Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7sX888sWMqu6A79ZZYZJDaU8XvdCWdGFPA6seHFNNnm/0/323830343a333761383a3a2f33322d3438203d3e20323636343238.roa
File:                     323830343a333761383a3a2f33322d3438203d3e20323636343238.roa (raw, json)
Hash identifier:          iJSkV22AraJKBg6hx/i/t6L8GAdE7LkraL6d7VM/QPs=
Subject key identifier:   88:BD:82:4C:00:70:82:CF:BD:F3:B5:81:24:56:0C:35:52:BA:C0:F6
Certificate issuer:       /CN=477B4C60DF331FB1CD2FF1CF3273E9243B2FA950
Certificate serial:       0F64312E5A8FB85FF14496485DC872EE99F75175
Authority key identifier: 47:7B:4C:60:DF:33:1F:B1:CD:2F:F1:CF:32:73:E9:24:3B:2F:A9:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7sX888sWMqu6A79ZZYZJDaU8XvdCWdGFPA6seHFNNnm/0/323830343a333761383a3a2f33322d3438203d3e20323636343238.roa
Signing time:             Mon 21 Feb 2022 19:36:25 +0000
ROA not before:           Mon 21 Feb 2022 19:31:25 +0000
ROA not after:            Mon 20 Feb 2023 19:36:25 +0000
asID:                     266428
IP address blocks:        2804:37a8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:64:31:2e:5a:8f:b8:5f:f1:44:96:48:5d:c8:72:ee:99:f7:51:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=477B4C60DF331FB1CD2FF1CF3273E9243B2FA950
        Validity
            Not Before: Feb 21 19:31:25 2022 GMT
            Not After : Feb 20 19:36:25 2023 GMT
        Subject: CN=88BD824C007082CFBDF3B58124560C3552BAC0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:4a:66:c7:dd:b1:4c:10:e5:68:94:d5:d7:
                    d5:b4:0d:b0:87:a1:0e:68:d9:e6:34:98:1b:1a:0d:
                    5e:8f:62:70:39:1d:62:36:29:12:14:90:b7:3c:48:
                    80:2f:5a:87:45:da:4e:7d:97:92:46:26:3b:fc:f8:
                    93:77:e9:9a:7b:07:54:3e:76:1b:6e:d2:37:06:5b:
                    46:8a:e5:bf:08:cf:4d:78:67:d5:7f:c5:54:39:f3:
                    46:82:27:95:3d:75:64:fc:3a:4e:99:e9:75:51:f3:
                    bc:27:7c:53:17:d5:33:27:b4:e4:c7:bf:31:44:97:
                    fc:67:68:ef:2d:17:b2:fb:0f:a8:8b:ef:6e:cb:23:
                    88:17:a1:b5:db:b8:cd:2b:7a:eb:45:e6:d4:f7:e7:
                    ec:9a:fb:c6:91:74:5e:63:96:21:f3:df:17:ac:e5:
                    63:cd:13:29:92:88:1c:6b:55:cc:70:fd:2f:c7:bd:
                    b4:ce:90:8b:85:0a:dc:2e:83:c7:79:17:d0:6c:cf:
                    67:20:2a:a5:cb:5e:53:80:0c:b1:37:de:81:68:3a:
                    03:ff:b5:d0:ee:7e:c1:52:8b:c9:e3:91:e1:ca:c9:
                    56:f4:0b:66:97:3c:4b:23:d7:69:a5:9a:ca:4c:5b:
                    8e:69:02:96:9d:50:c4:34:7d:f9:00:7f:e1:f3:4d:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BD:82:4C:00:70:82:CF:BD:F3:B5:81:24:56:0C:35:52:BA:C0:F6
            X509v3 Authority Key Identifier:
                keyid:47:7B:4C:60:DF:33:1F:B1:CD:2F:F1:CF:32:73:E9:24:3B:2F:A9:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7sX888sWMqu6A79ZZYZJDaU8XvdCWdGFPA6seHFNNnm/0/477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7sX888sWMqu6A79ZZYZJDaU8XvdCWdGFPA6seHFNNnm/0/323830343a333761383a3a2f33322d3438203d3e20323636343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:08:cf:cb:e2:db:e9:1d:c1:19:d7:36:46:84:8c:62:7f:5c:
         31:0b:bd:55:72:52:60:19:ef:61:49:95:1f:cf:24:53:9b:72:
         b5:cb:ef:60:a5:a0:91:3e:05:33:46:a1:95:15:c9:12:99:ef:
         9e:cb:54:c2:78:6e:81:cd:78:17:bc:e3:07:48:fc:c1:88:40:
         7b:96:a3:87:d8:3b:09:dc:52:1e:d6:43:f7:66:94:60:87:e2:
         4e:9d:17:ea:62:c5:1e:26:89:d6:b4:7d:0d:68:d2:ec:08:63:
         cc:42:1b:44:1f:2c:97:e9:c2:0d:f5:89:ce:52:0b:75:e5:71:
         e5:b7:69:20:3c:5b:f6:db:66:5c:75:8b:03:fa:af:e0:64:b5:
         d9:05:10:c1:72:1c:98:ad:bf:e4:fb:33:19:e6:30:b4:dc:be:
         56:85:0f:63:5c:0a:c8:33:a6:4a:24:74:e0:4e:89:d4:54:ed:
         50:ae:8d:bd:d6:32:2f:30:bc:8a:42:7f:12:24:6b:1c:fe:ac:
         8d:fb:90:09:e2:10:e1:15:3b:c6:ed:17:15:79:29:dc:c0:f6:
         55:14:7f:4c:69:c1:42:10:f2:48:a8:7a:91:23:ab:97:17:67:
         cf:eb:37:a3:12:f1:2c:23:ce:30:f6:18:5a:bd:1f:a6:87:ea:
         63:1d:9c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org