Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/323830343a363065303a633030303a3a2f33342d3334203d3e20323639313937.roa
File:                     323830343a363065303a633030303a3a2f33342d3334203d3e20323639313937.roa (raw, json)
Hash identifier:          tnGUUUj5WtQLMg1+/DXTv7EiNJRrpahl4yPcNZralCc=
Subject key identifier:   F6:31:85:A6:B7:9F:E8:04:BF:6A:95:DE:0E:DD:0A:6F:30:CB:92:89
Certificate issuer:       /CN=06AB476C0D831228F3F27817D9D72D20D21DB145
Certificate serial:       06875C61CED8958A33AFF78171377366E33CFCE0
Authority key identifier: 06:AB:47:6C:0D:83:12:28:F3:F2:78:17:D9:D7:2D:20:D2:1D:B1:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06AB476C0D831228F3F27817D9D72D20D21DB145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/323830343a363065303a633030303a3a2f33342d3334203d3e20323639313937.roa
Signing time:             Tue 01 Aug 2023 13:01:14 +0000
ROA not before:           Tue 01 Aug 2023 12:56:14 +0000
ROA not after:            Tue 30 Jul 2024 13:01:14 +0000
asID:                     269197
IP address blocks:        2804:60e0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:87:5c:61:ce:d8:95:8a:33:af:f7:81:71:37:73:66:e3:3c:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06AB476C0D831228F3F27817D9D72D20D21DB145
        Validity
            Not Before: Aug  1 12:56:14 2023 GMT
            Not After : Jul 30 13:01:14 2024 GMT
        Subject: CN=F63185A6B79FE804BF6A95DE0EDD0A6F30CB9289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:90:78:3a:30:39:be:b2:7a:a0:17:6f:c0:25:
                    d3:a8:24:72:a0:de:be:1e:a2:6e:3a:49:2f:09:99:
                    8c:5b:4b:b2:3b:df:15:71:d8:fe:96:f6:c2:4a:33:
                    d1:95:3a:d1:eb:e9:85:c9:0a:0d:2b:f6:72:e7:65:
                    b2:42:17:04:bd:3a:19:49:27:fd:92:69:cd:05:68:
                    a7:0f:9f:68:e4:c2:2c:f2:b2:cc:0c:84:15:5b:eb:
                    0c:ee:5a:24:2f:06:db:b7:e8:6e:87:99:ee:1f:42:
                    43:d2:f0:17:7d:48:1c:3b:e3:a1:93:20:b6:1c:4e:
                    fc:e6:d4:87:41:d9:c9:ab:01:8f:59:83:11:11:d3:
                    83:db:5e:6c:4a:bd:57:2b:b7:c4:32:72:94:d3:bc:
                    ea:24:b7:78:ac:a1:1a:20:e4:dc:01:36:d5:de:ec:
                    16:bb:51:39:84:0a:0e:45:41:93:0b:ec:4e:02:cb:
                    da:ab:ae:df:22:21:f7:87:92:d0:cc:26:05:7b:f4:
                    3a:18:85:ba:8b:3a:f2:9f:d0:30:85:97:00:1f:b2:
                    21:f7:bc:81:5c:4f:3d:d9:80:26:e8:1c:1b:c2:a7:
                    e4:67:df:15:0d:f8:88:40:78:67:ab:b3:14:ed:8f:
                    14:e6:03:57:04:ff:28:2a:88:c3:80:b5:bb:6e:04:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:31:85:A6:B7:9F:E8:04:BF:6A:95:DE:0E:DD:0A:6F:30:CB:92:89
            X509v3 Authority Key Identifier:
                keyid:06:AB:47:6C:0D:83:12:28:F3:F2:78:17:D9:D7:2D:20:D2:1D:B1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/06AB476C0D831228F3F27817D9D72D20D21DB145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06AB476C0D831228F3F27817D9D72D20D21DB145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/323830343a363065303a633030303a3a2f33342d3334203d3e20323639313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60e0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0f:9c:ee:3b:75:22:3d:20:bb:a6:8d:9e:9a:8a:c2:da:11:06:
         9c:36:e2:c8:2d:a3:b7:2e:db:46:e0:b6:8e:e1:fe:d4:04:5a:
         a1:69:0d:c0:fe:be:8b:58:29:ad:88:47:7f:9d:c0:9c:0e:ff:
         30:b6:a9:19:40:af:2b:5a:63:ee:95:9f:92:ab:c7:82:ca:d8:
         b0:ec:d8:f5:c5:75:51:c8:0a:9a:ab:2d:dd:26:47:6a:6b:e0:
         4b:ad:f4:ff:21:d1:31:e6:9a:98:d6:18:d6:b3:fc:e8:db:95:
         52:5a:a9:62:90:28:55:33:89:0b:c2:20:ff:c7:50:00:36:6b:
         09:f1:e7:01:1a:e3:c3:99:72:60:f1:8f:09:14:bc:4e:38:ee:
         ff:65:fb:90:df:39:cc:f4:b6:33:a3:c7:6d:2f:77:23:92:98:
         3a:0c:bd:6c:29:f6:24:80:5e:fb:a6:ac:07:68:eb:c6:f5:2d:
         bf:b9:78:23:cc:71:e0:6b:44:64:d1:a5:7b:9c:ec:4c:6b:bf:
         57:86:da:f9:5e:0f:57:f6:ec:a2:b3:de:f5:cc:b7:08:35:1a:
         37:32:d3:2f:94:d7:18:80:6b:28:0f:c9:9c:62:95:01:d7:e0:
         7c:c4:78:1e:f1:08:b4:c5:0e:4e:32:34:e6:44:35:d7:a6:96:
         23:bc:a1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org