:6d:44:8c:98:ee:af:
         49:f6:7b:f9:b2:bf:3c:a4:f9:17:df:ce:f8:bd:51:d3:8d:bc:
         74:a0:45:bd:b4:ce:78:5b:e6:5d:dd:ef:72:6a:b1:1f:b7:de:
         0e:35:36:cc:68:e0:ef:06:ce:96:53:58:a2:eb:09:83:f5:fd:
         bb:ef:58:32:b8:b7:95:61:ba:56:c5:26:00:7a:38:65:92:f1:
         28:37:1a:e4:ea:74:2f:f7:44:b9:61:d2:e9:40:04:39:72:22:
         58:2e:16:7c:66:46:78:89:71:d3:7a:d1:9d:4a:25:a6:7c:75:
         c6:01:32:85:04:f1:cc:20:74:5f:db:fa:f9:1f:15:ec:b2:24:
         aa:c5:2a:e2:f9:c1:20:1b:65:cc:51:4c:0b:03:dc:7d:95:c7:
         be:b2:c8:59:e9:05:c6:b3:4a:85:ae:ea:1b:ab:fd:59:d5:99:
         fb:b0:74:26:a7:a3:a0:e8:f7:ec:22:4e:d6:b0:87:20:2d:06:
         56:39:3e:2d:ff:29:e5:54:b4:a5:b7:6d:0d:e9:a1:69:ae:a4:
         de:11:d9:3a:5d:6e:5e:af:c1:c8:9e:c7:33:08:98:8a:14:78:
         6c:b8:af:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org