Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a633030303a3a2f33352d3335203d3e20323637323736.roa
File:                     323830343a346166633a633030303a3a2f33352d3335203d3e20323637323736.roa (raw, json)
Hash identifier:          vBliSuX8oLzSmA66dt2jI3zyNEVLNqMrz0dNVGYrFzk=
Subject key identifier:   8D:70:B4:D9:49:9C:D6:27:D4:EF:BE:E3:4E:DC:F6:1C:14:96:8B:D7
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       6FF8ED094DE7FDE22AF3DD23B605DE8E65105A13
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a633030303a3a2f33352d3335203d3e20323637323736.roa
Signing time:             Wed 07 Jun 2023 17:37:10 +0000
ROA not before:           Wed 07 Jun 2023 17:32:10 +0000
ROA not after:            Wed 05 Jun 2024 17:37:10 +0000
asID:                     267276
IP address blocks:        2804:4afc:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f8:ed:09:4d:e7:fd:e2:2a:f3:dd:23:b6:05:de:8e:65:10:5a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Jun  7 17:32:10 2023 GMT
            Not After : Jun  5 17:37:10 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:2e:4d:11:66:29:a0:a7:e4:7f:6c:53:6f:
                    75:9c:11:85:1b:ea:46:b9:83:e4:ef:40:8d:a6:d1:
                    54:ef:67:1d:76:1d:43:18:ea:ec:a3:b2:a5:50:e0:
                    0d:99:d1:a4:c8:b7:44:98:6f:69:be:07:5d:e2:19:
                    97:c5:bf:9b:a5:5c:6e:5c:70:f9:17:d3:fa:0d:d2:
                    3c:18:34:29:02:bb:ff:c1:a5:97:8a:47:ea:19:67:
                    d4:fe:32:96:5f:a4:b8:01:0a:f6:90:a0:d8:03:60:
                    8e:c9:12:62:ba:8f:82:f7:ea:56:93:8f:a8:d6:1f:
                    ee:bf:b2:03:b5:3d:74:5a:b5:3a:e7:91:cd:d0:38:
                    33:41:5b:9d:33:90:75:6e:81:71:82:dc:90:fc:77:
                    10:5c:7c:93:5f:f2:6e:d4:d6:9e:71:56:2b:4a:76:
                    98:ad:68:4b:92:37:5d:14:85:f6:df:2f:20:55:6e:
                    bd:e9:af:e7:fc:88:ee:df:7c:43:20:d2:73:de:a4:
                    82:48:4c:35:35:4a:70:90:91:f1:48:0b:d6:b4:64:
                    6f:17:60:30:73:17:f4:b3:72:3c:72:03:a8:18:a6:
                    ba:b2:cb:12:82:9b:ad:b0:3d:78:e6:59:23:54:5d:
                    00:ce:50:f6:fb:15:cb:91:ea:91:0c:50:ed:79:46:
                    20:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:70:B4:D9:49:9C:D6:27:D4:EF:BE:E3:4E:DC:F6:1C:14:96:8B:D7
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a633030303a3a2f33352d3335203d3e20323637323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         54:a8:47:87:56:ba:61:40:d8:cb:63:c7:77:81:12:c2:ff:3a:
         17:ec:a0:19:8c:0d:1c:c0:27:83:87:ef:dc:d6:73:84:2b:f7:
         57:26:13:d9:4b:94:38:04:dd:26:d7:3a:84:e7:c9:5b:4d:1d:
         66:40:a6:ca:4f:3f:70:53:55:92:e1:e5:93:3f:9f:96:ce:bc:
         50:55:9c:8d:0f:2d:e9:aa:e9:bb:39:7a:80:0f:f2:c5:f8:47:
         b9:59:fd:5a:d5:51:37:f8:bf:5c:2a:24:0c:c3:e7:4f:00:9d:
         87:9e:cf:44:ef:83:67:3e:97:fc:23:b1:5f:05:00:34:33:94:
         56:17:77:5f:7d:10:6b:04:d4:32:4c:ad:17:18:ec:ef:22:0f:
         ef:6c:e8:96:49:c1:2f:e5:f0:5a:2d:92:57:65:f6:06:29:12:
         c1:06:0a:ac:ad:ef:fd:97:6e:ab:9f:02:e1:c1:71:ea:95:e5:
         ca:45:d2:4b:0b:cb:08:4f:b0:b1:d5:7e:d5:5e:dc:2d:f3:4c:
         91:06:e5:9a:60:fc:cb:e1:16:93:eb:d0:25:70:87:3f:0f:42:
         a9:3e:88:2e:68:79:26:01:f7:b1:51:3a:69:8b:d7:5c:a6:f8:
         4a:04:24:23:0e:ad:b2:8e:f7:75:3a:92:c3:da:f0:ba:6d:21:
         3b:a1:0e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org