Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/323830343a356635343a3a2f33322d3634203d3e20323639303932.roa
File:                     323830343a356635343a3a2f33322d3634203d3e20323639303932.roa (raw, json)
Hash identifier:          iwQL1wWYc0593M7JRZ8C2DNwa6sLV18bw1XZ7nvbDeY=
Subject key identifier:   BE:6F:1B:8F:20:8C:EF:B6:38:35:2C:33:A5:10:17:F0:00:F2:1E:4A
Certificate issuer:       /CN=0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2
Certificate serial:       40376A448B2C46412A4B8F292820FB8E248B316E
Authority key identifier: 0B:AC:CC:82:5F:DD:05:ED:BA:63:39:74:4B:99:BF:3D:A9:3B:E7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/323830343a356635343a3a2f33322d3634203d3e20323639303932.roa
Signing time:             Mon 23 Oct 2023 20:47:13 +0000
ROA not before:           Mon 23 Oct 2023 20:42:13 +0000
ROA not after:            Mon 21 Oct 2024 20:47:13 +0000
asID:                     269092
IP address blocks:        2804:5f54::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:37:6a:44:8b:2c:46:41:2a:4b:8f:29:28:20:fb:8e:24:8b:31:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2
        Validity
            Not Before: Oct 23 20:42:13 2023 GMT
            Not After : Oct 21 20:47:13 2024 GMT
        Subject: CN=BE6F1B8F208CEFB638352C33A51017F000F21E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:67:96:0d:db:a6:37:49:d1:e9:23:3a:e7:
                    aa:0d:08:1a:dd:36:84:00:1b:2a:95:06:8f:73:6a:
                    c3:b1:e8:56:8f:4d:67:56:80:40:6c:b9:4a:56:68:
                    05:46:9a:df:3f:45:bd:64:7e:7f:2a:b7:1b:69:41:
                    d5:14:be:8b:9f:4b:3b:a2:98:69:a4:2e:cd:1e:7a:
                    7f:98:83:77:7c:29:38:37:5f:ae:dc:85:68:89:da:
                    55:1a:7d:d5:b8:55:43:c8:25:19:77:33:2b:04:b7:
                    8f:3e:1e:f4:d4:fd:04:be:a3:39:0d:79:a8:6a:5d:
                    95:67:80:88:1d:f2:a5:39:2b:78:ba:f1:d2:33:7d:
                    4b:77:48:6e:eb:a5:09:b3:6e:3a:3f:7e:7f:40:a6:
                    0d:f9:4b:3a:98:89:6e:4c:82:0d:be:bb:13:01:18:
                    47:cc:f7:9a:70:8c:6d:c8:1c:f2:2f:83:cf:28:52:
                    e8:7d:60:87:3a:c1:39:bd:ac:85:0b:06:96:87:59:
                    46:32:bf:55:05:0a:3f:f3:0a:3f:1a:b3:3c:ee:c4:
                    ba:90:86:c6:ff:e7:2c:8b:c5:e7:00:77:5e:97:2d:
                    3b:7e:5e:14:77:f9:e4:e4:97:f0:42:4f:dd:3b:56:
                    c5:eb:7a:36:29:45:2a:73:18:d1:c0:2f:3e:58:de:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6F:1B:8F:20:8C:EF:B6:38:35:2C:33:A5:10:17:F0:00:F2:1E:4A
            X509v3 Authority Key Identifier:
                keyid:0B:AC:CC:82:5F:DD:05:ED:BA:63:39:74:4B:99:BF:3D:A9:3B:E7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/323830343a356635343a3a2f33322d3634203d3e20323639303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:a3:70:75:81:8f:f7:d8:79:e3:2c:2a:03:47:c1:6d:34:f8:
         48:58:f8:c2:c1:e1:f5:35:d4:b4:e2:86:80:fc:3f:4c:a6:53:
         d3:e3:6f:dd:f2:6d:dd:bb:7f:2d:cd:ee:8a:5a:d1:70:0e:8e:
         36:43:97:86:6d:4b:a3:84:9c:f6:fd:4f:aa:50:93:6d:8a:0b:
         aa:1c:2f:8d:d0:8d:5b:a6:b6:90:b2:3e:bc:68:80:7b:96:1e:
         4a:15:9f:a2:f8:be:32:24:9a:4e:73:52:bb:46:85:81:dd:29:
         f5:0d:c7:98:fe:f4:3e:16:6a:8e:23:4a:59:8e:ad:67:f5:64:
         ad:0e:c9:88:28:f7:24:29:25:a6:c8:8f:77:4e:b9:20:48:41:
         9f:18:26:ba:32:63:30:d2:47:68:fe:e3:3a:18:26:c8:6e:c9:
         69:97:ef:2f:27:be:5d:e0:af:28:86:a6:5e:a9:fa:94:a8:ba:
         d8:05:64:81:c7:5e:3b:a8:9a:7c:a0:78:92:ed:b4:ab:57:26:
         57:74:d3:c8:ac:53:3b:1e:d2:32:c8:48:c5:7f:d1:5f:2a:1e:
         48:cf:ed:8f:46:58:4b:0c:bb:9d:e5:a8:22:ba:be:13:1b:2f:
         33:71:1f:cf:13:38:04:91:26:cc:a9:f5:74:72:76:c3:1c:ca:
         21:ca:19:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org