Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/323830343a313634343a3a2f33322d3438203d3e20323632393033.roa
File:                     323830343a313634343a3a2f33322d3438203d3e20323632393033.roa (raw, json)
Hash identifier:          IAeTf7ZYTEY1aHtRDIuDxNb+FARXCBdTWYFSGDyDNzs=
Subject key identifier:   C5:F3:4E:13:1F:C1:F7:01:5C:A3:F2:9A:B0:A0:37:E8:EF:2B:FB:94
Certificate issuer:       /CN=BA1DB4956D8F5EFAF0970F171D6763A286633C4F
Certificate serial:       4782634E418BE979247EBE278B347749C41AEAB4
Authority key identifier: BA:1D:B4:95:6D:8F:5E:FA:F0:97:0F:17:1D:67:63:A2:86:63:3C:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/323830343a313634343a3a2f33322d3438203d3e20323632393033.roa
Signing time:             Thu 24 Aug 2023 20:00:00 +0000
ROA not before:           Thu 24 Aug 2023 19:55:00 +0000
ROA not after:            Thu 22 Aug 2024 20:00:00 +0000
asID:                     262903
IP address blocks:        2804:1644::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:82:63:4e:41:8b:e9:79:24:7e:be:27:8b:34:77:49:c4:1a:ea:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1DB4956D8F5EFAF0970F171D6763A286633C4F
        Validity
            Not Before: Aug 24 19:55:00 2023 GMT
            Not After : Aug 22 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e0:7c:db:bf:df:da:b5:63:46:aa:a5:e4:8f:
                    ff:b5:d9:aa:32:56:55:21:bc:73:d8:b6:b2:a5:69:
                    60:cb:ca:b7:39:ac:11:3e:47:ef:a7:c0:d1:bb:c1:
                    e1:3b:e7:16:9d:94:84:20:71:ec:47:2f:90:a5:f9:
                    42:a0:a1:81:25:e2:0a:9d:1d:fd:5c:2b:4d:18:b2:
                    1b:09:49:96:2a:5b:a8:ea:eb:e8:36:34:74:af:da:
                    8d:b4:21:71:43:e0:f1:b6:67:1b:44:52:01:a4:75:
                    ae:64:ea:8a:ce:a5:4e:98:04:0a:d6:75:36:98:fc:
                    c4:16:22:5b:0e:75:aa:8e:cb:4f:7e:fa:c1:86:22:
                    17:98:2d:d8:df:43:80:ac:47:78:e8:89:ac:6a:d0:
                    47:ba:fa:c4:58:bd:c3:07:54:79:3a:09:c2:ed:1e:
                    91:fd:a2:83:60:27:83:69:36:03:02:df:e3:bd:34:
                    10:07:6e:5f:05:67:04:9a:a8:c2:65:c7:c6:d6:2f:
                    ac:af:3c:84:46:5d:11:19:4b:c3:58:68:0e:36:e4:
                    ae:9a:dd:29:7e:4c:b8:5e:ae:1f:cd:3b:62:11:de:
                    04:c2:c0:96:a7:4c:21:65:6e:81:67:ce:34:70:de:
                    23:72:bd:66:e2:b7:77:08:28:10:7d:83:35:89:e7:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F3:4E:13:1F:C1:F7:01:5C:A3:F2:9A:B0:A0:37:E8:EF:2B:FB:94
            X509v3 Authority Key Identifier:
                keyid:BA:1D:B4:95:6D:8F:5E:FA:F0:97:0F:17:1D:67:63:A2:86:63:3C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/323830343a313634343a3a2f33322d3438203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1644::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:b0:5f:fe:bc:4c:8b:7b:5f:ac:0c:eb:c2:9d:cd:da:4a:49:
         19:10:ee:14:d4:e0:f4:c9:f4:a7:97:c7:a8:47:e3:6c:02:fe:
         29:fc:94:2b:fb:83:3f:8d:8e:ff:37:11:f3:38:23:23:d3:5b:
         3c:40:de:2e:a5:a8:eb:01:84:5f:f9:87:b7:4a:a3:20:e2:9c:
         c0:39:a5:e2:a4:87:2f:10:e3:cb:6b:48:10:6e:e2:46:90:fc:
         f3:1f:1b:bf:45:46:f7:99:54:a1:c0:4e:fb:6d:1d:2a:70:e6:
         0a:c3:68:ca:5b:8a:c2:e5:86:b3:fc:c9:be:f1:7a:f3:cb:32:
         7a:4e:ed:c8:21:16:b4:96:a7:d4:81:2f:5a:a3:50:86:fa:36:
         0a:51:71:c6:12:9f:b5:ee:22:8b:7b:7e:d1:e8:d5:da:90:f7:
         c5:81:ac:4f:eb:6b:17:42:ab:7b:b3:32:39:58:1e:be:6b:35:
         22:70:3c:2c:63:58:f6:d6:26:00:b3:f2:c0:0a:1c:3b:91:a9:
         5e:1d:6c:c7:af:cb:79:2d:71:0d:44:27:c0:dd:99:53:79:d9:
         40:f3:48:fd:a8:6c:06:a3:e9:c2:98:6c:52:60:0f:f2:99:3e:
         b0:e8:a4:58:e4:d1:5d:c4:89:01:a5:bf:93:89:2d:9f:9d:fe:
         22:d5:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org