Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a383030303a3a2f33332d3333203d3e20323731313636.roa
File:                     323830343a373734343a383030303a3a2f33332d3333203d3e20323731313636.roa (raw, json)
Hash identifier:          vMZKAHE/4DfFDaBuMjCSTC+qjVtIb0kCJWlmSpJ5Q2s=
Subject key identifier:   08:31:57:0C:7C:6A:82:FC:B1:75:A3:F2:47:C1:DC:1C:C6:36:11:BC
Certificate issuer:       /CN=321E98532E0480CAAC859174555C2E9A5402331D
Certificate serial:       515E46BB9DD8FFE3094C37D95B5FC420A8400E89
Authority key identifier: 32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a383030303a3a2f33332d3333203d3e20323731313636.roa
Signing time:             Wed 12 Apr 2023 13:02:54 +0000
ROA not before:           Wed 12 Apr 2023 12:57:54 +0000
ROA not after:            Wed 10 Apr 2024 13:02:54 +0000
asID:                     271166
IP address blocks:        2804:7744:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5e:46:bb:9d:d8:ff:e3:09:4c:37:d9:5b:5f:c4:20:a8:40:0e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321E98532E0480CAAC859174555C2E9A5402331D
        Validity
            Not Before: Apr 12 12:57:54 2023 GMT
            Not After : Apr 10 13:02:54 2024 GMT
        Subject: CN=0831570C7C6A82FCB175A3F247C1DC1CC63611BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:45:3e:93:60:03:d3:0e:eb:ac:a3:33:c9:
                    17:e2:2e:8a:d3:1d:f8:59:57:cd:6c:5a:fc:24:8a:
                    c2:68:72:bc:22:bf:2b:4e:0c:22:15:82:05:40:48:
                    12:b8:87:d2:f3:e5:f5:3e:c1:bd:bc:d7:8f:40:fb:
                    e2:19:f5:b0:36:95:91:d7:10:73:b0:f0:dd:c2:aa:
                    4e:99:5e:ce:6b:6d:68:a7:d1:2c:95:20:7b:b9:ee:
                    6f:ac:19:79:38:13:da:84:35:10:15:48:92:cb:31:
                    a5:88:90:b7:4e:92:2d:f2:8f:46:7b:b7:8a:d9:f4:
                    04:ce:23:4a:25:c6:60:9f:86:f7:f1:46:bb:fb:05:
                    1c:d2:74:d6:5a:ea:b2:67:1f:ab:6e:4c:b5:f8:79:
                    25:7e:aa:74:7d:20:72:68:3e:ff:d1:3f:6c:74:8b:
                    41:bf:cc:fd:a7:9f:ab:3c:f8:26:51:5d:cf:08:d6:
                    e3:bb:64:23:ee:e7:72:50:0f:9e:b0:c2:99:59:43:
                    49:d4:c4:8b:0d:1e:d6:23:ca:db:19:29:ac:62:fe:
                    5c:0d:a4:b0:c8:7e:66:85:97:e2:75:55:48:0b:05:
                    58:f3:b0:9a:1e:43:44:a4:21:e3:b7:af:fe:1b:d6:
                    79:7f:47:60:b5:15:f1:13:3d:e2:d6:5b:0d:7f:69:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:31:57:0C:7C:6A:82:FC:B1:75:A3:F2:47:C1:DC:1C:C6:36:11:BC
            X509v3 Authority Key Identifier:
                keyid:32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/321E98532E0480CAAC859174555C2E9A5402331D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a383030303a3a2f33332d3333203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7744:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0e:0d:5e:b9:c3:19:00:d7:88:e6:34:9e:ee:a0:33:9e:13:d2:
         22:29:5f:12:64:fc:6c:49:46:62:d5:f3:82:b6:98:07:28:72:
         30:63:f0:a6:dd:74:03:09:b7:af:c5:73:54:ae:ca:e4:b6:d7:
         61:f5:fd:d6:3c:ce:eb:48:d6:25:d3:24:16:ad:95:5f:88:05:
         26:5d:81:af:c6:1b:b3:72:b8:54:d1:01:19:00:67:92:f2:1b:
         9a:95:3f:47:e5:6e:ee:a3:8e:ec:98:06:8d:d8:97:00:22:7a:
         75:05:4b:b1:98:ce:5b:77:f4:97:f8:c0:57:f7:07:4f:a3:ff:
         f2:95:b1:d8:e3:4e:62:63:c9:ab:0b:e1:29:a8:33:01:45:8b:
         3b:4c:b8:ab:c8:e6:a3:88:3d:88:d6:20:83:f8:7d:52:37:84:
         07:37:2f:11:3f:0c:9a:a3:66:52:91:d6:e0:74:13:5d:94:a8:
         1f:09:85:f4:80:2c:77:93:28:f5:c8:9c:41:c6:5d:4e:0c:49:
         2a:a0:f8:24:00:b3:05:23:a6:8b:51:1f:2c:5b:52:07:06:98:
         b0:2e:55:02:e9:5b:1b:51:1a:cf:70:5d:eb:88:fe:b2:a6:be:
         40:8b:37:17:fc:48:ce:64:fc:62:8f:02:43:ad:97:21:52:44:
         4b:27:08:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org