Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a3a2f33322d3336203d3e203238313238.roa
File:                     323830343a333435383a3a2f33322d3336203d3e203238313238.roa (raw, json)
Hash identifier:          vJ++TaonpQMNebpbHpkxOJl+U6XtUQ8WTXtK5vykDHs=
Subject key identifier:   6E:45:B2:7C:14:14:50:47:28:26:1D:68:44:A9:46:CE:41:08:DF:7A
Certificate issuer:       /CN=797CE135C58690EA32B22DD52903C5FEFBAB4033
Certificate serial:       67F7F403FEB6B6F5D2E443B10B7E30A701828EF8
Authority key identifier: 79:7C:E1:35:C5:86:90:EA:32:B2:2D:D5:29:03:C5:FE:FB:AB:40:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/797CE135C58690EA32B22DD52903C5FEFBAB4033.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a3a2f33322d3336203d3e203238313238.roa
Signing time:             Thu 13 Jan 2022 16:31:01 +0000
ROA not before:           Thu 13 Jan 2022 16:26:01 +0000
ROA not after:            Fri 13 Jan 2023 16:31:01 +0000
asID:                     28128
IP address blocks:        2804:3458::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f7:f4:03:fe:b6:b6:f5:d2:e4:43:b1:0b:7e:30:a7:01:82:8e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797CE135C58690EA32B22DD52903C5FEFBAB4033
        Validity
            Not Before: Jan 13 16:26:01 2022 GMT
            Not After : Jan 13 16:31:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:61:d8:d9:0f:ba:e1:46:be:4d:9d:19:0e:88:
                    51:36:02:69:77:21:13:25:eb:90:b7:1d:70:91:6f:
                    bb:a1:de:b3:73:f1:49:2c:f0:b5:18:e5:d0:22:47:
                    03:47:33:be:e0:87:f3:51:38:76:1d:48:0d:1b:d9:
                    ca:c6:b3:a0:ec:d6:05:1f:2e:c1:6a:36:1b:16:80:
                    36:fc:27:23:53:cc:38:71:6c:74:ef:29:7b:b5:e6:
                    b6:12:0a:52:43:48:a5:9f:62:3c:92:89:5d:9f:ab:
                    4e:fd:aa:92:49:06:c7:e3:fe:25:fd:04:e0:a2:fc:
                    66:cd:f5:da:1b:9e:9e:fc:ad:42:73:df:1c:0f:ff:
                    60:a5:56:46:0a:11:0d:5e:c2:3c:06:5b:5f:d4:2d:
                    6c:36:43:bb:6c:89:ae:62:17:6c:b4:7a:e3:df:68:
                    1a:23:c3:3a:56:a0:24:f8:fa:7b:6f:00:38:57:90:
                    06:04:cf:ed:03:84:b6:d0:8b:69:c6:0e:a1:5c:ad:
                    ee:69:d0:4a:ec:47:76:10:30:58:fc:85:b7:89:ec:
                    37:6a:e3:cc:14:f3:52:af:7d:3c:08:34:7c:35:b8:
                    f6:2b:39:96:b7:a8:42:70:0f:60:d7:e3:3c:c2:bf:
                    f7:59:2c:09:23:b3:88:1c:74:3f:10:2c:cd:ae:82:
                    d7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:45:B2:7C:14:14:50:47:28:26:1D:68:44:A9:46:CE:41:08:DF:7A
            X509v3 Authority Key Identifier:
                keyid:79:7C:E1:35:C5:86:90:EA:32:B2:2D:D5:29:03:C5:FE:FB:AB:40:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/797CE135C58690EA32B22DD52903C5FEFBAB4033.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/797CE135C58690EA32B22DD52903C5FEFBAB4033.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a3a2f33322d3336203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3458::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:fa:cd:eb:30:3c:76:51:9c:4f:18:f5:a5:bf:a6:7c:e7:b3:
         98:b0:2b:ad:94:02:9d:89:84:74:13:05:4c:62:3d:71:fb:1a:
         ec:98:f0:5d:49:81:1a:e2:e2:6e:0d:a9:f5:12:31:c1:42:14:
         7e:42:6e:a0:72:18:8b:7c:98:fd:79:86:fe:f2:c6:ac:52:35:
         e6:4c:04:a3:a1:25:2b:9b:0e:e5:5e:75:1c:71:af:c5:22:ce:
         ff:15:48:f6:e7:78:7e:5c:80:6a:38:60:27:e4:1a:a2:35:5d:
         34:c9:53:53:ae:0e:b5:8a:19:c6:9b:6c:e1:ce:8c:ca:41:9f:
         e6:5a:56:c8:e8:2e:62:fb:54:83:f3:dd:d5:40:26:79:f3:53:
         3c:58:3e:ba:1d:40:80:9c:26:a4:9e:ba:67:1b:47:95:77:7a:
         07:8e:03:67:25:03:1b:b2:21:b6:0c:c5:aa:47:a7:20:48:01:
         e6:d3:9c:d5:c2:30:4c:77:59:ea:0f:28:34:a6:49:83:eb:4d:
         80:25:c5:7a:01:31:ea:a6:b3:e9:a8:82:32:f3:e1:e7:f3:5b:
         cc:04:16:cc:5e:ef:71:29:19:27:86:0e:03:31:f2:16:ec:da:
         75:4e:6d:96:77:44:e7:99:bb:a7:6e:46:f3:6a:c1:53:b5:dc:
         f3:83:a5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org