Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a313432343a3a2f33332d3333203d3e203532393430.roa
File:                     323830343a313432343a3a2f33332d3333203d3e203532393430.roa (raw, json)
Hash identifier:          WyM24CLHZ6nocg2iDUn7myZWvd0HreKKfqzldmrLRt8=
Subject key identifier:   46:44:7C:28:9C:F5:22:7A:E6:4D:35:8C:A4:FB:7A:E6:B5:B5:05:05
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       46DB1D230D29EB379D2693841913847CBB8CB47E
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a313432343a3a2f33332d3333203d3e203532393430.roa
Signing time:             Tue 22 Aug 2023 18:26:37 +0000
ROA not before:           Tue 22 Aug 2023 18:21:37 +0000
ROA not after:            Tue 20 Aug 2024 18:26:37 +0000
asID:                     52940
IP address blocks:        2804:1424::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:db:1d:23:0d:29:eb:37:9d:26:93:84:19:13:84:7c:bb:8c:b4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Aug 22 18:21:37 2023 GMT
            Not After : Aug 20 18:26:37 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:0e:90:50:8c:ab:45:7a:e4:5e:d4:24:0d:
                    25:00:58:12:be:a1:4a:11:c1:4a:b1:b3:56:d3:12:
                    bf:8f:88:4a:5f:91:7e:c6:d7:c2:4c:03:1d:ab:7f:
                    eb:e7:96:50:5f:f5:28:7a:d4:f1:9a:4e:e0:33:ec:
                    d9:3a:f4:e3:5d:09:d2:1e:f2:d2:93:3f:dd:11:6d:
                    72:33:a5:10:d3:76:20:30:2a:4e:99:27:09:6d:b3:
                    9b:21:c4:fe:4a:8a:76:6c:85:21:69:8a:43:90:e3:
                    51:f2:69:a6:59:cf:ac:89:a4:df:8a:35:27:e9:62:
                    7d:5c:54:c9:e8:e4:a3:f9:0f:41:61:95:42:2c:30:
                    d1:05:13:af:c1:ee:eb:cf:84:28:dc:39:02:72:ec:
                    3a:cc:97:dc:36:59:47:60:7c:55:c5:21:bf:d7:fa:
                    53:cf:32:92:89:5a:36:e1:b0:03:10:e3:5a:49:9b:
                    01:88:7c:5c:6f:b8:cc:bc:85:78:9b:6a:13:68:88:
                    12:7a:13:75:02:e5:fa:97:8e:53:59:12:83:af:4c:
                    3d:8a:ad:da:90:31:c2:e6:d4:12:57:af:97:c1:3d:
                    6b:62:f3:75:06:37:58:6b:b8:1b:26:f7:b0:37:61:
                    81:2a:53:8b:5a:89:9c:c5:b4:5e:f3:0b:23:ef:d3:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:44:7C:28:9C:F5:22:7A:E6:4D:35:8C:A4:FB:7A:E6:B5:B5:05:05
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a313432343a3a2f33332d3333203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1424::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:d8:d3:70:4a:2e:e2:bb:f0:0c:c2:30:73:20:ea:3e:c1:77:
         70:e7:c7:99:9f:7c:ef:69:db:a2:2a:13:1d:94:1d:2b:f4:ff:
         8f:38:0a:a2:dc:d3:79:c7:f1:cd:2f:b4:a0:0f:90:6d:93:fa:
         18:16:ab:ee:53:02:53:26:0a:a1:61:6d:52:70:ad:42:de:b5:
         7f:6b:5e:04:43:d0:67:a0:b8:57:d0:67:6b:2a:76:f5:f6:a0:
         d4:17:08:13:61:2d:71:a3:75:0e:d4:df:d1:95:4c:64:38:d2:
         be:ad:5f:99:0a:7b:3d:01:7d:07:af:ed:29:ad:10:9d:cc:9d:
         d8:63:b6:39:28:77:ca:2e:06:c4:e0:8b:67:5a:34:b3:4d:7a:
         78:31:2d:f2:fe:32:a6:d1:6b:c5:62:d9:be:d4:d2:b3:2d:dd:
         7c:0f:ea:b3:89:d7:3e:1f:f8:10:27:ba:c5:e5:4e:aa:e4:2d:
         7f:85:4a:a8:a3:14:48:5d:61:83:aa:21:88:f7:83:39:6e:e6:
         78:21:0e:1e:6b:c7:59:67:84:56:2f:7c:90:79:ef:c2:5f:f9:
         a9:d6:12:b7:f7:e9:97:4d:de:3d:3d:53:92:a0:69:62:37:7d:
         66:6c:3c:f2:d7:ca:55:08:09:d3:97:44:99:e4:ca:1b:89:df:
         69:27:fe:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org