Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/323830343a316266633a3a2f33322d3334203d3e203631363332.roa
File:                     323830343a316266633a3a2f33322d3334203d3e203631363332.roa (raw, json)
Hash identifier:          0ucp99FoybGsIMzVir6wW5Iz13pdMxOEsszLJqXLXkI=
Subject key identifier:   07:1F:0E:DE:59:F6:07:3A:FA:AE:50:D0:2E:D1:81:20:56:9C:07:65
Certificate issuer:       /CN=A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4
Certificate serial:       45DD156BF02B1C0D4741ECA7B71E733854435CD1
Authority key identifier: A7:A9:4F:13:9E:AB:DF:3D:B9:FC:5F:1C:56:6F:4C:7A:64:D5:87:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/323830343a316266633a3a2f33322d3334203d3e203631363332.roa
Signing time:             Mon 21 Feb 2022 14:20:00 +0000
ROA not before:           Mon 21 Feb 2022 14:15:00 +0000
ROA not after:            Mon 20 Feb 2023 14:20:00 +0000
asID:                     61632
IP address blocks:        2804:1bfc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:dd:15:6b:f0:2b:1c:0d:47:41:ec:a7:b7:1e:73:38:54:43:5c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4
        Validity
            Not Before: Feb 21 14:15:00 2022 GMT
            Not After : Feb 20 14:20:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:5f:ac:45:32:58:47:0d:69:7a:f6:ad:0f:
                    60:9e:7c:ff:7c:e6:8b:79:96:e8:29:8c:a6:2e:f1:
                    af:21:c3:de:b9:aa:27:ab:ff:6c:f5:f0:fe:01:8e:
                    07:59:0c:90:14:34:1b:46:5f:4f:5e:32:9a:b7:1c:
                    d6:41:a9:f9:72:3a:67:9e:aa:66:82:e1:ca:31:dd:
                    70:13:3c:2c:ad:c0:c5:74:a1:61:d2:46:3f:54:1a:
                    e5:47:8b:5a:d5:33:f3:1e:c0:4b:86:2d:07:f4:98:
                    f4:65:99:11:fc:3a:f2:f0:9a:67:15:82:87:90:67:
                    0a:24:d2:a4:59:20:ff:e3:6e:0f:29:d7:43:2d:b4:
                    dc:4b:df:10:4c:6b:e6:03:f8:8e:62:b8:31:2b:d6:
                    e1:b4:e9:eb:b5:26:67:aa:ec:d4:8b:e5:0d:38:35:
                    fc:0a:ef:92:74:74:c1:70:80:59:a8:d1:76:17:cc:
                    f1:69:50:61:0c:18:68:00:fa:38:7e:95:d3:1a:3f:
                    21:d4:23:b1:24:59:aa:16:bc:fd:7d:d6:7a:a9:ad:
                    94:bf:b4:9b:a4:67:02:19:d7:cf:86:bc:0e:c8:27:
                    11:8a:5a:de:2c:da:c2:cc:b7:c9:a4:c4:41:f2:3a:
                    8d:75:d0:6e:19:83:df:37:13:0c:bf:96:2b:53:79:
                    f9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1F:0E:DE:59:F6:07:3A:FA:AE:50:D0:2E:D1:81:20:56:9C:07:65
            X509v3 Authority Key Identifier:
                keyid:A7:A9:4F:13:9E:AB:DF:3D:B9:FC:5F:1C:56:6F:4C:7A:64:D5:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/323830343a316266633a3a2f33322d3334203d3e203631363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:0b:bb:48:02:fd:18:69:11:71:72:53:47:35:93:32:7a:68:
         59:b7:09:18:22:78:3b:d2:bd:29:9f:4e:05:e1:74:63:e8:35:
         d2:f7:fb:d8:f9:13:b1:8c:2e:44:d9:7e:f7:f2:ad:d0:97:eb:
         ef:46:f1:2d:26:00:b0:9d:9b:93:90:8b:96:26:69:d6:d8:a2:
         4f:0e:5e:60:a0:69:03:cd:de:b6:b4:71:a3:fe:b4:94:b9:71:
         06:be:a2:dd:c2:f0:53:7f:c9:b4:af:50:36:84:32:df:41:ae:
         9a:4c:41:0f:dc:f1:6b:77:df:b1:90:e3:5a:b5:67:ba:1d:03:
         d4:53:dd:72:53:ff:93:d7:7c:cd:0b:f7:c4:ae:07:28:85:92:
         ab:bd:23:81:0c:df:23:76:19:7c:50:d2:a1:c4:b7:29:9f:b1:
         48:30:25:84:78:1e:44:62:0c:94:14:bd:04:63:65:cb:b0:f6:
         c1:60:c7:33:fb:20:e1:05:89:b4:bd:38:62:1d:b5:8c:41:1f:
         46:bd:7a:5a:f2:78:62:3f:b4:62:cd:9a:d9:c4:c2:47:7c:af:
         57:9b:86:43:8d:ee:2d:df:72:3e:04:85:4e:52:15:f4:cd:14:
         bc:91:41:2c:e8:d6:f5:2e:9c:1e:6f:26:a6:84:5c:7f:96:56:
         d6:cc:a7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org