Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/323830343a343335343a3a2f33322d3332203d3e20323637353633.roa
File:                     323830343a343335343a3a2f33322d3332203d3e20323637353633.roa (raw, json)
Hash identifier:          i+2269B+KAQvp34c21PvY7SR+YLUPCizxnkI5rGyNgg=
Subject key identifier:   BB:B3:71:00:15:6A:7A:0B:C0:47:C6:38:7C:CC:72:D9:1E:73:D3:99
Certificate issuer:       /CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
Certificate serial:       4121E0316B1258A5D8C734017754F8847CDC6800
Authority key identifier: 73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/323830343a343335343a3a2f33322d3332203d3e20323637353633.roa
Signing time:             Tue 08 Aug 2023 12:59:54 +0000
ROA not before:           Tue 08 Aug 2023 12:54:54 +0000
ROA not after:            Tue 06 Aug 2024 12:59:54 +0000
asID:                     267563
IP address blocks:        2804:4354::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:21:e0:31:6b:12:58:a5:d8:c7:34:01:77:54:f8:84:7c:dc:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
        Validity
            Not Before: Aug  8 12:54:54 2023 GMT
            Not After : Aug  6 12:59:54 2024 GMT
        Subject: CN=BBB37100156A7A0BC047C6387CCC72D91E73D399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:00:26:c8:c7:88:e9:fd:57:52:70:9f:40:08:
                    9c:f4:df:fb:36:54:e1:31:06:2e:4d:c1:71:8c:09:
                    aa:94:a8:eb:db:de:c9:e4:fe:51:a0:12:b8:0a:3f:
                    93:85:d7:59:79:7b:52:f4:5f:4b:c8:50:16:f8:4a:
                    ee:6e:45:dc:05:7e:a9:a0:4b:48:96:b7:31:1d:d9:
                    d9:67:01:c3:5b:70:f7:18:f1:2b:ba:7e:ab:a1:8b:
                    1e:4a:c9:42:92:7c:33:ca:84:fc:81:4d:92:04:fe:
                    f5:5a:6a:ea:e9:e1:d7:e8:87:58:84:3f:e5:e3:8f:
                    e4:73:1a:83:5e:4f:06:67:f5:9f:c0:b5:db:18:0a:
                    6b:03:1d:b2:e5:d3:85:13:76:0c:ee:07:b8:cc:38:
                    13:c3:be:9a:d6:ca:73:77:db:ba:dc:5a:27:7a:b8:
                    3d:7c:a8:f0:18:c1:df:f6:e9:ee:ff:79:c0:30:62:
                    12:b4:25:57:77:71:dc:40:90:a4:51:61:9f:28:a2:
                    46:e6:b9:4c:f3:7a:67:fb:01:80:a8:8e:9e:ea:55:
                    d4:fd:74:ed:9c:f3:ce:06:44:1c:9a:1e:c2:8d:ab:
                    51:1f:86:2f:09:9c:66:ee:bb:0c:e6:1e:97:83:c6:
                    aa:c3:bd:6c:3a:19:46:fb:70:d3:e4:2a:c3:c5:46:
                    c9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B3:71:00:15:6A:7A:0B:C0:47:C6:38:7C:CC:72:D9:1E:73:D3:99
            X509v3 Authority Key Identifier:
                keyid:73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/323830343a343335343a3a2f33322d3332203d3e20323637353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4354::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:14:a3:26:59:32:ab:82:60:17:af:00:6d:1c:4a:ff:a0:b4:
         5f:9b:e9:bf:9e:68:92:3c:f5:90:80:e6:a2:6d:b3:5b:85:74:
         04:da:67:8e:56:8f:3c:e9:05:20:d6:9a:0e:87:78:b8:f9:eb:
         98:9c:03:72:3a:79:fd:38:c0:70:dc:35:82:86:88:9a:50:ad:
         5d:8f:b8:99:55:58:86:ce:d3:0e:09:39:ce:81:70:34:44:61:
         76:f9:bf:2e:23:1e:22:5d:85:15:ac:48:01:7f:cb:9b:68:63:
         4f:a6:1c:0e:9a:cb:30:2e:54:c1:24:ec:e0:78:df:29:5d:b3:
         d5:35:df:95:ac:f4:54:1d:38:4a:ed:5c:37:3d:d3:a1:3e:9e:
         21:03:3f:33:98:53:82:02:86:a2:2c:8d:50:c3:fa:d5:85:17:
         5e:4c:37:95:f4:36:ec:38:22:7f:64:2b:16:af:60:9a:cc:ce:
         99:44:ba:a0:0b:72:2e:c7:5b:1d:21:c6:b7:91:48:bb:c0:87:
         ef:4d:3a:c1:35:e7:ec:3d:fe:0c:d8:38:03:36:50:71:ef:fe:
         94:90:84:75:5f:e8:c8:cd:c9:b3:07:7e:c5:9b:f8:94:a1:e5:
         7b:51:83:8c:13:fe:b2:5b:16:a5:26:c9:4a:42:01:d1:32:b8:
         46:81:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org