Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/323830343a366136383a3a2f33342d3334203d3e20323730333334.roa
File:                     323830343a366136383a3a2f33342d3334203d3e20323730333334.roa (raw, json)
Hash identifier:          9HQAJPeHhRsdsh80Jxz1LuDISa3WbWqLWfNkmJfuXz0=
Subject key identifier:   BE:A0:08:D7:01:97:FC:2A:B3:27:74:43:3B:34:3D:8C:DD:F9:E5:73
Certificate issuer:       /CN=03BA31A787BD80FCF2490BD375CCA939046D0F3D
Certificate serial:       32724B15E02D92FD3FCB5C20F8595909AA69A155
Authority key identifier: 03:BA:31:A7:87:BD:80:FC:F2:49:0B:D3:75:CC:A9:39:04:6D:0F:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/323830343a366136383a3a2f33342d3334203d3e20323730333334.roa
Signing time:             Mon 10 Oct 2022 18:11:12 +0000
ROA not before:           Mon 10 Oct 2022 18:06:12 +0000
ROA not after:            Mon 09 Oct 2023 18:11:12 +0000
asID:                     270334
IP address blocks:        2804:6a68::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:72:4b:15:e0:2d:92:fd:3f:cb:5c:20:f8:59:59:09:aa:69:a1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03BA31A787BD80FCF2490BD375CCA939046D0F3D
        Validity
            Not Before: Oct 10 18:06:12 2022 GMT
            Not After : Oct  9 18:11:12 2023 GMT
        Subject: CN=BEA008D70197FC2AB32774433B343D8CDDF9E573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:fc:45:7d:75:d3:d5:c5:ca:aa:0f:d8:70:
                    7d:9a:d7:a9:39:ce:26:0d:67:69:bf:0d:86:a0:ec:
                    7c:a1:f3:08:2e:57:eb:3c:32:7e:e0:87:9d:92:86:
                    75:17:e5:6b:4a:bd:8c:51:85:0b:8c:a0:55:1a:21:
                    ad:75:40:d8:cb:6d:65:4f:e3:97:4f:1c:01:ea:da:
                    20:e8:65:8c:45:72:35:dd:cd:8b:71:bf:25:c8:4f:
                    28:0d:f6:b8:c4:eb:bd:11:d5:6c:c5:bd:60:d7:17:
                    01:9c:6d:58:dc:85:53:97:f5:d2:d0:23:87:23:f6:
                    48:67:9a:28:a4:27:61:46:8f:b9:79:5a:37:16:0e:
                    6a:da:9c:c6:6a:ef:78:eb:58:99:f3:cb:22:04:01:
                    46:f0:3c:54:7c:99:72:2e:84:48:94:1b:12:d3:60:
                    40:c8:fa:44:ac:03:2e:68:dd:da:df:a6:f1:40:7c:
                    17:ab:03:d5:27:af:63:00:64:6c:37:15:57:8a:4c:
                    c8:5c:1b:01:98:96:bd:b6:2b:26:a6:95:dc:79:8c:
                    f6:31:30:12:f4:5a:fd:46:d1:3e:d0:8f:ce:bd:36:
                    99:46:17:d3:b3:ec:b3:46:22:11:cf:68:4b:10:c0:
                    e5:59:93:1a:c5:da:7d:51:a8:5a:38:b5:05:50:13:
                    98:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A0:08:D7:01:97:FC:2A:B3:27:74:43:3B:34:3D:8C:DD:F9:E5:73
            X509v3 Authority Key Identifier:
                keyid:03:BA:31:A7:87:BD:80:FC:F2:49:0B:D3:75:CC:A9:39:04:6D:0F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/323830343a366136383a3a2f33342d3334203d3e20323730333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a68::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:44:16:92:5b:76:ab:c3:68:a5:f1:c6:a7:d0:e6:60:87:e6:
         e9:c3:9f:a2:6b:a9:ae:15:1e:32:42:3f:7f:55:60:85:9d:fa:
         11:d9:ad:05:b3:53:ba:60:62:e6:4d:92:98:1b:75:f8:9a:22:
         84:18:8d:e9:45:b8:93:46:b0:f6:26:54:9b:00:6c:65:7e:40:
         fb:20:43:85:18:c4:1c:e3:5c:b7:2d:fe:8f:1b:48:6b:35:00:
         57:4e:8f:c3:d6:75:c3:23:a9:f5:ac:2c:6a:58:e3:21:75:e2:
         2a:ec:3f:42:2d:7c:96:b7:10:e6:52:a8:2f:64:a5:ce:a4:00:
         51:ce:30:86:04:b1:d7:ef:53:f7:23:40:b2:2f:98:d1:33:c2:
         03:ee:76:9a:f0:0a:c3:f9:be:9f:7f:1b:7c:03:15:b4:15:1c:
         e8:08:0c:f0:43:76:60:0b:3d:1c:1a:ee:40:9c:ff:ad:e6:c2:
         aa:bc:6e:d6:58:6d:87:4e:0c:bd:e8:55:46:3f:1a:a8:b9:00:
         fc:cd:bf:18:9d:21:19:a9:e8:20:8a:39:77:0a:8f:42:d8:10:
         da:c5:6e:d8:6e:42:a7:f4:9f:6b:ec:bb:21:c5:d8:af:24:90:
         c6:6c:b6:45:0a:45:de:ed:a8:58:2b:13:03:83:7a:f9:f0:a4:
         14:4e:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org