Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/323830343a313662303a3a2f33362d3336203d3e203631393130.roa
File:                     323830343a313662303a3a2f33362d3336203d3e203631393130.roa (raw, json)
Hash identifier:          FAR2obCTvIj3T650cLFmACzr0nJwLYUNz82BxjCfm0I=
Subject key identifier:   32:D7:46:74:9C:B1:E6:01:14:55:64:6F:C5:FC:CF:C9:AC:9E:C2:71
Certificate issuer:       /CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
Certificate serial:       6FB368C32DCB289FD3B6871E0361C348D714C1F2
Authority key identifier: B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/323830343a313662303a3a2f33362d3336203d3e203631393130.roa
Signing time:             Fri 17 Nov 2023 15:52:41 +0000
ROA not before:           Fri 17 Nov 2023 15:47:41 +0000
ROA not after:            Fri 15 Nov 2024 15:52:41 +0000
asID:                     61910
IP address blocks:        2804:16b0::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b3:68:c3:2d:cb:28:9f:d3:b6:87:1e:03:61:c3:48:d7:14:c1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
        Validity
            Not Before: Nov 17 15:47:41 2023 GMT
            Not After : Nov 15 15:52:41 2024 GMT
        Subject: CN=32D746749CB1E6011455646FC5FCCFC9AC9EC271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e0:07:9b:2d:14:dd:ea:67:12:a1:e7:cb:20:
                    84:2a:86:2f:ef:92:38:ce:7d:1d:f2:09:83:f8:e0:
                    b7:3a:3b:81:26:d1:06:6c:cf:81:cd:0d:de:c4:ae:
                    8e:00:6f:d9:cb:b5:7a:28:95:8b:fb:92:7e:c4:59:
                    4d:b1:33:be:76:7c:3c:ae:14:05:0f:db:1c:74:43:
                    10:bb:51:0f:c3:8f:9e:fe:db:74:4a:b4:e2:f5:c2:
                    23:7e:9d:f8:5f:a8:ec:47:03:31:3d:90:f1:d0:9f:
                    54:e7:eb:a2:ec:72:5f:74:ff:52:66:c0:59:3c:ee:
                    27:f3:f8:13:3c:d3:d6:7e:24:19:8a:19:97:12:bb:
                    fe:cd:a1:4e:a1:81:52:7d:b6:22:98:84:d0:5d:c0:
                    12:04:0b:63:44:60:78:54:75:ef:c0:ce:04:67:2c:
                    df:92:2e:28:8c:45:c3:17:a6:68:3c:82:85:e4:72:
                    77:46:26:1e:a6:a4:9d:3a:b1:8c:61:2d:ea:e8:ad:
                    90:b3:18:d7:40:a6:12:e6:15:5e:d8:35:16:d7:08:
                    fd:87:72:b2:fc:a6:59:59:34:71:13:5d:b5:5c:7d:
                    e9:8d:f0:c4:2e:95:46:44:50:5c:69:4b:16:38:19:
                    4a:8c:86:a8:53:9e:ff:48:fd:ed:f8:d7:e4:04:16:
                    ef:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D7:46:74:9C:B1:E6:01:14:55:64:6F:C5:FC:CF:C9:AC:9E:C2:71
            X509v3 Authority Key Identifier:
                keyid:B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/323830343a313662303a3a2f33362d3336203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16b0::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:e5:18:e1:03:3b:5a:00:25:83:9a:1f:a2:28:82:37:4e:
         de:bb:09:37:3a:6d:7e:53:05:d0:44:90:0d:34:22:64:39:53:
         c5:ca:26:2a:91:af:c3:93:d4:bc:e0:0f:ab:b7:82:9d:eb:fa:
         e6:07:32:9e:0d:94:09:94:80:c0:4d:7f:ed:89:26:fb:77:95:
         32:87:d8:18:41:47:66:f1:1a:32:2c:b1:df:2a:81:74:0e:eb:
         3d:0a:77:a7:28:05:d2:6f:43:c8:56:f5:51:37:dd:ce:a2:08:
         c3:ab:28:14:2c:a0:a3:12:b1:65:f3:42:65:12:25:2b:3c:b3:
         a7:ed:89:bd:dc:d4:5b:4b:bd:5a:86:a2:a0:ad:bc:35:f7:62:
         50:ae:44:7f:8f:eb:7a:b1:7f:34:1e:aa:55:36:a4:7d:fa:cd:
         8a:06:48:00:ce:9a:7d:0b:4d:ad:ba:2f:0d:97:bf:2b:cd:af:
         c7:38:8e:d0:06:6f:9c:80:ff:ee:66:16:82:f3:e9:55:43:2b:
         b5:79:d0:7c:67:37:30:e3:fa:cb:27:96:e4:0b:b0:34:35:ab:
         b9:0d:00:eb:6d:dc:d7:b9:20:36:a3:8e:8e:4c:b8:46:0d:9b:
         55:e9:19:47:b0:e4:b3:80:ba:ca:f7:79:5c:d6:f4:56:cc:0e:
         23:02:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org