Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/323830343a366133383a313030303a3a2f33362d3438203d3e20323730333230.roa
File:                     323830343a366133383a313030303a3a2f33362d3438203d3e20323730333230.roa (raw, json)
Hash identifier:          HylTCVW9IA/yoACnMOf578hOTbTD/10NrDY7zvah9c0=
Subject key identifier:   6B:95:EE:F5:B6:A2:FE:FF:2D:08:A1:4B:E7:EE:15:E8:8E:03:17:7E
Certificate issuer:       /CN=32F2AD125C3315F823A44E2CEE9FB684EA897421
Certificate serial:       4564CC37267187DE608AAF08A8CFE1944188AF33
Authority key identifier: 32:F2:AD:12:5C:33:15:F8:23:A4:4E:2C:EE:9F:B6:84:EA:89:74:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F2AD125C3315F823A44E2CEE9FB684EA897421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/323830343a366133383a313030303a3a2f33362d3438203d3e20323730333230.roa
Signing time:             Wed 23 Mar 2022 15:38:51 +0000
ROA not before:           Wed 23 Mar 2022 15:33:51 +0000
ROA not after:            Wed 22 Mar 2023 15:38:51 +0000
asID:                     270320
IP address blocks:        2804:6a38:1000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:64:cc:37:26:71:87:de:60:8a:af:08:a8:cf:e1:94:41:88:af:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F2AD125C3315F823A44E2CEE9FB684EA897421
        Validity
            Not Before: Mar 23 15:33:51 2022 GMT
            Not After : Mar 22 15:38:51 2023 GMT
        Subject: CN=6B95EEF5B6A2FEFF2D08A14BE7EE15E88E03177E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:b8:7b:d4:2b:16:15:ec:b2:71:ba:2f:aa:
                    45:a3:bb:34:29:7d:4c:6c:53:1d:21:2a:c6:cb:d9:
                    c0:72:b2:3c:9e:9d:ba:fc:62:08:1c:67:58:e1:e6:
                    e6:e2:9d:17:75:72:40:a5:c4:45:a2:cd:38:5c:b6:
                    81:61:e3:72:ab:0e:79:3b:7d:9d:d8:20:2d:1e:5d:
                    2b:cd:24:8b:77:7d:3e:27:65:e5:26:49:91:06:71:
                    ed:2e:90:e6:cb:bc:a0:ea:8f:76:1c:07:a0:d7:4f:
                    2a:07:8a:11:61:87:bd:72:c9:ed:f2:e9:d2:10:cf:
                    53:e3:0e:68:9f:e1:89:c1:7d:87:9d:f9:ec:fd:f0:
                    88:06:24:09:5c:b3:06:ba:89:7a:f0:fe:f0:10:60:
                    53:6b:7f:27:6b:d0:9b:a1:be:e8:3d:a3:f8:0f:58:
                    15:82:c3:f3:98:ce:ed:04:74:f9:86:b6:98:7d:5d:
                    ea:c8:42:5a:e1:4d:35:c1:58:50:b4:cf:e6:57:30:
                    1e:26:b1:10:d1:93:ae:a7:d9:a7:05:1d:d3:f1:f0:
                    4e:c5:b1:a1:c4:fa:6e:a6:93:25:50:ea:df:e4:44:
                    00:50:5a:36:17:1b:6e:31:be:0d:3a:9a:a1:26:80:
                    b0:9b:4a:82:bb:74:c5:7a:e0:f3:7e:28:19:96:30:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:95:EE:F5:B6:A2:FE:FF:2D:08:A1:4B:E7:EE:15:E8:8E:03:17:7E
            X509v3 Authority Key Identifier:
                keyid:32:F2:AD:12:5C:33:15:F8:23:A4:4E:2C:EE:9F:B6:84:EA:89:74:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/32F2AD125C3315F823A44E2CEE9FB684EA897421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F2AD125C3315F823A44E2CEE9FB684EA897421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/323830343a366133383a313030303a3a2f33362d3438203d3e20323730333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a38:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2c:ec:6d:60:18:2c:16:b2:36:52:f1:ee:66:d4:5b:38:f4:7a:
         5b:5f:9f:2a:d1:d4:81:b7:17:72:7d:c3:ff:f6:97:ce:b7:22:
         1b:c3:e8:05:b1:88:64:a2:2a:69:09:15:93:7a:77:5a:78:12:
         f4:cd:4a:7e:cd:32:8e:5a:27:5f:25:60:ba:5c:14:de:00:1a:
         eb:16:ee:f5:24:d7:6f:0c:55:3f:02:7d:22:2e:ae:82:23:34:
         df:5c:60:99:71:6b:63:e9:97:62:91:e1:51:cf:6f:99:78:c4:
         ae:de:0c:6c:82:40:75:d4:ed:47:44:f4:eb:17:b2:b5:78:04:
         63:ba:7a:da:fa:5b:63:47:5c:18:c6:80:6b:8c:6b:52:ab:a6:
         6e:c5:0a:3e:9a:4b:2c:65:d4:13:96:61:10:b3:d5:20:85:81:
         50:6b:c5:4e:ab:f0:6e:e4:ff:50:52:79:a2:27:bd:a5:b6:28:
         69:79:a8:0d:73:2b:5a:a4:72:1a:73:57:89:52:57:f9:a6:9e:
         1a:0a:9e:3a:32:28:87:c5:b0:9e:56:21:ff:f9:6a:3d:ee:01:
         61:fa:f2:2c:53:52:5c:83:42:0a:57:98:26:6c:cc:09:e9:b1:
         3c:0c:24:a5:fd:13:10:2a:0e:7d:1f:87:9b:26:fb:11:12:2c:
         1a:ae:90:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org