Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBqKokTeoUqmdtJvK1kXBjqwexcgPxBhy9PzsdQjT3QL/0/323830343a376336343a383030303a3a2f33332d3333203d3e20323731343933.roa
File:                     323830343a376336343a383030303a3a2f33332d3333203d3e20323731343933.roa (raw, json)
Hash identifier:          IexL5oDe5fLQ+/lo6HVRmETiYhfW1vMsj4rSJWuBZDs=
Subject key identifier:   0B:51:6E:89:CE:EC:3C:82:F7:07:C3:F8:8B:45:1A:BA:F8:6C:FC:32
Certificate issuer:       /CN=402AB61C43024061513081DD235763F7C80713FA
Certificate serial:       21E4D2EB634156365C780ADD2D5E205D6C2FC75C
Authority key identifier: 40:2A:B6:1C:43:02:40:61:51:30:81:DD:23:57:63:F7:C8:07:13:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/402AB61C43024061513081DD235763F7C80713FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBqKokTeoUqmdtJvK1kXBjqwexcgPxBhy9PzsdQjT3QL/0/323830343a376336343a383030303a3a2f33332d3333203d3e20323731343933.roa
Signing time:             Mon 01 Aug 2022 22:31:05 +0000
ROA not before:           Mon 01 Aug 2022 22:26:05 +0000
ROA not after:            Mon 31 Jul 2023 22:31:05 +0000
asID:                     271493
IP address blocks:        2804:7c64:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e4:d2:eb:63:41:56:36:5c:78:0a:dd:2d:5e:20:5d:6c:2f:c7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402AB61C43024061513081DD235763F7C80713FA
        Validity
            Not Before: Aug  1 22:26:05 2022 GMT
            Not After : Jul 31 22:31:05 2023 GMT
        Subject: CN=0B516E89CEEC3C82F707C3F88B451ABAF86CFC32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:a9:08:50:67:29:32:a4:33:20:77:d6:5b:
                    ea:2e:ae:64:7c:4f:c4:9b:a2:d0:8a:4f:38:54:29:
                    ac:17:d0:c8:5c:b3:e8:11:d5:e0:0c:ec:56:9e:49:
                    22:4a:28:a2:f2:42:46:f2:47:62:c5:ac:bb:9c:28:
                    e2:24:a5:ac:c6:c4:88:bc:9a:2b:7d:bc:58:e1:be:
                    65:ec:aa:27:20:54:96:ed:2c:08:bf:c6:3e:84:a5:
                    67:20:38:57:c7:03:32:4a:d9:f9:c1:1d:c1:8a:86:
                    65:87:15:54:76:b1:2e:04:e6:a6:f5:e2:44:40:40:
                    7b:67:d0:65:08:31:06:d1:6e:f0:ee:7b:8a:57:0c:
                    d3:28:25:fd:ad:ec:13:18:2b:8f:ba:86:f6:ff:bb:
                    bf:cd:0e:6c:56:c2:05:11:a8:fe:29:fe:0f:11:ca:
                    13:c9:8d:39:ae:08:04:b4:a1:35:3c:07:e0:f4:b2:
                    26:80:75:72:9f:4f:7b:ac:53:44:82:72:45:cd:95:
                    70:bb:cd:45:82:60:bb:f9:1f:7c:2c:41:f1:e0:45:
                    4b:7c:92:f2:58:74:93:1b:b0:57:c4:55:9f:3f:89:
                    10:98:e5:22:e0:2b:d6:6a:ee:3b:3d:a8:c9:8d:39:
                    d4:58:e8:85:1d:d9:e3:4c:86:bf:9c:30:2c:d4:db:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:51:6E:89:CE:EC:3C:82:F7:07:C3:F8:8B:45:1A:BA:F8:6C:FC:32
            X509v3 Authority Key Identifier:
                keyid:40:2A:B6:1C:43:02:40:61:51:30:81:DD:23:57:63:F7:C8:07:13:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBqKokTeoUqmdtJvK1kXBjqwexcgPxBhy9PzsdQjT3QL/0/402AB61C43024061513081DD235763F7C80713FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/402AB61C43024061513081DD235763F7C80713FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBqKokTeoUqmdtJvK1kXBjqwexcgPxBhy9PzsdQjT3QL/0/323830343a376336343a383030303a3a2f33332d3333203d3e20323731343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c64:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         29:c9:10:36:69:4e:77:b0:0e:1c:36:06:75:aa:38:7b:fa:c3:
         bd:c3:54:39:15:f8:0a:7f:3b:69:42:48:67:05:01:71:99:36:
         5b:8d:7e:8e:d8:2a:f0:f6:ca:ff:60:85:d8:fb:14:67:5e:9b:
         b8:97:94:24:22:1e:c3:cf:a6:78:a0:8a:7f:b0:7e:0a:9e:f1:
         ad:5f:ae:f6:39:a3:90:94:c2:73:41:6a:26:41:f4:25:6b:e5:
         77:61:c9:bb:21:84:5f:19:86:ed:9a:8c:a6:ef:60:fe:65:6f:
         c8:5d:0f:14:6e:8f:28:da:29:c1:d6:c7:f9:14:d0:66:22:39:
         73:8d:39:ef:c2:7a:b5:8d:07:1c:2b:ff:4c:2e:f7:58:98:d2:
         f7:35:0c:d0:b8:0b:36:45:84:74:f9:9f:1b:e6:18:35:b4:11:
         30:bf:db:bd:13:25:c3:96:11:e0:2d:d2:dd:dd:db:37:7a:e7:
         32:96:10:bc:a7:63:84:71:72:51:80:11:90:ee:b9:5e:82:78:
         99:29:15:f2:00:5a:54:73:cd:fd:0f:5a:61:f9:f0:8c:d2:d8:
         ae:2b:51:a7:8e:50:fa:86:15:f2:86:f7:76:8d:ef:fb:63:bf:
         96:4e:3a:83:b9:a0:d4:0e:4b:c7:d8:31:0a:5f:a6:6c:b3:1b:
         93:90:ff:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org