Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/323830343a356362343a3a2f33322d3438203d3e20323638393235.roa
File:                     323830343a356362343a3a2f33322d3438203d3e20323638393235.roa (raw, json)
Hash identifier:          /xbGQx/BcWTpyLXuwm0tqL3V8LXMfPQ9zWe1H4UwphA=
Subject key identifier:   7F:59:2D:D4:64:70:1B:DA:E7:13:37:C8:75:83:AA:28:7D:A1:EA:52
Certificate issuer:       /CN=AF84072BD8A0EA33CE6C51665EE97B32664F9CA6
Certificate serial:       7D8A1B9BDD919F25FAC3EC214274F606A47CBAA2
Authority key identifier: AF:84:07:2B:D8:A0:EA:33:CE:6C:51:66:5E:E9:7B:32:66:4F:9C:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF84072BD8A0EA33CE6C51665EE97B32664F9CA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/323830343a356362343a3a2f33322d3438203d3e20323638393235.roa
Signing time:             Sun 07 Aug 2022 20:00:00 +0000
ROA not before:           Sun 07 Aug 2022 19:55:00 +0000
ROA not after:            Sun 06 Aug 2023 20:00:00 +0000
asID:                     268925
IP address blocks:        2804:5cb4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8a:1b:9b:dd:91:9f:25:fa:c3:ec:21:42:74:f6:06:a4:7c:ba:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF84072BD8A0EA33CE6C51665EE97B32664F9CA6
        Validity
            Not Before: Aug  7 19:55:00 2022 GMT
            Not After : Aug  6 20:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:a4:c6:36:ba:54:aa:a4:36:dd:80:b0:a6:
                    e7:1c:59:bb:5f:96:50:da:1d:75:8c:6d:b7:88:9a:
                    d6:30:b2:8f:55:f6:34:23:f5:ba:c1:7b:b8:ea:89:
                    8d:61:d0:a5:48:83:33:7f:dd:97:9c:4c:64:69:c9:
                    1b:52:35:65:81:9f:19:cd:94:e9:d2:76:ea:78:5f:
                    dd:fd:6d:94:78:66:09:31:d3:a3:12:2e:7d:15:04:
                    30:aa:d7:f1:3c:07:48:7a:3d:3a:d7:13:87:46:6c:
                    2f:8e:1d:2b:8f:dd:91:77:13:ff:58:bb:ea:b5:00:
                    74:22:6e:b9:a8:1e:25:57:44:6e:23:e8:23:55:ad:
                    da:e1:c2:85:f9:25:c2:60:cd:d6:b5:e9:1b:7b:4d:
                    5d:d9:53:ab:c1:e4:9c:4d:87:e8:14:67:75:13:a3:
                    6d:be:69:8d:5c:22:74:36:fe:94:39:43:e2:84:d8:
                    b8:51:91:88:fd:e8:a8:82:c9:06:de:20:7d:6e:d8:
                    ff:96:77:31:4a:7d:b7:1d:b5:4b:0d:3b:55:97:53:
                    f0:92:47:f5:0b:dc:42:b5:d2:e7:ae:7f:39:99:ae:
                    0e:7f:01:9c:c4:81:87:95:04:b7:59:d5:ee:73:d8:
                    53:0c:ea:b7:1d:8f:fc:bc:57:82:ca:72:ae:95:14:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:59:2D:D4:64:70:1B:DA:E7:13:37:C8:75:83:AA:28:7D:A1:EA:52
            X509v3 Authority Key Identifier:
                keyid:AF:84:07:2B:D8:A0:EA:33:CE:6C:51:66:5E:E9:7B:32:66:4F:9C:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AF84072BD8A0EA33CE6C51665EE97B32664F9CA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF84072BD8A0EA33CE6C51665EE97B32664F9CA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/323830343a356362343a3a2f33322d3438203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:60:30:00:c5:46:00:3a:7f:5b:7c:91:67:c7:c3:37:21:bd:
         7a:ad:00:12:4c:16:92:2d:e0:68:b2:47:11:3b:31:62:3a:af:
         07:6f:6f:65:16:35:d1:fe:93:de:44:14:0d:ea:c1:4c:fc:d6:
         66:19:1f:86:f8:2a:7a:c7:30:e2:9c:dd:9f:b8:be:df:fc:7c:
         7a:67:f5:70:f0:3c:d9:0b:21:cf:fc:41:6f:c6:10:dd:c6:a6:
         2c:73:3d:e6:3c:4b:5c:ca:8b:b6:89:90:6e:84:f8:c1:da:8f:
         cd:b8:5a:cf:41:fe:f6:1e:11:d8:f4:b9:e0:19:a9:6a:da:46:
         3c:2a:38:05:f6:ee:68:4e:08:98:42:cd:a9:b0:8a:97:58:02:
         47:35:e8:79:80:26:84:88:0e:e7:fb:e7:ea:32:1b:d4:9d:7d:
         51:a3:78:fe:08:e3:8e:5c:cf:4e:8d:97:fa:c9:5c:72:5b:da:
         d4:5d:77:7e:8c:69:b2:99:a5:76:40:c1:39:04:31:57:28:2b:
         1d:06:4e:21:68:67:36:5a:40:9d:85:72:33:f9:02:3f:38:03:
         8e:91:b9:0f:c6:36:09:17:b3:00:61:1a:75:d3:64:9e:30:f8:
         a4:63:23:34:41:a1:46:be:7a:d5:7f:05:a1:b0:40:37:2c:ff:
         7c:2a:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org