Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a3a2f33322d3332203d3e20323634343634.roa
File:                     323830343a323031383a3a2f33322d3332203d3e20323634343634.roa (raw, json)
Hash identifier:          nrrFYbRtN3gLcQHGNBn2bdl+DTexocBMMOvhKDn91Nw=
Subject key identifier:   A3:B8:17:17:73:AE:F0:5D:FD:4B:7E:BE:EE:37:38:5F:C5:9B:5B:52
Certificate issuer:       /CN=16B2D87F847363ECEB5D3E4C7BB0C96EB8749685
Certificate serial:       378E582542555BF39A93BB9852B612D0147D56CC
Authority key identifier: 16:B2:D8:7F:84:73:63:EC:EB:5D:3E:4C:7B:B0:C9:6E:B8:74:96:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16B2D87F847363ECEB5D3E4C7BB0C96EB8749685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a3a2f33322d3332203d3e20323634343634.roa
Signing time:             Sat 16 Jul 2022 19:16:20 +0000
ROA not before:           Sat 16 Jul 2022 19:11:20 +0000
ROA not after:            Sun 16 Jul 2023 19:16:20 +0000
asID:                     264464
IP address blocks:        2804:2018::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8e:58:25:42:55:5b:f3:9a:93:bb:98:52:b6:12:d0:14:7d:56:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B2D87F847363ECEB5D3E4C7BB0C96EB8749685
        Validity
            Not Before: Jul 16 19:11:20 2022 GMT
            Not After : Jul 16 19:16:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:45:16:38:57:a5:7d:44:cc:aa:92:81:dc:39:
                    ee:ca:b3:a9:82:0e:27:ea:16:51:71:cf:cd:45:3e:
                    62:99:19:39:ad:8c:7d:47:08:73:9a:35:e5:73:83:
                    b3:91:2a:19:e7:dd:ca:59:52:f1:78:bf:f2:b7:f7:
                    eb:09:a1:17:ff:ef:65:ed:ba:9c:18:52:68:88:e3:
                    9c:2e:1d:fb:7c:6f:c1:47:d8:a0:af:d1:4d:81:d3:
                    f2:59:78:7b:75:e2:86:1e:16:48:97:a5:04:1e:e2:
                    c0:ec:49:14:f6:74:a1:83:a5:b4:1b:49:76:46:5f:
                    19:51:22:c2:03:27:3b:2a:7a:b2:64:e5:4b:bb:3d:
                    5c:33:a6:79:48:a2:43:fb:a1:20:4e:6b:9e:f0:16:
                    bf:98:3c:43:7f:ba:1a:be:61:10:da:ef:4e:cb:24:
                    8d:79:88:21:0b:96:4d:8d:40:68:3f:c7:44:b7:6f:
                    22:93:60:65:39:be:63:eb:c5:f7:f8:32:59:b2:7b:
                    52:38:66:45:d1:01:dd:a9:3d:95:34:70:1e:3d:c5:
                    0f:3f:1c:72:de:6b:8c:ec:16:ae:14:fc:a0:fa:fe:
                    de:8a:d6:11:12:61:6d:21:e9:e5:0b:20:ee:fe:d6:
                    eb:d5:f5:c8:88:d7:0c:29:2b:80:e4:07:bc:9b:9b:
                    45:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B8:17:17:73:AE:F0:5D:FD:4B:7E:BE:EE:37:38:5F:C5:9B:5B:52
            X509v3 Authority Key Identifier:
                keyid:16:B2:D8:7F:84:73:63:EC:EB:5D:3E:4C:7B:B0:C9:6E:B8:74:96:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/16B2D87F847363ECEB5D3E4C7BB0C96EB8749685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16B2D87F847363ECEB5D3E4C7BB0C96EB8749685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a3a2f33322d3332203d3e20323634343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2018::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:21:60:ee:bd:ec:10:68:85:25:4f:07:54:1d:4e:17:23:30:
         17:8f:d6:8e:bd:96:31:46:7a:a7:28:06:b6:15:3c:5e:3e:1c:
         5c:49:68:a9:e8:9d:a8:76:98:a7:00:33:90:5c:93:23:fd:a7:
         48:c3:6c:ec:a2:9d:a7:02:13:ed:52:60:9b:99:39:57:c1:84:
         b4:15:23:5c:e3:b5:cf:3e:f8:fd:6c:6f:2c:b7:02:7b:20:5e:
         2c:69:71:f1:1c:c2:bc:8e:d0:9e:16:4e:1d:84:b2:76:aa:ed:
         81:0e:41:9a:da:5c:3f:71:c0:45:5c:c5:66:23:81:1f:fc:55:
         52:f9:1a:d3:7e:4c:b4:39:2f:73:55:9c:76:c5:79:09:fb:d8:
         3f:b1:a6:a4:b9:05:8c:ec:8d:24:a2:ad:81:41:e8:02:d0:d0:
         ff:50:98:49:7f:3b:91:83:25:26:e0:a4:d8:b7:72:ba:92:48:
         f4:aa:b9:ee:b7:d3:55:45:25:18:9b:10:83:74:be:a5:8c:74:
         89:78:fd:b9:ce:e9:66:5c:8c:d0:24:ce:0f:f8:60:45:55:9c:
         d9:5f:86:ef:48:0d:23:f1:b7:6a:98:61:54:66:23:28:d7:2c:
         1c:07:23:87:d9:17:b1:e9:8e:22:1b:b3:05:ee:3c:4f:2c:de:
         3c:52:80:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org