Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a393030303a3a2f33362d3336203d3e20323633343231.roa
File:                     323830343a313630303a393030303a3a2f33362d3336203d3e20323633343231.roa (raw, json)
Hash identifier:          yZUcwDI8a9cr08J7QJna4H57+O2XutWfr4ZAtLgl9OI=
Subject key identifier:   B5:8C:85:6D:F5:31:5F:B3:B1:F5:D9:5B:93:4A:88:0F:A6:13:E5:96
Certificate issuer:       /CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
Certificate serial:       09135974B95767A6226F802525DE4BBF7E8B1CAF
Authority key identifier: B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a393030303a3a2f33362d3336203d3e20323633343231.roa
Signing time:             Mon 04 Dec 2023 18:55:21 +0000
ROA not before:           Mon 04 Dec 2023 18:50:21 +0000
ROA not after:            Mon 02 Dec 2024 18:55:21 +0000
asID:                     263421
IP address blocks:        2804:1600:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:13:59:74:b9:57:67:a6:22:6f:80:25:25:de:4b:bf:7e:8b:1c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
        Validity
            Not Before: Dec  4 18:50:21 2023 GMT
            Not After : Dec  2 18:55:21 2024 GMT
        Subject: CN=B58C856DF5315FB3B1F5D95B934A880FA613E596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:0f:66:c1:57:a9:08:f7:96:8b:34:98:d5:
                    f8:00:17:b1:d7:c4:fa:f6:e3:b6:7f:98:a6:16:7c:
                    57:39:ac:99:76:55:66:4d:8c:0f:8a:f0:74:f7:6a:
                    4f:ff:f4:dd:cf:cc:1d:62:f6:ab:a0:21:c9:d5:ff:
                    a9:c1:2e:73:ce:81:46:29:3f:4c:cb:b0:55:cb:26:
                    9d:e4:58:f3:bf:42:25:42:0d:cc:45:f2:5e:06:95:
                    0d:24:68:44:20:fa:be:43:e8:7e:8b:19:50:d4:62:
                    f6:d5:21:42:30:43:b0:0c:a3:8c:c4:eb:1d:99:20:
                    6c:46:fb:34:86:7e:a8:0e:01:bc:8a:b7:ab:b1:a0:
                    17:f2:e2:3d:15:14:59:a6:d9:f8:3b:8d:90:ea:84:
                    cb:ef:62:7d:6f:00:f5:15:d5:32:17:e4:0e:c7:3a:
                    18:0c:34:2d:68:57:59:80:70:ec:95:5a:dc:54:65:
                    44:0c:d2:a5:e1:68:f4:3f:0f:1f:c1:7a:28:ba:26:
                    00:d0:e1:96:b6:c4:1c:24:4c:b7:aa:ce:a1:69:d0:
                    b7:e1:aa:66:28:03:e0:1f:6c:cb:2c:01:8c:9a:e3:
                    30:58:6e:67:b9:ef:36:a7:41:a1:f1:93:a7:ee:37:
                    67:a9:77:fd:bb:35:93:21:5c:f2:5b:0c:03:a9:dc:
                    37:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8C:85:6D:F5:31:5F:B3:B1:F5:D9:5B:93:4A:88:0F:A6:13:E5:96
            X509v3 Authority Key Identifier:
                keyid:B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a393030303a3a2f33362d3336203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:95:c3:32:ed:e6:23:d8:6d:84:10:2f:b8:f9:ec:91:59:fc:
         9b:0f:91:69:6d:ee:95:f3:87:e5:65:e6:2c:eb:33:f2:1b:bd:
         47:04:f6:88:96:82:45:c1:49:60:c8:b3:c5:b5:2b:6b:3d:a4:
         3d:4f:78:ee:07:1c:bf:96:bb:ae:59:0c:9f:92:1e:f9:6f:29:
         11:3c:26:24:49:5e:bf:59:1d:31:02:6f:15:be:99:51:30:45:
         69:de:6d:7c:c7:ae:23:7c:db:91:84:c3:b3:bc:4d:44:cc:f9:
         1b:44:35:51:28:d6:42:54:82:be:67:fa:c4:79:85:a0:8a:65:
         ce:ef:4c:56:9b:46:49:f8:37:24:bd:27:6e:3c:14:94:f8:f5:
         d5:7f:8a:25:2b:b6:20:00:8f:98:81:e9:74:84:ab:c3:ea:f8:
         3e:fe:64:42:3e:40:69:93:14:4d:c2:7d:71:7b:55:0a:46:20:
         4f:3d:19:8c:9a:9d:c7:32:7c:78:66:c4:e4:6f:70:69:7f:a8:
         ff:5e:3c:59:23:49:b6:f5:1e:43:3a:22:d2:34:7f:16:14:8c:
         44:4a:f8:b5:7b:ab:29:51:c2:1b:9e:5a:f9:b6:53:ac:e4:33:
         c3:7c:c2:a6:f5:a4:1c:62:50:36:88:fc:bb:92:80:1c:ef:4a:
         6e:10:df:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org