Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33322d3335203d3e20323638383736.roa
File:                     323830343a356265383a3a2f33322d3335203d3e20323638383736.roa (raw, json)
Hash identifier:          Du9uk5Le22Gjn5fRmkyROAdT6ndYzPc2Be/EScmoz+g=
Subject key identifier:   CB:A9:F8:14:39:70:7F:6B:99:3E:14:2C:F5:04:6B:82:9B:31:7B:04
Certificate issuer:       /CN=1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D
Certificate serial:       1D2AA7DF196DF0CEF122C6B535445B1072D4AAD4
Authority key identifier: 1E:E4:0D:DF:B1:22:A5:49:8D:B8:0B:FF:1A:B6:F5:53:11:51:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33322d3335203d3e20323638383736.roa
Signing time:             Mon 14 Feb 2022 18:46:06 +0000
ROA not before:           Mon 14 Feb 2022 18:41:06 +0000
ROA not after:            Mon 13 Feb 2023 18:46:06 +0000
asID:                     268876
IP address blocks:        2804:5be8::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2a:a7:df:19:6d:f0:ce:f1:22:c6:b5:35:44:5b:10:72:d4:aa:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D
        Validity
            Not Before: Feb 14 18:41:06 2022 GMT
            Not After : Feb 13 18:46:06 2023 GMT
        Subject: CN=CBA9F81439707F6B993E142CF5046B829B317B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:d9:a5:d4:2d:27:2c:d8:16:1b:a2:fc:26:
                    bc:aa:8d:a8:84:c4:ef:ed:6a:5e:96:29:0e:04:58:
                    df:fa:77:05:71:93:29:68:27:55:eb:95:5b:f0:0d:
                    af:9c:57:4b:4b:7c:92:f3:58:a4:67:57:1f:a8:ed:
                    54:ce:71:57:d1:24:9c:08:1f:85:56:dd:1a:36:35:
                    db:61:9a:0f:82:31:ba:aa:7c:87:35:d0:cd:3c:17:
                    16:d7:25:2e:43:91:d7:5b:f1:b9:41:37:c4:9a:e1:
                    87:8c:d4:7c:8f:33:9e:e3:3d:08:f7:2e:be:06:fd:
                    06:11:04:26:10:bb:86:d3:ca:d0:54:e8:c2:5b:a1:
                    b1:40:22:76:ee:c5:c4:13:0b:44:ab:56:da:e3:a1:
                    bf:87:47:5b:0f:d0:fe:5f:c5:d3:b0:9a:8c:80:ac:
                    04:8c:ea:30:86:89:73:cc:ce:56:a4:77:ea:5c:32:
                    4d:43:71:32:68:09:c1:af:2a:71:e3:90:27:3a:94:
                    a5:75:ed:2a:10:3a:fb:3e:27:fb:74:84:ec:0e:2d:
                    a2:92:47:d7:0f:b0:c6:e6:f1:ed:29:21:43:8c:54:
                    32:46:d6:91:43:ae:03:38:d6:ca:8b:67:c2:44:f4:
                    55:34:a3:cf:6d:4f:28:90:03:ab:e2:e6:ff:8c:9a:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A9:F8:14:39:70:7F:6B:99:3E:14:2C:F5:04:6B:82:9B:31:7B:04
            X509v3 Authority Key Identifier:
                keyid:1E:E4:0D:DF:B1:22:A5:49:8D:B8:0B:FF:1A:B6:F5:53:11:51:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33322d3335203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5be8::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:11:62:c4:9b:cf:32:c5:ec:8b:9b:0c:77:ed:06:7a:ff:
         da:f5:14:7f:db:01:52:c6:b3:a9:e5:5c:14:f1:74:3d:b3:3e:
         90:17:22:20:d8:fa:08:ca:78:60:3e:82:a4:8a:7a:47:bc:40:
         a5:be:11:87:46:92:4e:35:ca:04:6a:ca:57:ad:25:09:7a:f6:
         d6:b4:5f:8b:e1:0b:b2:ae:14:65:a8:b4:31:34:56:a5:dd:e8:
         b6:fe:f1:d9:14:45:a0:0e:0e:e3:08:78:ba:ea:7f:49:54:cc:
         ff:5f:f6:b9:28:e4:bf:4a:47:c9:02:70:16:01:2e:8b:fd:24:
         00:14:3b:46:64:98:6f:2e:1e:3f:4f:4f:27:fc:ec:56:f5:3f:
         33:21:2c:45:e8:92:26:d9:18:e1:ef:68:10:7d:eb:f9:1d:10:
         cf:0a:e9:aa:3b:7e:1d:4b:6a:51:f6:bc:30:dd:23:81:45:c4:
         70:35:23:54:f7:c2:aa:df:4e:79:a3:9e:36:c6:1a:06:5e:a2:
         dd:72:5b:92:66:15:e0:a0:3d:ad:a4:70:84:43:56:a9:ac:b4:
         60:4c:c1:0f:31:2c:c9:ce:fd:56:5c:17:87:39:4c:b1:5b:06:
         f7:1c:57:44:62:18:90:3f:58:13:39:b3:42:01:f4:13:6f:2c:
         15:ae:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org