Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a3a2f33322d3332203d3e203631383835.roa
File:                     323830343a316163383a3a2f33322d3332203d3e203631383835.roa (raw, json)
Hash identifier:          qZUanyuPoyXCkMIkYXv9xdt4WYUl6cVq/CChGWXdAk8=
Subject key identifier:   1C:0E:6A:92:60:BE:3F:26:C3:E1:9C:C2:43:42:71:7D:33:5E:DA:95
Certificate issuer:       /CN=99A22935239FC46D167B07A0FBAB7A827D2D8E27
Certificate serial:       0300DFB8E633F15D5183E8DA5B42F7A3B9CE7A3A
Authority key identifier: 99:A2:29:35:23:9F:C4:6D:16:7B:07:A0:FB:AB:7A:82:7D:2D:8E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99A22935239FC46D167B07A0FBAB7A827D2D8E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a3a2f33322d3332203d3e203631383835.roa
Signing time:             Tue 17 May 2022 12:44:02 +0000
ROA not before:           Tue 17 May 2022 12:39:02 +0000
ROA not after:            Tue 16 May 2023 12:44:02 +0000
asID:                     61885
IP address blocks:        2804:1ac8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:00:df:b8:e6:33:f1:5d:51:83:e8:da:5b:42:f7:a3:b9:ce:7a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A22935239FC46D167B07A0FBAB7A827D2D8E27
        Validity
            Not Before: May 17 12:39:02 2022 GMT
            Not After : May 16 12:44:02 2023 GMT
        Subject: CN=1C0E6A9260BE3F26C3E19CC24342717D335EDA95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:65:17:51:c5:cb:85:90:03:22:93:b8:5f:
                    43:42:7a:20:79:01:4c:d6:26:af:bf:b4:5b:09:96:
                    8e:fc:2a:9b:59:2b:4f:7b:2b:1f:f0:ea:93:b9:f4:
                    ef:2a:33:22:5a:53:ae:61:1c:06:96:e7:1a:ed:3a:
                    6a:2a:26:37:15:52:6e:d3:b5:66:be:80:7e:a4:e3:
                    fc:42:65:98:57:e5:85:bb:7a:d2:95:4d:cb:96:31:
                    3f:91:3d:cc:0e:81:d4:53:95:c6:8a:66:16:ea:79:
                    67:c2:46:a8:c0:1b:50:cd:df:3d:89:6b:86:d0:47:
                    be:65:be:4e:ac:1e:6a:f6:9e:b2:88:16:c5:8e:b0:
                    a3:94:14:23:6c:a1:63:a4:08:6d:ff:3f:96:1e:7f:
                    e2:1e:b3:d4:91:88:94:0d:80:a0:e7:12:4b:8b:ef:
                    fa:65:43:dc:f4:fd:ac:1a:5a:1c:ca:d8:5e:c5:96:
                    30:ba:2d:62:dd:f1:ca:cb:a1:91:e6:5d:5d:e6:ea:
                    09:8e:59:d8:fb:0c:17:22:84:9e:25:ff:0a:f1:00:
                    d6:19:28:d6:23:5e:a5:fa:83:cc:8e:d2:c0:75:4f:
                    b2:9b:2f:87:38:fe:50:96:85:8d:a7:1c:9d:ee:4f:
                    b9:4a:e0:de:13:0a:ad:df:57:f4:c5:71:5a:a3:ca:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0E:6A:92:60:BE:3F:26:C3:E1:9C:C2:43:42:71:7D:33:5E:DA:95
            X509v3 Authority Key Identifier:
                keyid:99:A2:29:35:23:9F:C4:6D:16:7B:07:A0:FB:AB:7A:82:7D:2D:8E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/99A22935239FC46D167B07A0FBAB7A827D2D8E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99A22935239FC46D167B07A0FBAB7A827D2D8E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a3a2f33322d3332203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:d0:78:5e:af:b9:6e:f6:9d:0b:a5:40:0e:76:da:57:f2:49:
         c2:73:34:6a:89:a4:26:ee:fe:33:58:d9:66:bb:d5:9c:d0:ec:
         30:98:da:b7:5b:69:a0:53:ee:4d:c0:84:21:55:a6:82:b4:8a:
         3f:38:09:fc:d1:99:39:24:79:0a:52:e9:ca:f7:f5:28:d7:ba:
         a2:a5:a6:69:e9:30:6e:ac:13:9d:ce:20:50:c9:cc:5b:86:f4:
         8a:06:af:62:67:50:0c:8f:f0:da:8a:f5:b3:3f:41:01:9b:c6:
         9c:02:e9:2c:35:db:4c:4d:fc:73:94:1d:0a:14:97:e1:ec:f2:
         16:3e:91:91:78:66:b9:6d:b8:b7:0d:29:bf:88:51:cf:c4:e6:
         66:7b:e6:9c:c7:10:17:75:1f:87:e4:e6:68:5f:2e:07:87:cf:
         81:7e:19:4c:f5:57:f1:ec:5c:33:10:d3:eb:b9:94:62:7f:4a:
         6a:f3:cc:02:e8:7d:0a:d9:82:be:c9:8d:26:24:b2:40:33:33:
         d4:63:f4:da:5e:dc:44:82:3b:22:d0:00:34:d2:39:c0:23:45:
         e1:88:66:d2:c6:3a:47:de:99:1b:76:49:2a:b9:55:3e:46:01:
         db:8f:4f:08:b8:be:e0:c4:6f:e4:28:c3:53:52:70:ca:69:d6:
         47:98:b9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org