Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/323830343a373139633a3a2f33322d3438203d3e20323730383030.roa
File:                     323830343a373139633a3a2f33322d3438203d3e20323730383030.roa (raw, json)
Hash identifier:          KPBd36ATEcKKr8fPW6RxekB9mavAYjlGGmbxIWDvX4U=
Subject key identifier:   77:65:DD:A1:EB:07:8D:26:F5:C7:43:66:03:F6:07:EE:ED:8C:33:40
Certificate issuer:       /CN=17AB1AB3397F9DB436D7F8A775263AEE104BA10A
Certificate serial:       222DE3478E540B35AEEC5EAD60879E318FD03575
Authority key identifier: 17:AB:1A:B3:39:7F:9D:B4:36:D7:F8:A7:75:26:3A:EE:10:4B:A1:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17AB1AB3397F9DB436D7F8A775263AEE104BA10A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/323830343a373139633a3a2f33322d3438203d3e20323730383030.roa
Signing time:             Thu 07 Sep 2023 16:26:58 +0000
ROA not before:           Thu 07 Sep 2023 16:21:58 +0000
ROA not after:            Thu 05 Sep 2024 16:26:58 +0000
asID:                     270800
IP address blocks:        2804:719c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2d:e3:47:8e:54:0b:35:ae:ec:5e:ad:60:87:9e:31:8f:d0:35:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17AB1AB3397F9DB436D7F8A775263AEE104BA10A
        Validity
            Not Before: Sep  7 16:21:58 2023 GMT
            Not After : Sep  5 16:26:58 2024 GMT
        Subject: CN=7765DDA1EB078D26F5C7436603F607EEED8C3340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:35:a1:23:1d:38:20:e8:35:66:9e:95:f4:
                    02:01:1e:00:7d:de:00:f1:3d:a1:d6:61:be:ca:f5:
                    d1:58:3b:ea:b9:43:a2:1a:10:3c:73:3d:89:c0:f0:
                    1f:aa:c9:fe:14:57:02:47:bb:15:1e:09:73:b5:62:
                    a9:dd:9a:f9:7e:7b:3e:4a:78:e3:7e:c1:6b:e2:c0:
                    3f:e6:30:b6:1f:5a:87:8d:d4:d9:10:c4:fe:4b:42:
                    b0:ec:ac:9d:c4:b5:5e:56:71:d7:0a:2f:88:17:db:
                    90:e4:aa:46:e6:58:1c:e0:fd:ac:69:2f:c7:00:06:
                    a5:24:56:dc:77:6f:a6:98:1a:a1:bd:ef:5e:f7:37:
                    5b:d0:7a:3e:9e:cf:24:9e:82:dc:8f:61:c5:d5:d8:
                    a4:08:d0:32:bf:8a:d1:c8:35:4c:b7:22:63:31:02:
                    99:a6:85:a2:b2:7e:d0:87:84:cd:6a:f4:57:7f:b7:
                    fc:1f:ee:54:9b:1e:b3:88:b5:4b:d3:65:54:8c:47:
                    9e:a8:ca:e0:4d:fd:5c:d2:ae:cf:87:ea:53:af:09:
                    2b:c7:ea:b4:d6:61:db:f6:b9:f1:53:c2:ea:62:f2:
                    a9:da:7c:43:bc:76:e3:52:6c:53:9e:85:47:62:99:
                    56:53:3d:79:dc:09:25:de:fc:2a:9b:a7:7b:ad:61:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:65:DD:A1:EB:07:8D:26:F5:C7:43:66:03:F6:07:EE:ED:8C:33:40
            X509v3 Authority Key Identifier:
                keyid:17:AB:1A:B3:39:7F:9D:B4:36:D7:F8:A7:75:26:3A:EE:10:4B:A1:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/17AB1AB3397F9DB436D7F8A775263AEE104BA10A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17AB1AB3397F9DB436D7F8A775263AEE104BA10A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/323830343a373139633a3a2f33322d3438203d3e20323730383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:719c::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:96:47:e9:d7:a1:51:dc:6b:f4:6c:38:51:f0:6f:fa:72:c9:
         04:bc:23:8d:63:45:54:7a:23:fb:b1:13:70:35:07:0b:7a:11:
         3b:24:19:4c:38:36:a5:ac:39:16:2e:59:42:28:01:ba:9e:d5:
         34:1d:8e:1f:84:ee:64:af:70:6b:91:b2:f1:64:56:31:f9:f1:
         9a:17:ae:67:fc:47:66:c0:67:f9:2b:f6:a3:c4:6c:08:95:5e:
         88:a4:bb:99:b8:c4:15:d3:9a:28:f4:63:d1:1a:84:a4:49:6b:
         47:7c:63:f5:ed:c5:15:4f:c5:a0:9c:eb:c7:82:2a:d0:8b:79:
         a2:89:32:7e:59:c3:c4:0b:23:33:4c:bf:0b:5c:92:3d:7d:fe:
         44:8e:b7:f9:c0:15:31:12:8f:4f:fe:38:c6:50:d1:6b:37:f6:
         a4:35:40:be:32:45:fa:71:20:c7:5a:de:bd:ae:b7:81:37:40:
         d6:07:da:97:f4:49:70:7a:c4:a6:56:ed:d4:7c:ca:22:34:e7:
         01:27:c3:bd:00:80:7f:00:84:56:2d:e9:2f:92:5b:92:b2:cc:
         83:ce:6c:68:81:36:c0:9e:31:9d:ff:20:60:80:42:02:20:23:
         7f:ca:04:be:50:cb:39:e7:88:26:39:91:3d:e8:62:1f:d5:19:
         fe:57:45:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org