Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/323830313a38323a3a2f33322d3438203d3e203130383831.roa
File:                     323830313a38323a3a2f33322d3438203d3e203130383831.roa (raw, json)
Hash identifier:          qfIXtbovfWEme8W4vNjdwOaYIr/6xKIm/T8BRmyPips=
Subject key identifier:   EE:17:1D:8F:50:10:F7:F2:04:97:D0:47:75:E9:DD:F5:C6:08:E1:79
Certificate issuer:       /CN=BA67A26F29951B044D426A0B6615C66CA1ABE0DB
Certificate serial:       41CE30098094A85601865D069023059C344DC62E
Authority key identifier: BA:67:A2:6F:29:95:1B:04:4D:42:6A:0B:66:15:C6:6C:A1:AB:E0:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/323830313a38323a3a2f33322d3438203d3e203130383831.roa
Signing time:             Mon 01 Apr 2024 17:08:49 +0000
ROA not before:           Mon 01 Apr 2024 17:03:49 +0000
ROA not after:            Mon 31 Mar 2025 17:08:49 +0000
asID:                     10881
IP address blocks:        2801:82::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ce:30:09:80:94:a8:56:01:86:5d:06:90:23:05:9c:34:4d:c6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA67A26F29951B044D426A0B6615C66CA1ABE0DB
        Validity
            Not Before: Apr  1 17:03:49 2024 GMT
            Not After : Mar 31 17:08:49 2025 GMT
        Subject: CN=EE171D8F5010F7F20497D04775E9DDF5C608E179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:28:54:93:44:b3:b9:74:39:b8:04:1e:7f:
                    a2:0a:53:1b:c4:1a:38:28:58:7b:57:39:79:fd:77:
                    6e:d8:9e:72:ad:14:02:6e:4a:58:1c:6d:20:00:3d:
                    f3:2f:d2:ee:17:68:99:e6:6a:b6:a3:3a:58:0d:f0:
                    43:d7:05:b4:e1:b7:12:c8:7e:02:2a:ea:62:72:e9:
                    d9:e8:a7:33:8e:c9:51:59:0e:11:00:42:43:cb:24:
                    94:99:14:52:f0:cb:5e:05:a4:ee:79:6a:00:09:04:
                    35:5b:08:76:f9:c9:22:94:69:92:63:32:3a:1b:8a:
                    cb:63:e4:5c:1f:92:20:54:55:42:30:49:c9:f2:78:
                    7f:88:08:b6:91:3a:e0:ce:51:fe:c2:b0:9c:84:12:
                    4a:bc:0d:1f:36:8c:99:91:79:37:a0:ca:a9:53:3d:
                    3c:82:b9:fc:4e:52:da:d6:29:54:83:a7:e4:df:c9:
                    16:84:54:b9:5e:34:dc:6e:bf:15:5e:8e:0d:75:63:
                    0a:7a:17:bf:40:4f:aa:c2:b8:27:57:f9:77:64:41:
                    a4:f1:9c:e4:94:57:b9:18:33:98:a6:04:8f:ea:3a:
                    b4:44:50:32:c8:db:14:09:f5:15:2c:ed:f6:25:d1:
                    10:bb:cf:17:9a:94:5f:af:b2:8d:9d:45:a7:9c:13:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:17:1D:8F:50:10:F7:F2:04:97:D0:47:75:E9:DD:F5:C6:08:E1:79
            X509v3 Authority Key Identifier:
                keyid:BA:67:A2:6F:29:95:1B:04:4D:42:6A:0B:66:15:C6:6C:A1:AB:E0:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/323830313a38323a3a2f33322d3438203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:82::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:b0:fc:90:b0:13:cf:06:8d:93:76:9c:8f:16:f0:02:91:82:
         3c:fc:37:7c:bb:6f:b4:3a:35:91:3a:f4:34:4f:43:9e:4a:c8:
         99:5b:a3:7b:0a:fc:07:45:45:5b:4d:a1:84:9d:b5:70:80:f5:
         d2:ab:83:63:6e:92:39:f4:fb:e2:91:69:d1:b9:5d:13:7f:50:
         f0:01:b5:49:01:c0:63:3d:3d:98:eb:e0:57:91:53:b3:85:af:
         b1:2b:6f:6c:f9:5d:6d:4d:b6:39:e2:41:a9:aa:5d:aa:b5:ab:
         d7:24:ac:ce:e8:37:df:d7:06:5a:57:4b:fb:33:3d:21:bc:a2:
         95:fc:a1:05:0e:7d:52:2e:14:8a:52:2e:6f:75:29:d2:3c:f4:
         ad:27:6e:34:24:50:a4:21:4a:a4:ef:e8:19:ac:47:e1:b0:c0:
         58:a5:8d:4f:92:8d:f6:02:34:79:60:d8:8e:a0:a1:46:c8:42:
         31:04:e9:d4:db:18:a7:c1:8f:2d:2d:c6:3e:af:15:83:b8:2e:
         71:4d:c3:ce:24:63:04:6d:0b:31:72:53:d3:e6:ed:6c:21:f6:
         57:5a:d3:2b:00:69:9b:eb:35:f3:f7:71:08:d1:5b:a5:cb:f4:
         c6:f0:49:6c:29:ab:fa:64:3f:e7:e9:8e:25:64:cc:33:0d:a0:
         ba:1e:ea:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org