Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33332d3333203d3e203631363134.roa
File:                     323830343a346166633a3a2f33332d3333203d3e203631363134.roa (raw, json)
Hash identifier:          pOr5Z+2w2WRRM6ApZbJUvzs1Ge/wHYMpLhYjwJ3Eq18=
Subject key identifier:   88:A2:ED:AE:26:6E:68:33:DF:61:05:64:77:74:8C:14:D9:7C:B8:65
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       5808323184822B615BC883B1F68FC26F769D4622
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33332d3333203d3e203631363134.roa
Signing time:             Mon 11 Sep 2023 11:20:11 +0000
ROA not before:           Mon 11 Sep 2023 11:15:11 +0000
ROA not after:            Mon 09 Sep 2024 11:20:11 +0000
asID:                     61614
IP address blocks:        2804:4afc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:08:32:31:84:82:2b:61:5b:c8:83:b1:f6:8f:c2:6f:76:9d:46:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Sep 11 11:15:11 2023 GMT
            Not After : Sep  9 11:20:11 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:55:ff:16:96:7d:e1:2a:1b:d9:2a:12:44:1f:
                    89:83:05:86:59:5c:da:a5:1d:1c:97:cc:d8:8e:37:
                    b5:7d:cc:23:1d:07:99:fb:4e:99:de:f5:7e:93:89:
                    4d:c5:35:03:c9:0f:d1:ff:fc:db:50:00:70:c9:00:
                    d3:d3:32:7c:d8:66:58:dc:84:5d:5d:eb:f7:d7:d1:
                    9b:44:1b:a8:37:65:e6:41:50:38:10:7b:c9:1f:3a:
                    5e:21:07:cf:28:20:76:9a:ad:bd:a6:cc:4b:3a:a3:
                    3e:2e:9b:e9:64:99:f4:41:1b:43:07:9c:e9:e7:b9:
                    b7:1c:75:e6:ee:2e:73:26:b5:b3:10:8b:ca:79:29:
                    b2:80:cf:ad:b8:42:76:91:cf:76:5a:7e:fb:a9:05:
                    e6:68:54:de:99:7b:32:9a:22:ed:08:51:29:32:76:
                    46:95:49:66:a7:40:27:3a:45:5a:1e:27:ee:8d:2f:
                    a0:b0:dd:b3:24:e2:03:a5:92:f1:a5:e4:b2:ec:e6:
                    b5:0d:14:b8:48:db:64:68:16:3f:a3:dc:3c:43:07:
                    88:dc:28:ea:af:66:b1:23:d3:74:81:37:6a:28:81:
                    8c:3d:f1:d1:dd:f9:fd:7c:1e:e6:fb:7d:ce:3b:c8:
                    e7:13:56:0d:7a:2a:c0:46:94:23:68:99:51:85:ed:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A2:ED:AE:26:6E:68:33:DF:61:05:64:77:74:8C:14:D9:7C:B8:65
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33332d3333203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc::/33

    Signature Algorithm: sha256WithRSAEncryption
         31:4d:5b:8d:18:00:55:e2:5a:a1:d9:0f:a4:a9:36:a4:49:0b:
         1f:a7:f8:d6:7d:4e:1e:2c:b2:dd:14:1a:aa:30:69:97:ff:d4:
         87:a1:bf:42:39:97:a8:4a:3d:c2:10:51:5e:ba:04:05:a1:47:
         6c:e4:9b:8b:57:69:e5:3c:85:b3:19:73:e8:0b:a7:ba:b6:f8:
         80:d8:c8:a3:b6:a5:ef:a5:f2:70:e8:89:4a:ad:cf:82:b1:1a:
         63:87:04:4f:69:f9:f9:9e:3a:d8:ec:e3:b3:42:e5:c8:6b:18:
         66:2b:0b:85:8b:4b:44:6b:9a:d8:0f:dd:d0:21:30:d7:b9:3a:
         9d:92:50:ea:41:9c:3f:24:f4:5e:ba:6d:cd:a3:04:da:35:db:
         82:3c:a9:5e:7e:97:7c:b3:68:29:bc:48:7d:a7:af:03:a8:e4:
         96:5d:ef:cd:84:cc:8e:cd:33:0a:a5:3e:16:3c:e1:4d:6e:6c:
         a8:a5:59:ac:22:be:ef:ef:93:52:c8:02:f1:32:e1:c4:28:d0:
         8d:b1:06:b8:b2:94:61:56:ad:3b:4b:9d:e8:1a:5f:df:09:7e:
         39:92:65:40:dd:22:e1:43:79:8f:87:bf:8c:52:8c:76:a0:7d:
         91:26:4d:ca:cc:81:e5:c5:1a:f5:2d:d1:b2:77:d7:87:53:34:
         78:54:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org