Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/323830343a343338383a3a2f33322d3438203d3e20323637353736.roa
File:                     323830343a343338383a3a2f33322d3438203d3e20323637353736.roa (raw, json)
Hash identifier:          YZEWvwkLpyZeTaxrvcJ2CJHQ4sMJWvGmaDPtldi1xgw=
Subject key identifier:   35:83:0F:78:ED:98:2B:66:C9:42:5D:81:AB:C8:91:F1:B5:73:09:FD
Certificate issuer:       /CN=B37A58E61163D22D689BCC06694E0B41F434AF80
Certificate serial:       268E59A31532A95E1EA8F63F76D23303A5048B50
Authority key identifier: B3:7A:58:E6:11:63:D2:2D:68:9B:CC:06:69:4E:0B:41:F4:34:AF:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B37A58E61163D22D689BCC06694E0B41F434AF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/323830343a343338383a3a2f33322d3438203d3e20323637353736.roa
Signing time:             Thu 22 Feb 2024 15:01:53 +0000
ROA not before:           Thu 22 Feb 2024 14:56:53 +0000
ROA not after:            Thu 20 Feb 2025 15:01:53 +0000
asID:                     267576
IP address blocks:        2804:4388::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8e:59:a3:15:32:a9:5e:1e:a8:f6:3f:76:d2:33:03:a5:04:8b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B37A58E61163D22D689BCC06694E0B41F434AF80
        Validity
            Not Before: Feb 22 14:56:53 2024 GMT
            Not After : Feb 20 15:01:53 2025 GMT
        Subject: CN=35830F78ED982B66C9425D81ABC891F1B57309FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9d:f9:c5:98:cc:c5:a9:70:ef:bb:82:1e:0b:
                    73:48:77:cb:0d:cb:34:cc:ae:13:ed:17:d5:30:f0:
                    4d:1d:d3:b9:b0:ec:c9:22:71:bd:08:c4:f2:01:73:
                    b1:54:4b:0e:b7:f8:20:6f:8f:c4:3e:db:36:93:40:
                    c5:cd:e1:c7:6d:df:cf:e5:cf:d7:01:e8:39:39:b1:
                    25:fb:8e:65:08:29:95:cc:b8:85:03:f5:a5:ef:b3:
                    13:dc:dd:5f:a6:3d:25:3a:a2:ca:dd:94:b9:ee:34:
                    77:96:c5:8c:a6:3f:53:79:56:aa:c0:84:cb:da:3b:
                    1a:16:29:a4:cf:5a:f0:60:3a:dd:aa:1b:95:67:f7:
                    0a:5d:7f:bd:50:e6:25:75:fc:19:d7:5d:a1:04:21:
                    cb:25:52:00:80:07:d6:99:0d:5a:46:ac:fe:b4:1f:
                    da:40:63:76:df:68:65:7f:b9:92:7c:37:ad:5e:06:
                    f3:76:10:86:56:be:17:05:fd:06:a6:b0:6c:7f:be:
                    ed:5e:6a:e1:a7:dc:c7:2e:94:ae:a0:28:60:7d:47:
                    aa:04:3c:f8:62:8c:61:5a:b6:9d:8c:db:23:23:c3:
                    a0:7f:8c:eb:4d:47:c9:96:13:69:aa:e7:a2:4e:56:
                    a4:71:1d:95:76:16:02:2d:d8:e3:75:19:12:cb:fb:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:83:0F:78:ED:98:2B:66:C9:42:5D:81:AB:C8:91:F1:B5:73:09:FD
            X509v3 Authority Key Identifier:
                keyid:B3:7A:58:E6:11:63:D2:2D:68:9B:CC:06:69:4E:0B:41:F4:34:AF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/B37A58E61163D22D689BCC06694E0B41F434AF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B37A58E61163D22D689BCC06694E0B41F434AF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/323830343a343338383a3a2f33322d3438203d3e20323637353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4388::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:ae:ac:6d:d7:5e:03:27:98:b9:25:5c:97:87:3f:45:65:f9:
         00:8e:02:87:df:02:26:15:0a:22:2f:08:21:81:25:b8:d7:ba:
         e9:f6:29:32:ee:ad:85:d5:b4:aa:a8:1a:41:b4:4a:b6:47:6a:
         80:d6:e0:c2:26:d9:3f:cb:95:cd:33:12:06:bf:7d:f8:09:b9:
         3a:08:ca:90:27:f4:33:a0:2f:47:e0:b1:59:2b:d3:23:37:ed:
         5c:b5:e3:86:ec:15:7c:11:ff:60:80:c7:b8:f4:7b:f7:9c:90:
         08:dc:fc:96:4e:65:82:47:0f:c6:37:69:65:9e:22:36:42:17:
         f9:50:4e:2c:1e:c9:e5:8d:ce:a5:2e:7a:de:f2:7d:b5:8e:10:
         bb:58:d0:37:bf:46:e6:2b:4c:95:d1:2f:80:15:95:2a:4d:fc:
         45:45:12:81:f1:3f:74:8c:48:fe:00:44:ca:6c:e1:95:2d:7e:
         b2:36:aa:7f:b4:83:50:8b:75:a1:0d:6b:f3:f5:46:ea:17:4b:
         6b:aa:8b:96:b3:fe:d4:37:2a:70:35:9a:81:a7:c0:36:5d:21:
         44:8e:28:94:89:2b:c9:4c:2b:f1:bd:b5:00:a8:d0:d3:3a:b2:
         a3:85:94:30:22:e8:e3:1e:34:2f:30:46:46:6d:0c:a5:71:ee:
         db:57:6e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org