Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/323830343a366133383a323030303a3a2f33362d3438203d3e20323730333230.roa
File:                     323830343a366133383a323030303a3a2f33362d3438203d3e20323730333230.roa (raw, json)
Hash identifier:          UmzPDjtAxVtML+m7AMlFNr5c/1S5sLBQX+2DTfxRA7U=
Subject key identifier:   D5:77:B5:BA:5E:88:77:0C:5F:38:0D:E7:87:4E:DB:0C:9F:77:DE:AD
Certificate issuer:       /CN=32F2AD125C3315F823A44E2CEE9FB684EA897421
Certificate serial:       7BA67D4128866F229282125F3747DDCA84278284
Authority key identifier: 32:F2:AD:12:5C:33:15:F8:23:A4:4E:2C:EE:9F:B6:84:EA:89:74:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F2AD125C3315F823A44E2CEE9FB684EA897421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/323830343a366133383a323030303a3a2f33362d3438203d3e20323730333230.roa
Signing time:             Wed 23 Mar 2022 15:38:58 +0000
ROA not before:           Wed 23 Mar 2022 15:33:58 +0000
ROA not after:            Wed 22 Mar 2023 15:38:58 +0000
asID:                     270320
IP address blocks:        2804:6a38:2000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a6:7d:41:28:86:6f:22:92:82:12:5f:37:47:dd:ca:84:27:82:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F2AD125C3315F823A44E2CEE9FB684EA897421
        Validity
            Not Before: Mar 23 15:33:58 2022 GMT
            Not After : Mar 22 15:38:58 2023 GMT
        Subject: CN=D577B5BA5E88770C5F380DE7874EDB0C9F77DEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:b4:90:1a:60:56:f9:11:ed:68:89:a7:2e:
                    7e:88:db:e3:da:08:70:30:a5:7e:f9:58:03:be:44:
                    af:f5:82:43:c8:21:79:82:5f:88:2d:a9:a0:fc:a6:
                    91:cd:da:fb:f5:b5:c3:d9:07:20:45:ff:66:98:4e:
                    0c:a3:bd:8b:e2:2a:0e:91:db:78:0b:01:1c:29:a7:
                    05:d1:53:be:be:d8:55:ab:1f:f6:b8:d8:07:f7:48:
                    44:06:94:72:23:79:d8:80:31:d9:25:45:cf:59:2b:
                    04:28:3b:1c:16:52:f1:27:52:b1:67:03:be:40:b5:
                    2f:1a:f5:6e:ea:5e:bc:ef:0a:30:56:82:8d:6b:5f:
                    76:cb:cd:45:8e:74:e2:fc:15:de:97:13:5d:43:e8:
                    c0:1a:18:00:51:eb:08:02:7a:52:20:49:ee:5b:d1:
                    45:ef:e7:56:db:5a:39:47:58:d9:c8:f1:74:a8:ec:
                    e6:a2:ef:2f:b6:3b:ea:18:0c:3c:20:4c:6d:bc:49:
                    d4:75:36:b9:3b:41:d8:d0:c1:2b:30:bb:9f:7b:92:
                    d6:9c:3b:42:7a:9a:11:ec:8b:a7:66:06:73:01:7b:
                    6a:6b:84:b2:76:cd:6d:eb:1c:89:58:44:19:cc:76:
                    d3:79:06:6d:ff:e1:63:9a:90:72:8f:fa:92:aa:e3:
                    b6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:77:B5:BA:5E:88:77:0C:5F:38:0D:E7:87:4E:DB:0C:9F:77:DE:AD
            X509v3 Authority Key Identifier:
                keyid:32:F2:AD:12:5C:33:15:F8:23:A4:4E:2C:EE:9F:B6:84:EA:89:74:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/32F2AD125C3315F823A44E2CEE9FB684EA897421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F2AD125C3315F823A44E2CEE9FB684EA897421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/323830343a366133383a323030303a3a2f33362d3438203d3e20323730333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a38:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:e8:df:1b:58:a0:dd:cb:fa:a8:eb:e2:3f:f1:f4:ef:87:
         d6:cf:9f:0e:cb:5b:9b:6f:6a:a3:aa:57:00:b5:b2:55:dc:e4:
         87:d3:7b:fb:56:d0:40:87:ec:35:55:02:dd:f6:ce:f1:b0:d1:
         1e:40:73:a3:01:f2:42:4d:f8:6f:7b:80:92:05:11:79:ff:51:
         6b:84:64:33:54:c9:7b:0d:31:8e:ed:db:f1:8e:a6:3c:68:4f:
         56:9c:78:bb:28:e2:46:3b:19:82:a9:5d:53:89:15:93:56:c5:
         17:2f:25:00:c3:92:6e:0d:2e:cc:af:fa:34:5e:e1:bf:42:48:
         41:a5:eb:7d:c5:2c:de:47:b9:c1:51:bd:13:d6:22:48:65:49:
         10:09:8b:51:4a:20:a5:15:b9:72:c8:29:2d:7a:18:8a:7f:f7:
         81:e7:bb:57:c0:dc:02:cb:5e:f6:dc:02:de:33:dc:b2:cb:fd:
         0a:19:08:14:b0:95:a6:b7:7c:27:3b:cb:97:0c:0c:6a:46:1e:
         74:3f:8b:35:ce:e3:6f:c7:81:70:01:13:98:1a:c2:71:a5:73:
         e8:b7:38:b3:21:19:1c:0c:8c:1d:6d:5a:e1:4f:d2:dc:07:5a:
         87:20:61:be:80:18:eb:ee:87:eb:56:80:59:2a:a5:87:44:80:
         89:cb:f0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:00 2025 by rpki-client