Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/323830343a363065303a3a2f33322d3336203d3e20323639313937.roa
File:                     323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (raw, json)
Hash identifier:          QidbNHqjD97FTP1O6Wf86WnfqLTi+TXeoPlQNizMPfQ=
Subject key identifier:   43:CF:5C:BE:01:D4:5F:CE:7C:BA:25:2E:DA:87:27:BF:8B:2A:4F:49
Certificate issuer:       /CN=F2F3137FF0D447CA8693B97D01EE89634AEFD6ED
Certificate serial:       6853DEC30441CDC674F440C8853FD4EAD9AF54CF
Authority key identifier: F2:F3:13:7F:F0:D4:47:CA:86:93:B9:7D:01:EE:89:63:4A:EF:D6:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/323830343a363065303a3a2f33322d3336203d3e20323639313937.roa
Signing time:             Wed 13 Mar 2024 18:16:40 +0000
ROA not before:           Wed 13 Mar 2024 18:11:40 +0000
ROA not after:            Wed 12 Mar 2025 18:16:40 +0000
asID:                     269197
IP address blocks:        2804:60e0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:53:de:c3:04:41:cd:c6:74:f4:40:c8:85:3f:d4:ea:d9:af:54:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F3137FF0D447CA8693B97D01EE89634AEFD6ED
        Validity
            Not Before: Mar 13 18:11:40 2024 GMT
            Not After : Mar 12 18:16:40 2025 GMT
        Subject: CN=43CF5CBE01D45FCE7CBA252EDA8727BF8B2A4F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:2e:56:ef:a2:5c:d6:85:d9:f0:77:d4:c6:
                    11:b6:70:77:22:bd:d0:9a:f1:8b:66:14:94:9c:3d:
                    6a:0c:a9:2a:ef:d4:75:8d:4a:30:d3:5f:0b:1b:e8:
                    e1:0b:3d:35:da:47:2d:ad:53:73:b6:70:87:67:2d:
                    2c:0f:8f:87:9f:31:f5:3a:5b:a7:67:1c:e9:d8:b0:
                    58:c5:c5:89:86:22:ed:ba:be:6f:fc:b1:83:f6:cb:
                    f0:d9:89:fd:27:05:4b:1d:0e:ac:5a:8f:28:f1:71:
                    f4:4c:dd:2b:80:35:e9:2c:69:5d:ae:0c:ba:03:4c:
                    20:0d:04:6b:77:63:e9:e4:60:e6:4d:88:90:dd:37:
                    16:97:be:26:d6:30:6f:31:95:65:bf:55:0f:a0:6c:
                    e9:7f:e0:64:0b:04:d3:59:9b:48:e2:1e:6b:47:06:
                    3c:f4:15:87:dd:78:87:c2:c5:f5:93:a2:42:73:b5:
                    af:a5:04:77:3c:2e:f0:6c:67:aa:5d:50:fd:91:1f:
                    ad:df:86:fb:ef:bc:54:9b:34:f8:b0:f3:85:0b:19:
                    ee:a9:dc:a4:fc:eb:1b:06:1d:bf:bf:c6:aa:a8:cb:
                    4b:e2:31:be:64:a3:2b:0f:56:6d:d5:24:ea:70:af:
                    0c:5c:a4:fa:82:ba:2e:71:e8:5e:98:ee:39:04:9b:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CF:5C:BE:01:D4:5F:CE:7C:BA:25:2E:DA:87:27:BF:8B:2A:4F:49
            X509v3 Authority Key Identifier:
                keyid:F2:F3:13:7F:F0:D4:47:CA:86:93:B9:7D:01:EE:89:63:4A:EF:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/323830343a363065303a3a2f33322d3336203d3e20323639313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:59:b6:6e:37:b2:9c:4b:d2:10:02:de:31:d2:b7:cb:6b:52:
         47:dd:0b:5c:bf:2b:3a:bc:73:c4:00:ad:75:3b:7f:8b:f4:c4:
         1b:e6:c6:5a:50:18:28:2a:12:5b:ea:6a:b0:71:36:67:6c:7b:
         6f:2c:ce:78:ea:31:04:cd:4e:a0:31:ab:fc:b1:3b:6c:88:b7:
         9d:66:26:73:2b:0e:fc:08:ab:7b:98:41:ff:38:20:80:4f:cd:
         d4:d5:f9:5b:a1:42:af:db:3c:d2:17:0b:6f:c2:40:12:70:f3:
         8d:e5:08:a7:84:c3:42:9c:e7:87:ea:3f:a1:9d:27:37:9c:55:
         df:f5:57:a5:1f:df:fe:47:20:cb:cc:8f:75:72:4c:19:43:69:
         f6:c5:d9:e2:e6:95:98:8e:a4:1d:f9:45:e2:19:ab:6e:b5:c7:
         93:ec:81:fc:01:07:98:da:85:59:e3:db:4b:f5:1a:9b:60:f3:
         3b:c4:70:5d:13:d5:a2:ed:fd:f2:02:9c:71:b1:49:02:15:82:
         f9:4c:7f:de:fe:93:a0:fc:26:cb:37:0d:56:14:3d:eb:cc:2e:
         59:68:aa:56:d1:e6:7b:72:50:16:f4:92:2f:10:aa:29:98:a9:
         da:a5:b1:a8:03:04:09:6b:c9:29:c9:73:4b:62:25:2f:a7:2c:
         d3:62:de:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org