Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a3a2f33322d3332203d3e20323731333735.roa
File:                     323830343a376138303a3a2f33322d3332203d3e20323731333735.roa (raw, json)
Hash identifier:          c2OTgyPf+NLPpxTIiM5qfmVcSsAw2pOmd0cElbFzyBU=
Subject key identifier:   A3:66:47:4C:B9:55:E8:0D:C9:62:9C:BC:41:7C:24:B9:40:BE:6B:14
Certificate issuer:       /CN=D55CC694898AC024276BD064EFD77BD52DCDB76D
Certificate serial:       3F7F9CAF49BED917727795C6413568561C65874B
Authority key identifier: D5:5C:C6:94:89:8A:C0:24:27:6B:D0:64:EF:D7:7B:D5:2D:CD:B7:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a3a2f33322d3332203d3e20323731333735.roa
Signing time:             Tue 29 Mar 2022 19:37:30 +0000
ROA not before:           Tue 29 Mar 2022 19:32:30 +0000
ROA not after:            Tue 28 Mar 2023 19:37:30 +0000
asID:                     271375
IP address blocks:        2804:7a80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7f:9c:af:49:be:d9:17:72:77:95:c6:41:35:68:56:1c:65:87:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55CC694898AC024276BD064EFD77BD52DCDB76D
        Validity
            Not Before: Mar 29 19:32:30 2022 GMT
            Not After : Mar 28 19:37:30 2023 GMT
        Subject: CN=A366474CB955E80DC9629CBC417C24B940BE6B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:60:ae:19:bc:00:2d:e6:9c:3d:14:a7:c5:81:
                    8a:8e:20:f9:8d:ec:74:20:6a:6a:c3:53:a7:71:cc:
                    7a:8f:47:0e:b2:b5:55:59:d2:3a:35:58:a5:4e:8b:
                    e4:48:ad:97:02:ad:33:d0:86:9d:d3:a3:8a:3a:a5:
                    ea:75:f8:e7:05:90:c7:23:d3:17:b2:d1:6e:7e:e8:
                    81:4e:d8:72:b8:ea:c5:6e:be:37:c8:98:98:ad:54:
                    00:75:a3:6a:73:d0:ab:65:97:b6:b9:59:47:8b:c5:
                    99:09:87:4c:47:3f:f0:cd:aa:56:40:94:52:0f:75:
                    35:e3:02:89:98:98:28:f8:56:a4:c5:75:dc:66:1b:
                    19:4d:d7:33:6b:92:67:7c:f8:ed:bd:14:c2:dc:51:
                    c3:ef:09:fd:7a:ea:d9:d2:2d:f9:2e:1d:e4:a4:e8:
                    39:46:f2:c2:66:4e:44:da:4d:21:09:3d:d6:97:15:
                    6c:41:e4:be:95:db:1e:e8:cc:ff:93:ff:6e:ab:bf:
                    04:fb:ed:4b:b6:f7:b4:66:1b:e3:a5:94:8c:bc:66:
                    69:17:c8:33:3f:a1:10:7f:38:f2:4a:e7:08:27:1b:
                    6b:53:1a:fb:4f:75:51:7f:b6:2c:33:c7:6a:84:8f:
                    e1:c7:b9:5a:57:f6:a5:21:b9:3f:c8:9f:0a:be:6a:
                    81:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:66:47:4C:B9:55:E8:0D:C9:62:9C:BC:41:7C:24:B9:40:BE:6B:14
            X509v3 Authority Key Identifier:
                keyid:D5:5C:C6:94:89:8A:C0:24:27:6B:D0:64:EF:D7:7B:D5:2D:CD:B7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a3a2f33322d3332203d3e20323731333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:25:0b:ae:11:4e:8b:fa:e2:c1:22:fd:16:bc:7c:d8:18:
         82:7e:98:a1:2f:dc:12:c4:79:29:37:bf:d2:4b:73:1e:e6:12:
         41:9d:f0:88:71:03:03:d8:7a:2f:63:24:a9:fc:16:27:4f:03:
         79:7a:fb:00:9b:85:ba:6e:51:d9:ce:66:63:c9:52:74:d4:10:
         f0:f1:f1:b8:cc:a1:a2:5c:0b:2b:96:19:8d:97:62:50:eb:92:
         b9:43:25:7c:62:51:30:7a:59:be:c6:48:85:08:45:24:be:79:
         e4:d9:17:00:f9:13:d4:95:1a:1d:d3:e4:e8:bc:e9:58:7d:5a:
         f7:ef:08:68:f8:ba:44:ab:86:6d:1d:72:33:09:ff:2e:1d:bc:
         01:29:c0:1e:de:03:e5:45:43:2b:90:de:2e:84:c8:d4:c4:7e:
         4b:d1:61:13:07:87:21:a1:3c:fe:46:76:54:e1:0a:ab:8f:3b:
         09:13:0d:ab:3e:42:91:6c:f0:ce:3e:86:ce:9d:30:dd:c6:eb:
         c2:1d:2b:05:16:aa:ca:de:af:a0:b6:ad:9c:a9:c5:7f:78:80:
         ee:b3:bf:02:62:cb:30:bf:40:28:57:b9:7f:5f:c2:0f:6b:29:
         50:53:86:52:40:3a:ac:95:36:f9:e6:8b:f5:9a:18:2c:fb:22:
         d4:e9:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org