Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/323830343a353361383a3a2f33322d3333203d3e20323638353938.roa
File:                     323830343a353361383a3a2f33322d3333203d3e20323638353938.roa (raw, json)
Hash identifier:          l39Ht6ppFp9i1/+5evMPGUZiG/CQV9xm4P0fQh1ep+U=
Subject key identifier:   2A:68:12:6F:D4:CB:4E:70:A2:66:53:79:0A:DE:53:F3:77:18:12:32
Certificate issuer:       /CN=BB036EE1ED900E7F5470199DFFD0CDED2316DE76
Certificate serial:       096117DB8FA0DC7ADCF00CF016F989FFE4906458
Authority key identifier: BB:03:6E:E1:ED:90:0E:7F:54:70:19:9D:FF:D0:CD:ED:23:16:DE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/323830343a353361383a3a2f33322d3333203d3e20323638353938.roa
Signing time:             Mon 13 Feb 2023 14:17:18 +0000
ROA not before:           Mon 13 Feb 2023 14:12:18 +0000
ROA not after:            Mon 12 Feb 2024 14:17:18 +0000
asID:                     268598
IP address blocks:        2804:53a8::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:61:17:db:8f:a0:dc:7a:dc:f0:0c:f0:16:f9:89:ff:e4:90:64:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB036EE1ED900E7F5470199DFFD0CDED2316DE76
        Validity
            Not Before: Feb 13 14:12:18 2023 GMT
            Not After : Feb 12 14:17:18 2024 GMT
        Subject: CN=2A68126FD4CB4E70A26653790ADE53F377181232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5d:27:c7:2d:31:bc:d3:c5:db:55:e4:d6:fe:
                    6b:34:2a:4b:f0:16:aa:94:ef:62:3f:fc:95:d4:72:
                    e0:48:b7:d7:b6:65:58:b0:75:b3:b4:aa:47:04:1b:
                    d4:e4:d1:a2:cc:10:7b:8b:93:34:7b:52:b4:f3:83:
                    ac:99:63:12:b0:f8:02:c7:a3:3d:e9:4b:d8:ad:ee:
                    a4:ca:3a:70:fd:24:ed:09:f5:2e:ae:ac:48:d0:77:
                    57:e0:28:cb:cf:65:69:41:44:09:d0:8f:9f:dd:aa:
                    db:d9:c9:fa:37:ad:68:c0:27:e0:e4:a2:96:9c:2f:
                    e8:ed:39:c5:0b:c2:5f:69:d5:40:9a:11:2b:2d:a4:
                    0d:9f:91:31:93:f2:a7:77:b5:98:20:1b:6d:ce:47:
                    aa:7d:8c:ef:f9:3d:6e:a6:24:d9:a6:2c:c2:30:98:
                    6d:62:ca:9c:4c:66:8e:6f:84:56:ef:da:53:17:71:
                    6a:c2:41:b3:f4:54:6a:b0:27:31:53:62:7d:5f:f5:
                    0f:6d:36:b6:77:a8:b4:80:dc:2d:84:7d:c8:e9:67:
                    2b:e5:fa:7a:ec:4d:f3:90:c5:2b:1c:03:ba:0f:99:
                    da:0b:3e:e4:d0:42:a5:bd:56:e9:0c:01:f4:bf:ef:
                    63:15:32:9a:52:d0:65:2c:df:96:9f:e3:ab:55:c3:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:68:12:6F:D4:CB:4E:70:A2:66:53:79:0A:DE:53:F3:77:18:12:32
            X509v3 Authority Key Identifier:
                keyid:BB:03:6E:E1:ED:90:0E:7F:54:70:19:9D:FF:D0:CD:ED:23:16:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/323830343a353361383a3a2f33322d3333203d3e20323638353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:63:8a:cb:7c:e7:bc:e6:f5:72:fa:fc:5a:19:ac:db:b9:31:
         a6:6f:76:9e:a4:ae:6d:4a:e2:a3:a8:03:6c:2f:2a:0c:d0:5a:
         34:26:95:92:e1:02:8a:b4:3a:b3:9e:ae:d5:5f:5e:3c:3c:9b:
         c5:5c:41:d8:aa:e0:87:ca:04:47:1f:33:b9:d0:23:af:cf:d8:
         11:e4:46:76:21:0d:7a:5b:d0:0d:b3:5a:27:05:8d:20:3a:23:
         e2:af:5f:ee:f5:84:34:cd:79:1e:ff:87:5a:a5:97:c7:cb:32:
         4f:da:55:c7:ef:6e:a1:da:71:3d:d6:20:d3:37:a1:f6:a7:f2:
         7f:56:32:f0:f0:aa:0e:cd:47:d1:5f:56:6b:73:d3:3f:e3:04:
         33:ee:b2:b4:33:2a:cb:e9:b2:b2:1b:dd:26:18:c8:70:50:c7:
         74:b9:f6:e8:05:75:2c:82:9c:fb:5f:29:77:a2:11:18:70:1b:
         c9:56:32:32:50:c6:b0:b8:a3:c3:f7:7e:ed:7c:54:6b:6f:d0:
         70:91:9c:77:0d:54:52:bf:2b:5e:89:d6:09:9e:6b:98:17:d5:
         a5:57:cb:8f:c8:f4:59:07:d4:b0:4b:bc:e4:69:47:59:45:84:
         fb:fb:5f:c8:d8:26:7f:32:db:20:61:c3:ec:44:29:4a:ab:fe:
         14:1a:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org