Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/0/323830343a386538383a3a2f33322d3438203d3e20323733343332.roa
File:                     323830343a386538383a3a2f33322d3438203d3e20323733343332.roa (raw, json)
Hash identifier:          d+BeMQvXsnoq8+LMCKANURaF1vh34lbShZ8L0jvdInQ=
Subject key identifier:   51:6D:E7:4D:89:96:69:70:4D:81:7E:8F:1C:29:70:C5:06:EF:FA:B1
Certificate issuer:       /CN=32922A104B4CEB7FF3EA739E5F3036AFA1C72670
Certificate serial:       5518EEA2288A448CB1AF34948F5FE4A3ED123603
Authority key identifier: 32:92:2A:10:4B:4C:EB:7F:F3:EA:73:9E:5F:30:36:AF:A1:C7:26:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32922A104B4CEB7FF3EA739E5F3036AFA1C72670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/0/323830343a386538383a3a2f33322d3438203d3e20323733343332.roa
Signing time:             Thu 22 Feb 2024 18:36:03 +0000
ROA not before:           Thu 22 Feb 2024 18:31:03 +0000
ROA not after:            Thu 20 Feb 2025 18:36:03 +0000
asID:                     273432
IP address blocks:        2804:8e88::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:18:ee:a2:28:8a:44:8c:b1:af:34:94:8f:5f:e4:a3:ed:12:36:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32922A104B4CEB7FF3EA739E5F3036AFA1C72670
        Validity
            Not Before: Feb 22 18:31:03 2024 GMT
            Not After : Feb 20 18:36:03 2025 GMT
        Subject: CN=516DE74D899669704D817E8F1C2970C506EFFAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:46:4f:fd:59:ff:73:da:ee:59:7a:e5:9b:1e:
                    1a:91:c6:b7:ab:be:b5:6c:ab:b3:4f:d0:ec:b4:3a:
                    de:6d:2c:ed:44:a8:e3:75:9c:92:b0:07:8e:4f:d8:
                    62:e6:66:f8:99:46:49:c1:5f:e7:92:c0:e7:ef:b5:
                    b5:f3:51:0e:32:0c:dc:6b:c6:d7:e6:a8:1b:9a:c4:
                    c7:f4:79:5b:53:4b:59:ca:37:df:f0:ec:42:3c:c6:
                    1d:b6:8a:7d:e4:f9:4c:6f:25:89:91:a4:e9:8e:d0:
                    f8:17:ce:ae:1a:a4:a4:a9:9b:94:61:71:e9:a4:40:
                    7c:b2:1f:4e:42:73:93:16:61:29:82:1d:d8:fa:c8:
                    7d:3a:b7:96:d8:f3:57:10:58:5d:4a:2f:ad:91:1c:
                    2e:81:4c:8a:4b:79:86:e2:41:80:6f:7f:78:7c:28:
                    aa:c1:87:a7:d7:11:f9:62:a5:4b:70:bf:bf:95:bb:
                    04:7a:a5:44:12:7e:30:93:fb:b1:3f:3e:9e:d6:aa:
                    22:a4:b7:5a:e3:20:bb:56:ad:76:37:3e:a7:7f:a9:
                    69:3c:ec:20:11:3b:3b:61:74:8b:31:fc:56:8f:96:
                    49:94:06:6f:99:40:3e:77:7c:51:c3:4d:54:9b:c7:
                    cc:7f:ed:4f:f5:78:17:8f:64:45:1d:1d:6f:37:ba:
                    e2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6D:E7:4D:89:96:69:70:4D:81:7E:8F:1C:29:70:C5:06:EF:FA:B1
            X509v3 Authority Key Identifier:
                keyid:32:92:2A:10:4B:4C:EB:7F:F3:EA:73:9E:5F:30:36:AF:A1:C7:26:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/0/32922A104B4CEB7FF3EA739E5F3036AFA1C72670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32922A104B4CEB7FF3EA739E5F3036AFA1C72670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/0/323830343a386538383a3a2f33322d3438203d3e20323733343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e88::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:09:b7:e6:cf:93:c3:9d:d0:7f:26:1c:3a:ea:04:bc:64:05:
         e4:1f:de:35:b0:3e:66:71:a4:c1:3f:35:73:c4:bf:2b:e4:b7:
         14:76:41:ba:37:4f:fa:73:2c:92:f4:86:d2:a2:8c:29:8d:81:
         35:b6:81:e7:1c:92:8b:cd:a2:f5:88:0d:4e:be:76:d5:d0:51:
         b4:6c:d0:5b:c7:91:6b:3c:00:a6:67:46:87:4e:43:9b:ec:13:
         d5:11:a9:7d:29:66:94:61:98:47:af:c1:4a:28:99:c5:08:aa:
         32:e1:ed:b5:43:ed:9e:25:84:c8:37:6d:9c:b6:18:99:ae:72:
         33:6b:f3:8b:b3:ca:37:4e:aa:51:38:b9:1a:10:e9:c9:d4:8e:
         3d:7f:19:72:8b:b4:17:2d:0c:0c:4d:63:14:51:10:52:e2:9c:
         af:1c:59:ae:73:f9:36:dc:8a:fd:a4:36:92:c3:83:e4:d0:58:
         02:35:bd:ca:8c:78:d1:aa:53:9c:86:72:06:c1:e6:01:40:b3:
         31:10:f4:25:7c:5a:c4:da:57:22:6d:3c:ba:de:0a:6a:14:bb:
         3e:f4:8d:9b:58:0b:bd:53:0c:ad:17:92:30:ac:23:8b:bc:c0:
         82:f3:ff:76:c2:75:fb:7c:b8:57:b0:91:db:2f:a9:6e:ec:a1:
         a4:c9:a3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org