Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/323830343a366566303a3a2f33322d3334203d3e20323730363238.roa
File:                     323830343a366566303a3a2f33322d3334203d3e20323730363238.roa (raw, json)
Hash identifier:          XL4tLIfC3cbta9gvte7znd4UsSIL/+ysUcGwVnACwC4=
Subject key identifier:   F0:DF:78:02:2A:08:DE:10:D0:2A:86:DE:D3:5F:3C:16:C3:68:D8:32
Certificate issuer:       /CN=A5073EB1E427A3F5329F0966AD6155C0B7F34BF8
Certificate serial:       1668B51B09776D6131AC81F51FB82C15D34BCFD3
Authority key identifier: A5:07:3E:B1:E4:27:A3:F5:32:9F:09:66:AD:61:55:C0:B7:F3:4B:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5073EB1E427A3F5329F0966AD6155C0B7F34BF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/323830343a366566303a3a2f33322d3334203d3e20323730363238.roa
Signing time:             Sat 27 Aug 2022 13:00:00 +0000
ROA not before:           Sat 27 Aug 2022 12:55:00 +0000
ROA not after:            Sun 27 Aug 2023 13:00:00 +0000
asID:                     270628
IP address blocks:        2804:6ef0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:68:b5:1b:09:77:6d:61:31:ac:81:f5:1f:b8:2c:15:d3:4b:cf:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5073EB1E427A3F5329F0966AD6155C0B7F34BF8
        Validity
            Not Before: Aug 27 12:55:00 2022 GMT
            Not After : Aug 27 13:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:df:06:af:94:10:a8:0f:00:59:ec:6e:63:51:
                    fd:07:10:34:d5:37:b1:1d:3e:5a:3e:90:4c:97:74:
                    13:be:df:e6:78:53:2e:1b:18:98:fd:00:5a:ad:33:
                    a9:73:42:3c:a1:eb:3c:54:fa:e3:bd:0a:0d:1a:80:
                    23:07:29:16:4f:f0:dd:a6:ac:32:02:db:24:a4:fa:
                    18:ab:e3:b2:8c:5f:46:5a:8d:28:aa:7e:3b:99:3c:
                    8e:c2:20:63:49:d1:43:27:53:c6:19:55:de:07:1f:
                    c5:1a:0f:94:79:2e:06:69:b5:a6:f1:44:e2:39:4d:
                    95:1b:f7:c2:9d:11:20:3c:35:64:8a:83:0d:9e:93:
                    6f:23:6d:e5:80:23:10:c2:2e:d5:c6:4d:2b:07:32:
                    43:17:90:4a:5c:33:6a:6e:28:e9:99:94:50:45:e7:
                    ac:d0:aa:f1:aa:6e:7c:5f:80:22:0f:9e:97:86:46:
                    37:aa:a6:2c:dd:af:5e:9f:07:de:b2:f6:33:23:b6:
                    f5:5d:9f:5b:a8:12:94:02:12:b4:5b:58:1d:05:2d:
                    03:37:93:4a:43:97:d3:8f:04:96:df:2e:4a:c6:66:
                    3d:e0:12:b3:b1:a2:80:05:c7:d6:5d:3a:bd:ad:48:
                    cf:ed:5d:ab:8d:fe:1b:d4:b4:6f:a2:0c:33:16:50:
                    b5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DF:78:02:2A:08:DE:10:D0:2A:86:DE:D3:5F:3C:16:C3:68:D8:32
            X509v3 Authority Key Identifier:
                keyid:A5:07:3E:B1:E4:27:A3:F5:32:9F:09:66:AD:61:55:C0:B7:F3:4B:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/A5073EB1E427A3F5329F0966AD6155C0B7F34BF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5073EB1E427A3F5329F0966AD6155C0B7F34BF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/323830343a366566303a3a2f33322d3334203d3e20323730363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:7b:0a:99:af:22:48:62:c1:17:eb:20:23:86:ea:16:40:d5:
         97:fa:39:ff:b2:a0:cf:ed:cd:14:3f:8c:49:63:80:73:e8:1f:
         1a:3e:92:9b:7a:ec:29:4a:3e:31:60:f3:05:4c:de:18:d4:e0:
         71:5b:a4:81:c3:9f:92:cc:1e:42:cf:79:a4:20:fd:2c:17:62:
         98:d4:99:42:92:a5:51:0f:07:d2:92:78:d0:25:3a:12:e7:6f:
         8c:6d:92:bd:93:d5:71:f3:6d:b5:03:14:f2:71:6e:2a:f0:a0:
         7d:45:45:30:28:77:7a:21:b3:e3:5f:c6:04:3b:94:cb:5d:b7:
         81:61:59:dd:63:fb:7b:e3:93:5e:a8:12:06:e3:c3:12:30:f9:
         cf:46:7e:58:6c:b6:fe:0c:e0:f8:60:3e:3a:13:44:4b:15:75:
         5a:9c:a6:6f:a4:21:78:ae:ab:19:61:bb:42:ed:93:fb:57:0b:
         03:1f:eb:90:19:80:30:7b:34:e2:89:aa:d4:c3:0f:f2:1e:f2:
         a7:8d:d0:7b:29:6f:3d:91:46:68:39:74:5e:8e:a7:a8:54:da:
         09:49:30:56:13:b4:3b:96:48:57:a0:10:a1:a6:d9:34:ee:07:
         f9:d1:97:2a:3d:42:6b:4c:8a:b5:c9:b5:48:cd:ce:21:80:f6:
         78:30:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org