Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/323830343a316465633a3a2f33322d3332203d3e20323634343032.roa
File:                     323830343a316465633a3a2f33322d3332203d3e20323634343032.roa (raw, json)
Hash identifier:          iNkbAtq8WGT7uO6yBphQDFeR2ASaLpNI+tKk2MGnT/g=
Subject key identifier:   C2:67:3E:6E:1F:CB:84:5E:F8:FD:13:51:17:F5:64:A3:37:78:AE:D1
Certificate issuer:       /CN=32B33E97AD56840DAA72E96945DEB5B162A08280
Certificate serial:       4698F7E2FC00D43066EBE5231C575B8950956C45
Authority key identifier: 32:B3:3E:97:AD:56:84:0D:AA:72:E9:69:45:DE:B5:B1:62:A0:82:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32B33E97AD56840DAA72E96945DEB5B162A08280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/323830343a316465633a3a2f33322d3332203d3e20323634343032.roa
Signing time:             Fri 29 Apr 2022 12:57:05 +0000
ROA not before:           Fri 29 Apr 2022 12:52:05 +0000
ROA not after:            Fri 28 Apr 2023 12:57:05 +0000
asID:                     264402
IP address blocks:        2804:1dec::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:98:f7:e2:fc:00:d4:30:66:eb:e5:23:1c:57:5b:89:50:95:6c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32B33E97AD56840DAA72E96945DEB5B162A08280
        Validity
            Not Before: Apr 29 12:52:05 2022 GMT
            Not After : Apr 28 12:57:05 2023 GMT
        Subject: CN=C2673E6E1FCB845EF8FD135117F564A33778AED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:ab:39:ab:56:2c:28:f8:61:9b:42:3e:da:
                    3f:d4:4e:29:72:b3:bf:58:94:34:b1:57:cd:f3:f1:
                    e7:5d:eb:8f:34:e2:f1:9e:e8:d5:0d:e3:9f:0f:39:
                    a5:8e:47:dc:6e:73:7f:fb:d2:8b:72:79:1e:a0:7d:
                    09:a1:4d:72:29:f4:86:59:2b:cc:a0:53:1c:75:fa:
                    cf:5f:e6:8b:36:96:0d:ef:b3:8b:d6:88:e9:39:05:
                    ca:c6:1e:e8:a1:ee:b3:43:df:e2:d3:b6:6c:b9:57:
                    47:9d:92:fe:e4:64:b6:8d:1c:d3:f1:39:e7:83:55:
                    13:7a:c3:6b:19:14:43:e0:eb:2a:6a:6a:4d:4b:9f:
                    54:51:5d:82:14:15:de:e3:3a:d5:bc:bd:09:40:58:
                    bd:34:20:b0:e6:76:32:6c:6e:ea:27:5c:d3:6c:51:
                    61:33:82:a8:19:fa:1a:cf:2c:7f:05:a1:f0:a7:6a:
                    df:13:a8:09:16:2b:af:01:c0:36:31:bc:97:9b:32:
                    96:6b:24:5f:cb:c7:ed:5f:b6:83:cd:eb:69:91:dd:
                    9a:dd:e4:5c:70:f3:29:0a:3e:e1:df:6a:b7:72:fc:
                    a3:fa:73:09:85:cf:29:85:bb:69:8b:15:1a:fb:5a:
                    e4:56:d2:ff:f6:f7:08:1d:c8:10:49:e8:53:1a:e7:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:67:3E:6E:1F:CB:84:5E:F8:FD:13:51:17:F5:64:A3:37:78:AE:D1
            X509v3 Authority Key Identifier:
                keyid:32:B3:3E:97:AD:56:84:0D:AA:72:E9:69:45:DE:B5:B1:62:A0:82:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/32B33E97AD56840DAA72E96945DEB5B162A08280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32B33E97AD56840DAA72E96945DEB5B162A08280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/323830343a316465633a3a2f33322d3332203d3e20323634343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dec::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:2e:53:ae:6d:11:16:e1:d8:bb:db:01:d3:67:97:44:bf:7d:
         a5:7d:14:9b:88:47:3f:d7:f4:62:ca:27:46:69:97:97:92:fa:
         f5:bf:a7:fe:3c:5d:39:06:a5:40:d1:68:58:96:5d:dc:cf:35:
         59:81:c7:05:23:13:7c:53:9e:f6:2a:34:b5:39:ff:71:54:41:
         b3:e8:b2:60:42:4f:fe:f6:ae:fe:13:1f:46:a0:24:77:05:b2:
         21:ad:65:a0:cd:4b:35:81:f0:32:cd:4c:fc:ee:75:4e:95:5d:
         67:d8:78:34:48:24:b8:3d:88:3d:20:90:14:09:48:c1:02:76:
         26:49:a6:9a:12:10:4b:5d:84:a6:d4:d3:cc:fa:31:96:80:07:
         c7:60:07:6e:db:19:5f:83:2f:4d:f4:dc:86:68:1d:e0:de:c9:
         76:b7:a4:ef:aa:b2:3b:24:8d:3f:b6:3d:51:ff:31:a9:f3:29:
         e8:96:fa:4a:9a:31:ab:a9:95:d6:31:2e:b7:33:8a:5d:4c:2e:
         f7:6b:25:b0:71:84:32:07:b5:a4:5b:01:64:f2:5f:d7:ad:a1:
         03:00:ab:e6:4f:56:a5:e7:3b:f0:52:a0:c2:c5:f2:73:db:9d:
         9d:65:7d:a7:4d:a4:79:ba:a6:88:fd:53:52:0f:43:49:a5:a2:
         8e:22:f1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org