Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/323830343a6531633a3a2f33322d3332203d3e203532353435.roa
File:                     323830343a6531633a3a2f33322d3332203d3e203532353435.roa (raw, json)
Hash identifier:          1wMXYnpFFz/Uc3y+VEpKhQkb+LC8LFHmHWG/uOCyYDQ=
Subject key identifier:   97:AA:81:0C:69:98:7D:98:28:CF:2F:28:11:42:D9:4C:5D:33:9D:E0
Certificate issuer:       /CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
Certificate serial:       6F080E68EAC01753D85B6B23FCC6608A2DBD85BD
Authority key identifier: 32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/323830343a6531633a3a2f33322d3332203d3e203532353435.roa
Signing time:             Tue 12 Jul 2022 15:36:55 +0000
ROA not before:           Tue 12 Jul 2022 15:31:55 +0000
ROA not after:            Tue 11 Jul 2023 15:36:55 +0000
asID:                     52545
IP address blocks:        2804:e1c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:08:0e:68:ea:c0:17:53:d8:5b:6b:23:fc:c6:60:8a:2d:bd:85:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
        Validity
            Not Before: Jul 12 15:31:55 2022 GMT
            Not After : Jul 11 15:36:55 2023 GMT
        Subject: CN=97AA810C69987D9828CF2F281142D94C5D339DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:54:04:fa:11:21:cb:4f:17:06:47:7a:6d:
                    af:76:de:d3:17:24:dc:e6:78:33:bb:da:ac:56:c9:
                    79:c9:d3:99:4f:89:98:28:18:2c:53:8a:99:de:06:
                    8b:5a:66:41:1c:51:dd:fc:41:45:3c:44:3b:78:ce:
                    7a:c9:b5:e1:23:07:18:fb:58:ac:22:bd:54:8a:f6:
                    a5:54:33:58:e1:ea:7f:f0:8c:9d:a5:ca:06:8d:16:
                    91:13:ca:f2:ab:6b:13:72:f4:40:aa:00:3c:85:2d:
                    05:75:ce:46:9a:29:f1:d6:54:0e:fd:56:75:ce:b0:
                    86:ef:b8:00:db:eb:20:23:20:dc:51:5f:bf:b7:48:
                    5a:1c:6e:82:83:52:73:2b:f2:c4:cc:2f:34:e7:58:
                    50:f6:20:dc:42:19:e4:89:3e:98:b6:dc:35:c8:cd:
                    f1:77:ac:3d:5b:06:99:0d:16:ce:98:37:44:3a:e6:
                    ef:9c:96:17:df:ff:01:41:4d:9f:ba:84:69:cb:76:
                    46:d1:93:5c:0e:e1:8f:bc:3f:56:39:3d:fd:da:30:
                    f4:8a:6d:48:de:93:ea:d1:b6:09:a5:50:d5:8e:a6:
                    75:c3:2c:85:89:9c:50:81:a3:f4:1d:b6:9d:51:44:
                    b2:eb:f1:dc:87:28:bd:fa:b5:10:e6:01:f0:73:3c:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AA:81:0C:69:98:7D:98:28:CF:2F:28:11:42:D9:4C:5D:33:9D:E0
            X509v3 Authority Key Identifier:
                keyid:32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/323830343a6531633a3a2f33322d3332203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:64:5d:b7:8f:ad:af:2b:a7:85:4e:09:38:c0:2c:14:14:c2:
         88:60:b6:13:a1:46:56:08:64:28:cd:f6:27:32:84:2a:c7:31:
         8b:a6:13:31:bf:22:27:3c:49:28:ea:d0:93:66:0b:c6:76:cb:
         79:9f:58:ef:b4:38:aa:a7:dd:c4:cc:5a:b3:32:b8:39:07:c6:
         85:0b:6d:f8:32:1e:36:5f:e7:bb:9b:0e:08:58:3d:a2:81:c0:
         21:7a:02:a2:ea:29:30:31:2d:24:95:aa:45:56:83:42:a6:b1:
         ff:d9:4e:53:f6:88:4a:f5:75:ee:53:fc:bf:98:91:48:06:57:
         f5:f2:68:13:8b:e0:49:cf:1a:82:ec:28:b2:89:ed:35:cd:1e:
         19:c2:b5:d3:02:d1:52:08:f8:47:49:65:cf:f7:a1:86:8d:8d:
         74:d5:75:6f:e0:c2:41:ca:45:b3:57:0a:b7:2a:6f:2a:e9:18:
         2c:cd:a6:8e:0c:c0:fb:bf:60:40:9a:28:dd:aa:72:83:c6:c4:
         8a:e9:65:64:69:9a:a0:9f:23:0b:fd:8c:fa:61:f4:d9:87:a4:
         1e:1e:9a:5e:84:4e:6c:81:f7:2e:50:92:07:ae:cf:a4:c7:86:
         4c:c1:47:c3:aa:23:e8:1a:ef:a0:ba:68:22:55:97:74:94:e1:
         17:b4:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org