Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/323830343a343139383a3a2f33322d3334203d3e20323637343433.roa
File:                     323830343a343139383a3a2f33322d3334203d3e20323637343433.roa (raw, json)
Hash identifier:          SwTgF9TGpx7Yd7JWVFkkolUyp4Nn8H3lcLGq4hFFjxw=
Subject key identifier:   E3:35:13:CA:06:D9:83:25:CF:6D:91:EB:83:EE:9F:E2:E8:74:B8:29
Certificate issuer:       /CN=0D88D1DB0A1B35E6FEA5A3FF313565EA070A82F5
Certificate serial:       320A18E3D90C5EB3B503519B4A64250F84B26D2D
Authority key identifier: 0D:88:D1:DB:0A:1B:35:E6:FE:A5:A3:FF:31:35:65:EA:07:0A:82:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D88D1DB0A1B35E6FEA5A3FF313565EA070A82F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/323830343a343139383a3a2f33322d3334203d3e20323637343433.roa
Signing time:             Tue 04 Jan 2022 02:04:29 +0000
ROA not before:           Tue 04 Jan 2022 01:59:29 +0000
ROA not after:            Tue 03 Jan 2023 02:04:29 +0000
asID:                     267443
IP address blocks:        2804:4198::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0a:18:e3:d9:0c:5e:b3:b5:03:51:9b:4a:64:25:0f:84:b2:6d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D88D1DB0A1B35E6FEA5A3FF313565EA070A82F5
        Validity
            Not Before: Jan  4 01:59:29 2022 GMT
            Not After : Jan  3 02:04:29 2023 GMT
        Subject: CN=E33513CA06D98325CF6D91EB83EE9FE2E874B829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:15:e2:7d:47:de:f4:42:66:92:d8:82:19:
                    c6:b2:29:cb:df:f0:ce:8f:dd:c4:96:8f:1c:8b:62:
                    9a:67:b6:ff:fc:5c:31:5c:ec:b6:90:21:da:de:8f:
                    d8:29:6d:f9:0f:67:d0:a8:d8:34:0f:3e:e6:e2:b0:
                    fd:97:0f:f0:9b:51:e0:47:4a:6b:8e:27:9a:bf:b3:
                    f7:61:3e:ee:09:79:37:8c:a1:c3:e2:38:05:48:10:
                    59:6b:4d:ce:6f:f6:80:fc:d7:17:ee:55:7f:ea:3b:
                    5c:41:0b:c0:e5:ac:53:c1:97:99:d6:f2:e5:bd:ac:
                    31:64:de:f9:eb:62:f8:4c:f9:ea:6a:8b:80:b9:48:
                    20:eb:11:d3:ee:06:4d:16:cf:25:bc:db:f9:6a:6f:
                    8b:48:8b:a2:22:ed:5a:f9:35:28:5f:71:b4:92:9e:
                    b3:e6:64:34:79:90:54:62:ed:b0:a0:78:23:e2:cf:
                    4c:16:71:59:96:86:2a:fc:30:ad:f7:c1:51:bc:fa:
                    bb:b3:30:58:8d:73:49:2c:bd:e3:a5:d4:69:f3:98:
                    6b:88:8e:96:65:6f:e3:d6:26:fb:e5:49:fd:19:9e:
                    74:66:f5:f0:6c:4b:68:f8:0a:39:8d:64:1d:6a:2d:
                    71:2d:57:58:3e:e5:03:34:48:be:b3:18:29:7c:5b:
                    91:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:35:13:CA:06:D9:83:25:CF:6D:91:EB:83:EE:9F:E2:E8:74:B8:29
            X509v3 Authority Key Identifier:
                keyid:0D:88:D1:DB:0A:1B:35:E6:FE:A5:A3:FF:31:35:65:EA:07:0A:82:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/0D88D1DB0A1B35E6FEA5A3FF313565EA070A82F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D88D1DB0A1B35E6FEA5A3FF313565EA070A82F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/323830343a343139383a3a2f33322d3334203d3e20323637343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4198::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:ac:31:72:e7:61:5a:75:b4:ce:4f:f6:25:bf:7a:2a:80:1f:
         71:d3:3d:d2:9b:75:b1:0e:7c:8c:e9:2e:7e:a4:64:23:05:25:
         a6:44:e5:44:cb:9a:50:d1:66:7d:0e:29:4b:66:5c:75:43:57:
         00:6d:b0:2e:77:dd:56:59:1b:56:14:59:4c:82:29:20:aa:c6:
         0e:63:f4:fb:e7:c0:52:54:e7:b4:3d:c6:da:f3:6b:9f:0d:69:
         bf:93:4d:96:9a:0c:d4:81:c3:90:55:e8:51:01:a1:84:ea:86:
         21:00:2d:69:aa:24:27:b3:82:d1:62:71:88:e7:7c:a7:be:3f:
         0d:e4:97:5c:90:3c:ae:09:c8:33:c1:90:10:ae:80:87:bb:74:
         72:ef:df:8d:f5:3d:a6:e3:a2:e9:e7:e8:f2:07:8f:90:59:26:
         ed:8c:bb:f0:8a:6b:17:f3:0e:0a:cb:b6:a0:58:ec:bd:6d:c8:
         82:ea:d4:22:5b:f4:49:77:ee:d1:48:32:31:32:8b:34:94:ca:
         31:f4:7b:42:7b:bc:4b:84:53:d6:43:83:82:14:6c:55:27:21:
         66:62:5b:47:0c:d0:89:34:32:b0:0e:7a:fe:2d:3e:81:24:f0:
         27:20:8f:dc:08:ac:fb:d3:1b:d5:7b:59:a6:a1:d3:a1:bf:f6:
         08:a5:73:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org