Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/1/323830343a336463303a643030303a3a2f33372d3337203d3e20323636353531.roa
File:                     323830343a336463303a643030303a3a2f33372d3337203d3e20323636353531.roa (raw, json)
Hash identifier:          kHs4QfPiojJn8ff99tjLThJUSPzMsP5CMUi1JWdk5m4=
Subject key identifier:   36:88:AA:56:E2:EA:84:4D:E0:50:83:2B:DB:62:D6:D4:51:2F:96:F2
Certificate issuer:       /CN=31D33802A3979B16E83266873E3E843CFA44989A
Certificate serial:       1CB703430A6F80E2058351C2037060E2CA133E4D
Authority key identifier: 31:D3:38:02:A3:97:9B:16:E8:32:66:87:3E:3E:84:3C:FA:44:98:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31D33802A3979B16E83266873E3E843CFA44989A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/1/323830343a336463303a643030303a3a2f33372d3337203d3e20323636353531.roa
Signing time:             Mon 05 Dec 2022 12:24:12 +0000
ROA not before:           Mon 05 Dec 2022 12:19:12 +0000
ROA not after:            Mon 04 Dec 2023 12:24:12 +0000
asID:                     266551
IP address blocks:        2804:3dc0:d000::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b7:03:43:0a:6f:80:e2:05:83:51:c2:03:70:60:e2:ca:13:3e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31D33802A3979B16E83266873E3E843CFA44989A
        Validity
            Not Before: Dec  5 12:19:12 2022 GMT
            Not After : Dec  4 12:24:12 2023 GMT
        Subject: CN=3688AA56E2EA844DE050832BDB62D6D4512F96F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:5a:76:e1:6d:ae:4b:2a:2a:bc:b8:ab:e3:d3:
                    c8:32:2a:da:ea:13:89:81:48:63:a3:48:bb:42:28:
                    89:07:26:7c:06:15:eb:c9:78:9c:42:fa:c2:72:27:
                    37:5f:82:b0:94:72:3d:29:31:bb:2b:fa:b5:c8:a6:
                    a3:73:66:94:fd:74:11:58:ec:8f:01:38:7a:6e:b0:
                    33:b6:ea:c2:d2:7e:4e:b2:55:6d:20:6a:b2:55:16:
                    33:0b:ca:6c:85:c1:10:8f:0b:54:f3:b2:2a:fc:76:
                    bf:34:46:23:62:f9:bd:85:b7:5d:d7:9b:fe:7d:62:
                    fb:2e:7d:7c:86:f5:ca:49:4f:53:9a:37:a3:50:30:
                    d7:ca:76:19:2f:0a:1c:20:77:42:72:4f:83:7d:2d:
                    9c:88:e5:78:02:b5:8d:c3:49:4f:fe:a2:3a:4e:ce:
                    cd:4e:13:72:19:62:15:00:cb:0f:77:ac:5c:0d:2a:
                    d4:34:cb:fa:a3:d8:fd:49:79:d2:a0:68:18:62:36:
                    d7:7b:00:cc:9b:49:37:dd:e4:f9:20:34:b8:57:ef:
                    74:d7:f7:d0:d4:85:7b:be:85:3d:3d:3e:21:73:c0:
                    ab:ef:26:81:67:a1:e8:94:83:5c:34:a7:09:01:9a:
                    62:ef:d4:72:ec:37:c0:9c:b0:bd:17:53:f5:c2:79:
                    59:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:88:AA:56:E2:EA:84:4D:E0:50:83:2B:DB:62:D6:D4:51:2F:96:F2
            X509v3 Authority Key Identifier:
                keyid:31:D3:38:02:A3:97:9B:16:E8:32:66:87:3E:3E:84:3C:FA:44:98:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/1/31D33802A3979B16E83266873E3E843CFA44989A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31D33802A3979B16E83266873E3E843CFA44989A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/1/323830343a336463303a643030303a3a2f33372d3337203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:d000::/37

    Signature Algorithm: sha256WithRSAEncryption
         0c:fa:65:48:08:f8:69:f8:5b:74:99:e2:fa:43:c2:52:cb:fb:
         88:eb:85:90:aa:3f:11:6a:26:d1:d2:a6:d4:c2:b8:97:f5:14:
         f8:b4:66:4d:03:a9:2a:11:97:4b:78:4e:e8:97:61:9e:73:83:
         02:17:3d:bc:2c:f5:0e:47:4b:6d:c2:39:98:96:12:88:5f:d3:
         25:f7:00:b3:ed:f7:c8:2e:69:5f:52:63:2e:01:e1:93:f8:36:
         c3:bc:d1:bf:95:0a:32:d4:08:d6:70:64:3d:ff:a7:de:3e:a7:
         54:ab:a9:56:72:4e:09:54:71:14:2b:1c:96:a9:52:cc:00:a7:
         ff:98:71:3a:63:0c:4e:50:9a:38:c3:dd:5e:04:0b:3a:1e:cf:
         5f:d8:ec:b4:3d:ac:8f:20:3a:55:b5:6a:ee:24:ae:6a:6b:c4:
         17:10:5e:c5:ae:26:89:21:d3:73:45:78:85:a4:e0:cd:e8:16:
         55:1e:f9:01:c6:ce:61:4d:bf:58:0e:73:3c:5d:ff:08:84:71:
         eb:1c:bc:2c:76:95:b0:8d:79:2a:fc:0a:31:c8:e5:9a:9d:7e:
         de:94:72:22:c2:2a:fd:52:6d:1b:94:8d:9a:9f:09:44:60:2e:
         4f:77:5f:f9:89:18:0e:61:75:df:7b:e5:3a:4f:12:2b:f1:c4:
         82:ec:49:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org