Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/323830343a373564633a3a2f33322d3438203d3e20323731303734.roa
File:                     323830343a373564633a3a2f33322d3438203d3e20323731303734.roa (raw, json)
Hash identifier:          6MXfh8cdpW/KHaob+xw5s9PCzBW0HxAfb/ntLqT4OdE=
Subject key identifier:   3C:17:D9:49:85:65:EE:A6:E0:0E:2E:56:17:2B:93:06:4D:FC:F6:59
Certificate issuer:       /CN=BA657BA9E7EF447FE8515348926AE1FE539F0EA5
Certificate serial:       2691002AA3B44111749D11158F97ACB4349AED5A
Authority key identifier: BA:65:7B:A9:E7:EF:44:7F:E8:51:53:48:92:6A:E1:FE:53:9F:0E:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA657BA9E7EF447FE8515348926AE1FE539F0EA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/323830343a373564633a3a2f33322d3438203d3e20323731303734.roa
Signing time:             Thu 17 Mar 2022 15:00:01 +0000
ROA not before:           Thu 17 Mar 2022 14:55:01 +0000
ROA not after:            Thu 16 Mar 2023 15:00:01 +0000
asID:                     271074
IP address blocks:        2804:75dc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:91:00:2a:a3:b4:41:11:74:9d:11:15:8f:97:ac:b4:34:9a:ed:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA657BA9E7EF447FE8515348926AE1FE539F0EA5
        Validity
            Not Before: Mar 17 14:55:01 2022 GMT
            Not After : Mar 16 15:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ed:25:31:0d:76:43:75:6e:4a:e0:78:da:01:
                    2e:06:a0:d8:4f:65:1b:cd:5f:9e:ff:bb:72:ea:9a:
                    fb:8b:5e:61:f6:81:18:d9:fd:a0:9c:d7:fb:fc:9e:
                    d8:e4:18:7e:a8:18:0e:38:1b:1c:d0:68:66:11:44:
                    c8:6c:2e:0e:d9:c7:9b:fb:3c:e0:ab:45:65:11:68:
                    e5:f9:87:44:73:48:fb:56:a4:cf:d2:a9:76:ee:f7:
                    d0:db:4d:c6:7b:9a:b1:17:3a:f4:fc:50:c0:7c:cf:
                    1e:9b:af:4b:52:2c:89:35:38:75:ec:82:11:7a:7d:
                    e0:fc:68:9f:00:79:e0:d5:3f:32:74:de:1b:41:0e:
                    9b:80:ce:1a:d9:de:69:66:4b:ed:ed:82:6c:98:90:
                    61:f0:c7:59:26:7d:e0:48:48:ff:5d:ac:e8:80:32:
                    48:c8:a8:8a:34:5f:49:71:83:06:a4:1f:0d:c2:83:
                    9e:ab:7f:6e:b6:56:31:3a:49:42:f3:a6:79:84:9a:
                    66:4d:21:fb:5a:bb:3e:f9:7e:3a:10:08:65:66:eb:
                    8a:3f:68:39:41:a0:3a:b2:cb:a9:dc:38:f0:84:51:
                    9a:da:dd:31:8a:61:df:dc:a2:44:13:4e:46:85:de:
                    02:a6:e9:3d:51:48:9a:86:db:85:c8:72:80:c8:9e:
                    95:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:17:D9:49:85:65:EE:A6:E0:0E:2E:56:17:2B:93:06:4D:FC:F6:59
            X509v3 Authority Key Identifier:
                keyid:BA:65:7B:A9:E7:EF:44:7F:E8:51:53:48:92:6A:E1:FE:53:9F:0E:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/BA657BA9E7EF447FE8515348926AE1FE539F0EA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA657BA9E7EF447FE8515348926AE1FE539F0EA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/323830343a373564633a3a2f33322d3438203d3e20323731303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:ae:a1:c6:42:6b:29:72:d9:64:d7:c9:40:3e:95:dd:00:7c:
         2c:b2:3a:bb:60:90:06:4c:2d:53:84:0c:c9:6a:6c:e8:2a:8b:
         e4:40:56:2b:bb:da:c0:19:11:47:6a:7e:0a:c9:77:41:92:8c:
         19:74:cd:2f:f8:06:6e:d8:67:27:60:63:df:cf:f3:34:ae:f6:
         77:ff:af:65:92:eb:75:cb:0e:6f:03:3a:59:16:f4:02:b7:9d:
         73:f4:6f:a0:e9:2b:d6:e3:51:3b:f6:af:c6:21:49:69:cd:9a:
         8b:a9:fa:b5:1f:f9:10:58:38:33:77:91:13:66:12:96:e8:20:
         6e:12:ee:e0:3d:9e:03:a2:62:8c:63:65:08:9a:c6:07:77:d1:
         54:5d:11:c4:8a:c8:19:96:87:ae:8d:82:53:91:8d:3d:79:dd:
         f7:cb:d8:e4:fc:d2:2f:69:3e:50:26:0a:ff:9e:53:98:6b:a8:
         ab:a1:0e:67:93:e9:02:2e:01:64:f8:19:fa:2b:d7:4d:ef:b1:
         14:0a:dd:a9:83:2a:80:88:4f:a2:b2:95:7e:32:57:5c:e2:4a:
         07:65:22:e0:0b:2d:de:ab:71:fc:ab:09:7a:4d:b8:fe:13:ab:
         03:96:68:63:cc:d7:97:bf:40:81:09:e8:73:a6:86:3b:37:38:
         13:bb:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org