Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3nKqPam6j4vjx3kR8UYnpJLpP3knP4gMQvkYqJDgUEd/0/323830343a3663633a3a2f33322d3430203d3e20323632363037.roa
File:                     323830343a3663633a3a2f33322d3430203d3e20323632363037.roa (raw, json)
Hash identifier:          2b8z/AqnODUOXsYbEQ5gniDPuvsetChag+Vis5pdBw0=
Subject key identifier:   37:D0:5C:FB:6E:48:6D:7E:18:B6:48:00:2F:D8:93:8F:D4:A5:29:80
Certificate issuer:       /CN=4214C29D7E63A3D42BD59FD054A82A2231F16C7D
Certificate serial:       5DE17E4EB24652EAEEF7FF2D4476E0B8AD6CA46D
Authority key identifier: 42:14:C2:9D:7E:63:A3:D4:2B:D5:9F:D0:54:A8:2A:22:31:F1:6C:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4214C29D7E63A3D42BD59FD054A82A2231F16C7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3nKqPam6j4vjx3kR8UYnpJLpP3knP4gMQvkYqJDgUEd/0/323830343a3663633a3a2f33322d3430203d3e20323632363037.roa
Signing time:             Wed 18 May 2022 13:59:24 +0000
ROA not before:           Wed 18 May 2022 13:54:24 +0000
ROA not after:            Wed 17 May 2023 13:59:24 +0000
asID:                     262607
IP address blocks:        2804:6cc::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e1:7e:4e:b2:46:52:ea:ee:f7:ff:2d:44:76:e0:b8:ad:6c:a4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4214C29D7E63A3D42BD59FD054A82A2231F16C7D
        Validity
            Not Before: May 18 13:54:24 2022 GMT
            Not After : May 17 13:59:24 2023 GMT
        Subject: CN=37D05CFB6E486D7E18B648002FD8938FD4A52980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:f1:3a:5f:e8:2c:09:5f:d5:4e:6a:00:6b:
                    6c:75:8d:41:5a:bf:98:96:6a:ee:1d:89:68:a9:40:
                    00:01:52:14:b6:e0:2c:58:79:b0:75:c0:bd:65:9a:
                    4c:db:c2:02:df:88:6b:c4:8e:da:62:72:d9:4e:5b:
                    78:c4:0d:bb:1e:d3:d8:e1:31:13:ef:8c:69:39:be:
                    82:ad:aa:02:ab:17:c6:51:ef:28:bd:1e:63:38:81:
                    9f:7d:ee:0e:cb:26:0f:52:2a:d3:93:92:60:03:c2:
                    e5:81:8c:02:cf:72:70:55:a7:2f:69:0e:bb:5a:d3:
                    a2:e5:2f:2b:96:15:5f:cc:ac:19:b2:76:db:fe:91:
                    0c:e8:d6:ee:16:e1:d6:21:31:86:f0:4d:1e:76:48:
                    e1:13:3a:7c:92:43:e7:cf:47:73:dc:0e:aa:3e:a1:
                    42:91:cc:af:89:bd:8f:56:13:9b:41:2c:34:89:de:
                    40:2f:63:bb:98:bf:99:43:41:46:05:d8:70:72:10:
                    5e:55:f1:6b:10:ac:54:8a:35:15:dc:e8:d2:94:4b:
                    a7:4a:54:37:41:53:ea:d2:db:7d:0f:ce:fc:e0:d7:
                    9f:81:ff:69:00:3a:c6:63:73:d3:93:ea:5b:c4:d3:
                    a9:70:3d:ce:42:1f:bf:13:ff:54:c2:68:d9:20:39:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D0:5C:FB:6E:48:6D:7E:18:B6:48:00:2F:D8:93:8F:D4:A5:29:80
            X509v3 Authority Key Identifier:
                keyid:42:14:C2:9D:7E:63:A3:D4:2B:D5:9F:D0:54:A8:2A:22:31:F1:6C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3nKqPam6j4vjx3kR8UYnpJLpP3knP4gMQvkYqJDgUEd/0/4214C29D7E63A3D42BD59FD054A82A2231F16C7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4214C29D7E63A3D42BD59FD054A82A2231F16C7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3nKqPam6j4vjx3kR8UYnpJLpP3knP4gMQvkYqJDgUEd/0/323830343a3663633a3a2f33322d3430203d3e20323632363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:5d:38:5c:94:89:87:ff:42:58:c9:34:84:b0:84:9c:8d:
         1c:c2:5b:1b:13:c3:e9:d7:b7:a1:06:c4:8e:68:17:65:18:6a:
         ee:d3:21:65:e8:68:a4:25:13:12:21:01:5d:01:d2:5c:26:19:
         29:dc:b7:79:25:d3:12:fe:d2:0f:a2:f3:80:8e:17:63:2d:d8:
         ba:2e:de:6d:d3:8d:25:5a:87:b5:dd:7a:c1:69:54:09:1f:ba:
         e4:ab:3a:79:2c:84:c5:8c:00:4e:9b:5c:4a:69:22:da:e7:08:
         60:82:59:f1:fc:66:45:36:c4:f6:3e:fe:f1:d7:ac:54:b0:b4:
         da:44:12:fc:8e:80:a8:40:54:79:9b:2e:af:de:fb:43:ac:ad:
         a9:0f:e7:c0:8f:2d:02:00:89:06:0c:92:81:92:fd:59:d8:f4:
         f3:a2:1e:0f:cb:d4:42:4a:08:c0:75:22:c8:50:21:c8:d7:45:
         ec:aa:16:93:77:15:2e:b2:49:09:99:97:f1:14:f1:86:72:99:
         c8:c6:be:05:31:15:4e:f7:87:d9:4b:83:b1:8a:aa:23:87:29:
         27:29:aa:0a:17:dd:82:14:4e:97:25:32:a0:a1:55:2f:a6:01:
         cf:45:f4:d8:6d:ba:ba:2f:80:cb:08:cf:db:f7:46:0d:2a:98:
         22:0b:e2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org