Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3430303a3a2f3430203d3e20323637303637.roa
File:                     323830343a343761343a3430303a3a2f3430203d3e20323637303637.roa (raw, json)
Hash identifier:          7hBGDtYYGKWcCL+lNEVgOH5Ld7GeBUB306LIOuO70mI=
Subject key identifier:   7B:3C:21:C4:BD:7B:05:4C:A9:41:0A:4F:DB:D8:4F:DC:85:C9:58:29
Certificate issuer:       /CN=ABE2B87282296266F69CE04223629CFC8BFD6354
Certificate serial:       45F7AA2CD0072F94B67EACB08113870DDBC89345
Authority key identifier: AB:E2:B8:72:82:29:62:66:F6:9C:E0:42:23:62:9C:FC:8B:FD:63:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABE2B87282296266F69CE04223629CFC8BFD6354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3430303a3a2f3430203d3e20323637303637.roa
Signing time:             Tue 05 Jul 2022 15:00:00 +0000
ROA not before:           Tue 05 Jul 2022 14:55:00 +0000
ROA not after:            Wed 05 Jul 2023 15:00:00 +0000
asID:                     267067
IP address blocks:        2804:47a4:400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f7:aa:2c:d0:07:2f:94:b6:7e:ac:b0:81:13:87:0d:db:c8:93:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABE2B87282296266F69CE04223629CFC8BFD6354
        Validity
            Not Before: Jul  5 14:55:00 2022 GMT
            Not After : Jul  5 15:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:af:53:a6:25:e8:e7:16:11:45:05:58:2f:2a:
                    0b:f4:c7:89:35:21:ea:3c:d9:8c:70:3c:c5:97:e7:
                    db:3d:cf:e2:43:d9:7f:85:c9:b1:e1:ab:e5:3d:4a:
                    36:c4:fb:40:ae:9f:6c:f0:13:df:5e:56:6c:a0:d2:
                    ff:2c:ad:e4:2f:93:e8:37:9e:89:11:bf:fd:81:78:
                    6f:02:03:a7:fd:ae:b2:4f:d6:25:6c:31:43:ba:c9:
                    fa:aa:00:c4:f4:1f:89:36:f2:f9:37:d5:e8:1a:4f:
                    03:ad:eb:a6:26:2c:20:0f:bc:ab:4a:1e:6f:01:83:
                    56:b2:e2:0d:26:63:4f:71:96:e4:03:e8:ec:26:02:
                    f7:fd:2d:d7:6b:5c:aa:23:a2:fa:4e:72:0b:ff:e5:
                    5d:f2:d3:e4:04:3c:c6:4d:29:5a:f4:37:13:90:ca:
                    77:8b:e9:e8:ac:59:31:e5:74:91:f1:a8:b5:ac:8e:
                    08:c5:24:a6:3d:fe:f2:a8:01:c9:bf:7a:3c:91:67:
                    58:96:c3:f3:cc:ec:7a:44:a6:3d:87:83:df:24:15:
                    d8:0d:35:88:4a:ab:e5:ca:72:42:e8:bf:1d:47:97:
                    19:66:bc:09:c8:9d:ba:90:ea:9e:37:d8:c1:04:b4:
                    b1:a2:22:ff:6e:e0:4e:83:c8:03:82:4b:93:eb:01:
                    65:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3C:21:C4:BD:7B:05:4C:A9:41:0A:4F:DB:D8:4F:DC:85:C9:58:29
            X509v3 Authority Key Identifier:
                keyid:AB:E2:B8:72:82:29:62:66:F6:9C:E0:42:23:62:9C:FC:8B:FD:63:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/ABE2B87282296266F69CE04223629CFC8BFD6354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABE2B87282296266F69CE04223629CFC8BFD6354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3430303a3a2f3430203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47a4:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:03:b1:61:b7:7d:8c:06:02:5c:14:3a:8c:5d:74:9e:64:10:
         75:ed:c2:61:ad:0e:a9:c3:2b:37:bd:f9:7e:d5:d8:2b:c0:b6:
         6d:c8:bd:6d:47:66:b5:d0:f1:e0:ca:f9:ba:49:04:01:0d:1c:
         21:49:0a:2e:50:8d:10:f2:3b:54:7f:a4:f5:0e:4e:a1:d8:45:
         52:51:f1:e0:7f:8c:5c:3e:9a:d6:94:f0:e5:34:b5:17:1b:56:
         15:04:e3:21:3f:ec:aa:e3:ce:f9:0a:ac:58:67:e0:01:ce:2c:
         03:80:11:0c:0a:d4:b0:76:8f:59:fc:7e:2e:b8:eb:3b:2e:29:
         f6:80:28:c0:10:46:63:95:45:fb:33:ac:9d:38:dc:9f:9b:55:
         5e:6d:f9:e9:89:78:ae:db:5d:66:f8:79:dc:31:c9:b6:7d:03:
         e6:e9:06:fd:3f:6a:fc:99:42:e4:a9:9d:8b:0f:c7:f4:d7:32:
         43:9f:04:83:92:54:b4:bb:a8:7f:b8:26:fc:af:f5:ad:13:d6:
         85:92:b8:c6:0a:fc:39:12:93:f5:2a:8c:34:2a:25:ab:41:e6:
         5b:ac:dc:2a:9a:15:12:e4:c1:e2:4a:4a:4e:f9:49:4b:5f:8a:
         22:9d:c3:a6:1e:9c:c5:63:36:19:42:14:9c:79:1a:d1:cc:19:
         30:e5:3c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org