Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33322d3332203d3e20323731313636.roa
File:                     323830343a373734343a3a2f33322d3332203d3e20323731313636.roa (raw, json)
Hash identifier:          2fXbSsTGGOPb+uDEGUHgU8ANgmrO1222m9DJlFfWtCc=
Subject key identifier:   9D:1D:91:7C:2F:66:0B:3C:1A:44:7D:C2:65:0F:1C:C6:E1:DE:D7:91
Certificate issuer:       /CN=321E98532E0480CAAC859174555C2E9A5402331D
Certificate serial:       1D055B98F895558103A20E905747751DEB29783C
Authority key identifier: 32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33322d3332203d3e20323731313636.roa
Signing time:             Wed 12 Apr 2023 13:02:54 +0000
ROA not before:           Wed 12 Apr 2023 12:57:54 +0000
ROA not after:            Wed 10 Apr 2024 13:02:54 +0000
asID:                     271166
IP address blocks:        2804:7744::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:05:5b:98:f8:95:55:81:03:a2:0e:90:57:47:75:1d:eb:29:78:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321E98532E0480CAAC859174555C2E9A5402331D
        Validity
            Not Before: Apr 12 12:57:54 2023 GMT
            Not After : Apr 10 13:02:54 2024 GMT
        Subject: CN=9D1D917C2F660B3C1A447DC2650F1CC6E1DED791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f1:00:6e:c4:27:e4:f5:9b:62:9b:37:8e:18:
                    c8:f8:48:d1:34:b6:03:9b:39:ce:68:13:d2:ec:56:
                    49:40:81:2a:f0:95:1d:7c:1b:16:29:d7:87:77:ee:
                    28:e6:b5:b9:ee:3d:77:6a:ac:82:14:f3:9b:99:84:
                    48:56:09:7d:ca:c9:f0:a6:6a:b6:41:ab:11:2c:fe:
                    fb:d8:d4:a4:aa:91:9f:be:42:23:76:5f:39:2b:7d:
                    68:b1:17:d1:2c:45:a9:e8:a9:d1:07:63:ca:52:87:
                    d5:dd:15:29:95:ef:7e:35:28:44:1c:d3:b4:fa:a2:
                    bf:71:08:77:00:e3:7d:98:e5:dc:ed:92:68:d9:5d:
                    63:e5:c7:6d:5a:fa:f1:6d:9a:65:bf:0f:5d:0d:6b:
                    bf:d3:58:b0:d3:02:8a:b4:19:a0:32:7e:96:3b:5e:
                    82:8f:4e:9f:96:7e:a1:31:bf:a2:92:8d:0d:f0:be:
                    17:55:8a:3e:70:3b:69:58:a9:69:a0:34:21:01:a4:
                    3e:50:8d:3d:9f:4e:43:97:d4:12:98:3a:0d:03:6f:
                    c6:5c:51:7d:22:33:84:4f:2c:9c:53:fa:60:c1:b6:
                    57:a7:40:7c:46:2e:db:46:ab:6c:3f:9c:a9:2a:9e:
                    ec:e0:11:c6:c7:98:9e:be:6f:9c:ea:1c:1a:e6:0e:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1D:91:7C:2F:66:0B:3C:1A:44:7D:C2:65:0F:1C:C6:E1:DE:D7:91
            X509v3 Authority Key Identifier:
                keyid:32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/321E98532E0480CAAC859174555C2E9A5402331D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33322d3332203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7744::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:c2:8f:40:8c:aa:3f:05:16:e2:49:19:e4:9d:c1:da:66:ab:
         9d:18:12:e2:10:4e:eb:91:58:8c:a6:bd:8f:10:76:01:f4:05:
         e8:e1:a5:8b:f5:67:05:64:c8:09:d3:e9:91:a3:4a:2c:c7:93:
         57:99:0f:ca:da:ea:28:95:f3:04:bc:23:d6:fb:66:36:fb:39:
         0d:20:aa:9a:8e:9f:24:cc:12:ae:15:28:ff:c4:79:81:63:1f:
         85:d5:b2:8f:d0:5f:6e:ca:e1:de:bf:3f:d4:58:f1:fd:44:10:
         b1:b2:aa:69:1e:15:7b:37:8f:16:c5:a9:c0:3c:b5:21:48:1f:
         b5:8e:08:60:1d:bb:c2:d2:08:a5:a8:cd:cf:07:38:34:26:fd:
         54:f2:63:ce:32:80:30:39:e4:c7:19:76:f8:28:54:87:29:56:
         76:88:cb:af:ff:54:4b:c4:8a:dc:e0:35:7b:ea:ce:0c:fc:1a:
         ba:a9:d6:6d:5e:c2:15:05:8f:39:50:14:80:bf:32:07:83:ac:
         4a:5d:20:92:ee:6a:52:2d:58:a7:ee:01:34:49:c5:6f:73:87:
         0b:7f:9c:23:63:de:bf:6b:78:27:f1:bb:1f:12:0c:4b:dd:d2:
         02:27:2b:b7:0d:56:94:de:19:74:72:3e:09:11:66:6e:02:a3:
         25:9b:03:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org