Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/323030313a313261303a3a2f33322d3438203d3e203238323932.roa
File:                     323030313a313261303a3a2f33322d3438203d3e203238323932.roa (raw, json)
Hash identifier:          nbhSCgnBkMUQSs7Lt/fp/0Ac9IQ58XMfoxOma3l49cY=
Subject key identifier:   9A:7F:56:97:E5:29:5E:B0:FE:AD:69:BA:F2:24:E0:CA:09:04:31:B4
Certificate issuer:       /CN=18351F1F584DF1964127BF7A96A3BBD25F1990EC
Certificate serial:       04FCA665782E415FF3E01671C4F84F5CB894928B
Authority key identifier: 18:35:1F:1F:58:4D:F1:96:41:27:BF:7A:96:A3:BB:D2:5F:19:90:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18351F1F584DF1964127BF7A96A3BBD25F1990EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/323030313a313261303a3a2f33322d3438203d3e203238323932.roa
Signing time:             Wed 25 May 2022 19:00:00 +0000
ROA not before:           Wed 25 May 2022 18:55:00 +0000
ROA not after:            Thu 25 May 2023 19:00:00 +0000
asID:                     28292
IP address blocks:        2001:12a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fc:a6:65:78:2e:41:5f:f3:e0:16:71:c4:f8:4f:5c:b8:94:92:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18351F1F584DF1964127BF7A96A3BBD25F1990EC
        Validity
            Not Before: May 25 18:55:00 2022 GMT
            Not After : May 25 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:b9:ac:d8:46:37:31:a8:bc:1e:b6:04:1d:
                    70:49:d7:98:e7:00:0e:1c:97:d7:9f:b7:47:e5:81:
                    52:30:43:dd:d0:0a:fc:ea:81:e2:23:3c:44:f9:bc:
                    8d:a7:b1:25:76:50:2b:09:f9:21:37:f4:ac:a9:63:
                    d5:57:7c:37:0d:eb:08:48:4b:4d:c6:8a:3b:60:4e:
                    dc:3b:7a:a6:ab:a4:40:96:2b:bc:b8:aa:70:1f:bb:
                    f5:95:e9:d1:a1:e7:58:df:6e:c9:13:a2:ff:2f:1f:
                    64:4c:55:93:52:3a:3b:7e:93:fe:cb:1d:97:71:be:
                    81:56:b7:93:bd:30:b9:fc:65:0f:d9:91:0a:74:67:
                    c8:5e:cc:1b:30:36:bc:5d:eb:7a:7c:82:3d:15:5c:
                    97:b6:78:6f:2c:78:6b:4b:c2:8b:a9:9e:cc:88:a5:
                    0d:6e:00:84:ee:ef:3c:9f:71:bb:c4:b7:f6:01:f6:
                    7e:d8:61:9a:6e:d4:65:18:1a:cb:03:e0:f5:35:f8:
                    be:14:b3:87:cf:b8:1d:74:ac:cd:8c:40:9c:51:66:
                    9c:64:6a:87:0e:a8:9e:53:8b:d2:bf:00:b8:d0:f4:
                    59:ac:d6:b5:70:04:39:b2:ea:b0:34:c2:9d:a1:2a:
                    2b:d6:ae:39:c4:d5:09:81:09:66:fd:fa:9f:0c:c0:
                    b9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7F:56:97:E5:29:5E:B0:FE:AD:69:BA:F2:24:E0:CA:09:04:31:B4
            X509v3 Authority Key Identifier:
                keyid:18:35:1F:1F:58:4D:F1:96:41:27:BF:7A:96:A3:BB:D2:5F:19:90:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/18351F1F584DF1964127BF7A96A3BBD25F1990EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18351F1F584DF1964127BF7A96A3BBD25F1990EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/323030313a313261303a3a2f33322d3438203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:81:9f:e0:ba:2c:bd:46:08:2a:dc:52:49:a3:8f:b6:a4:82:
         d5:4b:52:c9:3c:9c:f0:43:01:18:89:33:d9:ec:85:44:cb:43:
         e6:d6:91:2c:83:8d:34:aa:79:2d:e0:4e:e1:bb:19:2d:41:27:
         99:81:0e:57:7f:76:93:e7:be:f2:aa:f2:0a:18:63:1e:9a:04:
         3e:f2:83:42:1d:97:9e:55:cf:74:ea:98:ee:54:70:59:9e:e9:
         ce:c6:ab:08:c7:8e:ff:5e:c9:9e:b8:48:d4:9c:bb:4f:ad:76:
         ca:40:86:26:c7:50:2a:77:f9:24:8f:a3:d4:a3:f0:ed:09:01:
         27:fe:e7:62:fb:be:c6:2f:04:bc:c0:65:38:87:1b:1c:79:5c:
         da:72:1b:ff:12:72:c8:6a:a4:64:7f:25:d7:7b:79:1f:c7:ba:
         c9:c0:bc:c4:60:5c:c9:8d:02:03:61:04:cf:df:3d:68:57:fe:
         ff:82:f7:c9:a2:6e:9a:cb:dc:99:6b:88:ad:16:0c:15:99:c5:
         27:e7:be:76:4a:2c:46:fa:bc:e6:22:64:4a:1d:0b:a6:91:37:
         6a:d9:64:52:fe:02:b9:9f:28:c6:87:b6:c1:c5:4c:d0:f8:9d:
         f9:39:45:2c:b1:f5:ab:8f:bb:99:57:c9:36:ef:28:a5:2a:ed:
         9e:e3:d7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org