Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a343030303a3a2f33342d3334203d3e203631363134.roa
File:                     323830343a346166633a343030303a3a2f33342d3334203d3e203631363134.roa (raw, json)
Hash identifier:          qsf7bWK8pnmAfsfVObRkzmPn0jf6IblUcj5ZRgn1Qo0=
Subject key identifier:   6F:87:EA:6A:2A:8A:80:AA:B8:22:7C:BF:66:0A:F3:DF:B9:45:31:43
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       67DBE75CFAFB552749D1EBF9F7020C75FC3B162A
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a343030303a3a2f33342d3334203d3e203631363134.roa
Signing time:             Mon 11 Sep 2023 11:20:12 +0000
ROA not before:           Mon 11 Sep 2023 11:15:12 +0000
ROA not after:            Mon 09 Sep 2024 11:20:12 +0000
asID:                     61614
IP address blocks:        2804:4afc:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:db:e7:5c:fa:fb:55:27:49:d1:eb:f9:f7:02:0c:75:fc:3b:16:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Sep 11 11:15:12 2023 GMT
            Not After : Sep  9 11:20:12 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:d6:89:32:2d:24:b5:6e:09:35:a4:dc:dd:
                    ab:81:c4:a3:ab:d4:e6:7c:e1:12:d4:5f:5d:86:74:
                    7d:2c:09:92:c0:a8:f9:43:24:13:7b:3b:8c:d6:c2:
                    cc:81:f7:cc:a2:e2:f8:de:f9:25:37:da:5b:84:0c:
                    fb:cc:0a:1c:dd:77:ff:ca:f3:05:f9:73:c1:46:b9:
                    44:eb:11:8c:44:23:73:58:24:43:4e:2d:d8:59:d1:
                    69:e8:ca:67:de:7e:f7:1c:5f:54:fc:5b:c7:95:a8:
                    75:a0:b1:27:fa:98:1c:4c:9b:0c:d7:8a:4a:4c:74:
                    c7:69:a9:1f:c7:b5:8d:94:6f:36:64:6f:f9:e8:b1:
                    51:48:67:db:9e:ea:8b:e2:a0:2f:df:1d:1f:50:39:
                    09:a0:81:9c:3c:75:2c:e8:b8:0e:00:9f:43:9c:e9:
                    4a:15:e5:e5:0e:8e:50:26:a7:fb:58:50:9b:ca:a2:
                    5c:95:9c:85:06:34:22:1a:9a:9d:32:16:71:ef:8a:
                    bb:b2:2a:5a:ce:ca:4b:2c:0c:fd:ff:a4:55:af:38:
                    5e:fa:02:19:67:42:3c:34:15:c1:c1:1a:7e:c6:ff:
                    25:c8:90:d1:37:e8:84:8c:e3:92:d1:10:f5:8e:ae:
                    33:f1:ef:f8:aa:a7:bf:12:92:e4:11:5c:0b:15:97:
                    93:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:87:EA:6A:2A:8A:80:AA:B8:22:7C:BF:66:0A:F3:DF:B9:45:31:43
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a343030303a3a2f33342d3334203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         10:a1:26:8d:52:92:39:1e:b8:d0:c5:0f:c2:b3:5f:81:10:cb:
         09:4c:bb:37:b2:af:c9:93:b3:50:1b:8d:fd:66:cf:5e:f3:88:
         bb:58:d2:58:cf:b3:fe:9c:da:1d:55:9a:3b:cf:05:e2:a9:d5:
         92:ad:6d:47:3b:9c:7c:57:cd:db:4c:4c:2a:3c:58:37:3e:fd:
         59:9d:d0:03:93:d9:3a:76:0b:84:c0:68:65:0d:c9:92:e8:12:
         20:05:9a:5b:c1:69:68:16:2e:fa:e6:ba:9d:e7:0f:63:f6:3e:
         94:0d:08:88:7f:28:8f:50:f7:87:e6:0f:d4:c2:63:5a:e9:ce:
         11:58:7e:29:91:85:24:ee:4c:04:4f:ef:e8:b0:7a:8b:9c:5d:
         d1:75:e9:e7:0f:a1:ad:77:8a:35:0c:fb:78:d7:94:d3:f3:be:
         f3:01:ae:0c:e5:9e:01:0a:30:29:f6:60:40:e5:2a:fb:79:9f:
         3e:50:fa:5c:ae:eb:a5:ab:d8:71:18:98:54:05:cb:99:59:89:
         e3:17:a6:33:e7:65:31:a1:0c:e1:43:36:c6:97:41:62:32:80:
         ce:87:f2:f3:58:4b:7c:fb:4b:67:00:0c:1e:6e:4c:ed:18:a4:
         73:56:9e:d8:b1:d7:5e:29:9d:bb:69:0b:30:b2:e0:39:92:59:
         fc:5a:0e:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org