Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/323830343a3264633a383030303a3a2f33332d3333203d3e203238323737.roa
File:                     323830343a3264633a383030303a3a2f33332d3333203d3e203238323737.roa (raw, json)
Hash identifier:          3eZK42KId7MLdzPeZ51eukXZhkde86wimglhm66JAT8=
Subject key identifier:   F1:0E:5B:11:54:F0:F1:78:48:03:46:ED:7F:6F:98:52:EA:19:6F:08
Certificate issuer:       /CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
Certificate serial:       22137D65D1D4DAEC730ED7B99D4468834AA4BCD1
Authority key identifier: 37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/323830343a3264633a383030303a3a2f33332d3333203d3e203238323737.roa
Signing time:             Thu 04 Aug 2022 13:00:01 +0000
ROA not before:           Thu 04 Aug 2022 12:55:01 +0000
ROA not after:            Fri 04 Aug 2023 13:00:01 +0000
asID:                     28277
IP address blocks:        2804:2dc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:13:7d:65:d1:d4:da:ec:73:0e:d7:b9:9d:44:68:83:4a:a4:bc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
        Validity
            Not Before: Aug  4 12:55:01 2022 GMT
            Not After : Aug  4 13:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:2e:f3:2c:45:2e:d9:a0:2a:f3:d5:90:db:
                    1d:29:ca:41:98:fc:ca:07:86:0c:b6:01:b9:7c:fc:
                    0f:a6:75:d6:97:e1:85:bc:be:4b:ed:83:48:95:6c:
                    d1:03:16:3e:d4:77:e2:47:7e:54:28:6b:55:ba:1f:
                    a1:74:10:c3:e7:aa:7e:53:60:b4:a9:79:f7:d4:bd:
                    5c:3b:84:b2:fd:67:15:e7:3a:15:0f:bd:c7:e2:21:
                    cf:5d:7c:1b:b1:e2:58:8e:ce:a4:00:de:72:6f:10:
                    32:7d:7e:d0:eb:a3:cf:e3:51:ab:6c:19:47:e4:35:
                    94:0f:d7:b9:c1:a1:a0:f7:54:26:8b:15:0c:f2:a0:
                    2e:9e:9f:6b:2b:cf:e1:72:ae:4a:83:c8:e0:94:e8:
                    25:07:e7:5f:58:66:c3:c0:5a:87:ac:8b:9d:3d:1e:
                    5a:f7:fe:f6:35:1c:25:f8:76:95:54:27:55:dd:37:
                    37:e2:1b:94:e5:6b:30:be:eb:8c:83:bb:42:63:3b:
                    7a:ef:71:35:f6:5c:7c:d0:7d:f9:63:1e:dc:24:66:
                    89:e8:2e:b7:e1:ee:88:f5:53:f5:b3:8c:4b:46:40:
                    fb:01:58:d6:8b:fe:f2:b9:18:cb:73:2e:2e:f7:9d:
                    5a:da:4e:0b:1c:df:c6:32:d5:33:75:0b:77:37:e4:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0E:5B:11:54:F0:F1:78:48:03:46:ED:7F:6F:98:52:EA:19:6F:08
            X509v3 Authority Key Identifier:
                keyid:37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/323830343a3264633a383030303a3a2f33332d3333203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         34:5b:9c:f3:ce:31:f1:3d:04:31:e7:2f:c2:2d:c0:fb:64:c4:
         f9:bb:52:0f:d1:7a:b6:b9:ac:c8:01:d6:35:c7:0a:90:0b:5c:
         f1:c3:78:34:29:9c:da:b2:9d:37:76:b5:f9:05:0d:7b:24:c7:
         44:61:0f:6b:19:f2:d0:8a:2a:c1:08:6d:2d:b7:1b:92:b4:da:
         ca:72:51:59:ef:52:4a:2f:ff:20:9e:e3:d9:41:c7:b8:57:92:
         be:cb:a7:5f:2a:d7:08:5b:7c:c9:c9:45:e8:9c:a2:b0:23:80:
         39:6e:2a:fb:1b:de:04:bd:bf:84:3e:00:e6:83:08:4f:90:fa:
         27:78:cc:1b:b1:db:6f:90:3e:f0:e9:b0:c4:d1:ef:ea:c8:c3:
         85:ef:7b:a9:af:8f:ed:6a:34:07:4c:45:a7:85:4b:21:54:28:
         e3:b7:c7:0c:d3:31:ec:28:6d:fd:88:fc:5d:68:77:b1:9d:93:
         28:24:4a:82:81:96:e5:30:db:e1:0c:ec:31:82:2b:70:1c:24:
         d7:f1:3d:dd:eb:b3:a6:30:35:9f:19:1e:e7:1d:65:f8:c5:26:
         55:cf:a4:60:41:dd:91:a1:12:32:e8:a1:d1:ea:86:c3:a6:02:
         b8:7c:65:00:10:46:7a:e0:c7:d7:0b:6f:8c:17:05:43:20:95:
         bf:27:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org