Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a3a2f33322d3338203d3e20323730353834.roa
File:                     323830343a366534303a3a2f33322d3338203d3e20323730353834.roa (raw, json)
Hash identifier:          bPQ6pa3lWMcCVHrpQ438YYlBYqzK5xGn/hqzjDD8Nh8=
Subject key identifier:   9B:A0:59:0C:4B:5F:90:74:B4:9D:E5:8C:00:FA:08:1A:18:C1:10:67
Certificate issuer:       /CN=D93579905CA8822EAD9B3A08CA28E7D45BB1F9C7
Certificate serial:       32A070CC14E7ECEA459DD0D90370C37BCA7571C9
Authority key identifier: D9:35:79:90:5C:A8:82:2E:AD:9B:3A:08:CA:28:E7:D4:5B:B1:F9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D93579905CA8822EAD9B3A08CA28E7D45BB1F9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a3a2f33322d3338203d3e20323730353834.roa
Signing time:             Fri 08 Jul 2022 16:00:00 +0000
ROA not before:           Fri 08 Jul 2022 15:55:00 +0000
ROA not after:            Sat 08 Jul 2023 16:00:00 +0000
asID:                     270584
IP address blocks:        2804:6e40::/32 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a0:70:cc:14:e7:ec:ea:45:9d:d0:d9:03:70:c3:7b:ca:75:71:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93579905CA8822EAD9B3A08CA28E7D45BB1F9C7
        Validity
            Not Before: Jul  8 15:55:00 2022 GMT
            Not After : Jul  8 16:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:d0:18:e8:a6:dc:57:7b:d0:bb:2e:c7:28:
                    18:98:bd:97:93:44:b7:ea:d7:31:88:15:32:c4:88:
                    4e:28:70:41:24:81:75:fc:0e:fa:3b:ee:f9:cf:a8:
                    83:eb:7f:d6:d0:d0:0d:f4:da:37:b7:d4:f2:eb:ba:
                    19:ab:83:01:a3:7d:71:aa:10:22:f7:e0:0a:e5:ef:
                    c0:ec:7e:a5:4d:95:97:93:db:e7:71:28:2a:bd:5d:
                    f6:59:fd:0d:9c:75:84:87:bd:64:1c:7c:99:66:6a:
                    a2:33:7e:09:b7:09:d5:14:5d:9a:e3:45:99:cc:a1:
                    bb:50:9a:3f:4b:3f:6e:81:99:00:a3:50:f1:df:b4:
                    20:a0:e4:d7:e1:6c:c8:39:a0:ea:75:8d:a4:a1:dd:
                    e7:a2:4a:2d:e1:ff:dd:c3:2e:b6:da:6a:2c:d8:e9:
                    df:5f:8d:79:cb:f8:15:29:92:da:36:eb:be:59:31:
                    10:29:4e:91:52:62:a9:1f:22:0f:7e:f2:ca:c2:31:
                    ce:93:ea:0d:0a:e6:76:16:84:3d:50:2e:74:6c:f2:
                    fe:bc:46:15:5a:91:44:27:75:37:37:ec:88:61:5a:
                    9f:56:23:79:af:a5:7e:75:cd:4b:17:9c:ca:b2:57:
                    63:f2:12:c7:34:65:fa:5b:d1:31:3f:de:6d:47:8f:
                    64:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A0:59:0C:4B:5F:90:74:B4:9D:E5:8C:00:FA:08:1A:18:C1:10:67
            X509v3 Authority Key Identifier:
                keyid:D9:35:79:90:5C:A8:82:2E:AD:9B:3A:08:CA:28:E7:D4:5B:B1:F9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/D93579905CA8822EAD9B3A08CA28E7D45BB1F9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D93579905CA8822EAD9B3A08CA28E7D45BB1F9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a3a2f33322d3338203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:06:a6:d8:b7:5b:58:2a:30:df:2a:cd:76:24:ab:4f:12:ad:
         97:2d:40:e8:a2:a9:de:20:d7:9a:fa:bb:17:99:f3:0e:c0:83:
         93:46:28:d5:19:b1:f0:45:9c:3c:87:2d:07:17:1b:e0:17:26:
         92:89:bb:ea:a7:c6:f8:b3:55:dd:9f:f2:ab:3c:6c:86:f2:99:
         86:d9:a8:9d:5d:16:80:3d:ea:72:ae:31:ca:d8:51:25:73:c4:
         ba:b1:38:07:2c:0f:8f:34:d5:2b:32:f4:13:40:fb:4d:0a:9b:
         ea:1d:e7:c9:3d:34:32:05:74:d4:ec:a4:31:f8:d9:91:5e:0d:
         83:84:18:75:d8:3e:f3:27:7d:34:98:cf:34:9a:55:12:11:34:
         03:af:d6:6c:1c:d1:1f:9d:7c:df:b0:cd:78:c5:e8:be:f1:50:
         2a:bf:c8:e5:c6:40:b8:ed:6b:89:69:bf:21:26:60:69:cc:01:
         db:eb:49:f4:b6:40:7c:0f:b4:24:b5:8d:2e:50:1f:9a:14:74:
         15:6d:23:12:f2:7c:46:36:69:6c:22:e3:73:29:8d:8b:6a:f6:
         0c:de:44:a9:72:09:1b:e8:21:09:07:fe:85:d5:9a:c8:3a:94:
         08:c6:2f:4b:2b:d4:6c:03:de:79:c1:46:d4:41:a8:8b:9a:b7:
         c7:df:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org