Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/323830343a376336303a313030303a3a2f33362d3336203d3e20323731343932.roa
File:                     323830343a376336303a313030303a3a2f33362d3336203d3e20323731343932.roa (raw, json)
Hash identifier:          rDBxcWZtBmDMfIIqlnBFZi5PT0K+rDOXguIv6dzrV/Q=
Subject key identifier:   71:AB:5A:29:80:C6:10:14:A3:52:B1:C3:F0:C0:DE:B0:C8:CB:A8:CB
Certificate issuer:       /CN=74728BFF733B07D93A3091016BF14390A93DA3D0
Certificate serial:       107411D5694C93F056443F077BD1DD68F89E3FBE
Authority key identifier: 74:72:8B:FF:73:3B:07:D9:3A:30:91:01:6B:F1:43:90:A9:3D:A3:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74728BFF733B07D93A3091016BF14390A93DA3D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/323830343a376336303a313030303a3a2f33362d3336203d3e20323731343932.roa
Signing time:             Fri 20 May 2022 15:12:05 +0000
ROA not before:           Fri 20 May 2022 15:07:05 +0000
ROA not after:            Fri 19 May 2023 15:12:05 +0000
asID:                     271492
IP address blocks:        2804:7c60:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:74:11:d5:69:4c:93:f0:56:44:3f:07:7b:d1:dd:68:f8:9e:3f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74728BFF733B07D93A3091016BF14390A93DA3D0
        Validity
            Not Before: May 20 15:07:05 2022 GMT
            Not After : May 19 15:12:05 2023 GMT
        Subject: CN=71AB5A2980C61014A352B1C3F0C0DEB0C8CBA8CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:ff:bf:57:d1:c2:38:c2:c7:22:5c:64:f2:
                    b1:55:b9:90:fb:ae:0f:1f:ca:bf:72:38:9c:80:3c:
                    67:6c:b5:9f:34:03:51:d8:4b:7b:58:f4:6c:ac:0b:
                    29:80:cf:38:d3:5c:21:af:e6:6c:d4:0d:e3:62:72:
                    b2:f3:4d:7a:07:d3:99:7a:05:1f:b0:d9:84:cb:db:
                    62:03:39:16:36:63:8d:67:ef:08:40:ad:09:c5:e6:
                    55:c5:eb:63:77:dd:58:d4:ca:02:c3:84:da:63:e8:
                    9e:49:c5:1e:ad:bd:72:1e:40:69:26:8e:68:69:95:
                    91:3c:3b:32:16:17:6a:f7:48:3e:c6:96:33:0c:48:
                    d7:9c:34:ea:47:c2:26:98:9c:28:3b:19:36:00:29:
                    1a:4b:07:32:48:a4:ba:33:ff:b2:77:ff:78:a9:5e:
                    66:7d:d9:c9:fb:44:82:11:bf:df:b5:96:86:03:2c:
                    be:75:d8:b0:16:6e:58:45:23:4c:f5:31:3c:07:47:
                    7e:70:7f:18:51:b6:61:bd:9a:f8:c3:5a:05:06:89:
                    99:b7:7d:b0:0e:9a:13:30:a8:d5:13:38:71:6b:dc:
                    c3:d8:1f:60:5d:1f:f6:93:e8:33:72:d8:7b:91:bf:
                    d0:4a:4e:aa:13:90:e4:c8:4c:9b:c3:2b:55:e7:2b:
                    09:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AB:5A:29:80:C6:10:14:A3:52:B1:C3:F0:C0:DE:B0:C8:CB:A8:CB
            X509v3 Authority Key Identifier:
                keyid:74:72:8B:FF:73:3B:07:D9:3A:30:91:01:6B:F1:43:90:A9:3D:A3:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/74728BFF733B07D93A3091016BF14390A93DA3D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74728BFF733B07D93A3091016BF14390A93DA3D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/323830343a376336303a313030303a3a2f33362d3336203d3e20323731343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c60:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         14:df:72:0b:fb:ff:fb:aa:40:87:f1:b1:9f:74:75:5c:15:bc:
         c4:14:0d:30:ce:01:4c:02:d8:06:ac:ec:7f:0b:49:6c:58:6f:
         26:8a:c4:a9:24:6e:43:0f:52:81:4a:9c:64:90:fa:20:59:22:
         0f:d4:dc:fb:08:6a:c3:42:fa:07:14:cf:09:6a:34:e4:1f:bc:
         64:7c:0a:e8:cd:b2:4b:9e:46:c1:a2:12:cd:33:da:94:0b:60:
         5a:e1:4e:18:0a:1c:81:a2:84:a8:b1:33:86:bd:5d:b3:be:26:
         18:1e:25:ee:3a:36:14:13:3c:8c:64:a2:25:76:1e:9c:90:18:
         50:94:57:bc:fc:a7:15:c8:3f:c1:38:8b:44:bb:41:e8:93:d5:
         24:3c:e5:c0:d2:28:31:35:fb:04:cf:d8:09:2a:cf:08:59:88:
         30:29:a7:04:29:cc:95:16:fc:db:08:ac:25:2b:88:f5:12:c3:
         d3:12:eb:c3:56:25:c8:a6:98:72:2e:4b:62:fa:8d:65:82:53:
         e7:45:d0:18:67:a2:06:dd:14:bb:fd:1a:8d:ef:d8:6c:ab:a3:
         8b:e3:b1:86:ae:4b:2b:65:a4:ef:6c:47:22:76:65:2a:90:f9:
         19:57:4d:ea:3d:92:4c:bf:70:0e:2c:64:a1:c5:a1:7a:a2:23:
         f1:04:cf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org