Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/323830343a346131633a3a2f33322d3332203d3e20323637323139.roa
File:                     323830343a346131633a3a2f33322d3332203d3e20323637323139.roa (raw, json)
Hash identifier:          fCV/66luDXxtakEH1W9exQuAtg8GiFuIL4P/DCo9WkM=
Subject key identifier:   3A:40:03:86:83:B0:BF:9A:49:54:33:59:6B:3B:62:76:E6:FD:36:87
Certificate issuer:       /CN=BBE92D739A5257115139F5983820BA7CAF473B40
Certificate serial:       2EBEFEA749908D2AB7FA61DC766858D947247735
Authority key identifier: BB:E9:2D:73:9A:52:57:11:51:39:F5:98:38:20:BA:7C:AF:47:3B:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBE92D739A5257115139F5983820BA7CAF473B40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/323830343a346131633a3a2f33322d3332203d3e20323637323139.roa
Signing time:             Fri 21 Jul 2023 18:43:48 +0000
ROA not before:           Fri 21 Jul 2023 18:38:48 +0000
ROA not after:            Fri 19 Jul 2024 18:43:48 +0000
asID:                     267219
IP address blocks:        2804:4a1c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:be:fe:a7:49:90:8d:2a:b7:fa:61:dc:76:68:58:d9:47:24:77:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBE92D739A5257115139F5983820BA7CAF473B40
        Validity
            Not Before: Jul 21 18:38:48 2023 GMT
            Not After : Jul 19 18:43:48 2024 GMT
        Subject: CN=3A40038683B0BF9A495433596B3B6276E6FD3687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:22:20:c0:54:68:b8:31:d2:ce:ba:10:55:8a:
                    fa:6d:72:c5:f5:1f:71:69:15:6c:3e:7b:cc:99:ab:
                    77:0e:72:11:83:91:82:54:51:6d:be:e1:1f:7b:e2:
                    a6:41:77:78:da:4e:49:3d:1d:ef:1b:50:06:85:04:
                    74:b3:c8:e6:7a:8e:f1:89:a4:e4:31:a4:ad:3f:14:
                    79:4a:e6:35:de:a8:14:e2:f8:b5:bb:20:b3:b7:69:
                    ef:f8:7c:ff:dc:fd:bc:52:07:25:ac:8c:94:88:02:
                    da:08:2f:43:6e:3e:9b:49:96:0b:8f:5f:9d:6c:2a:
                    1f:9d:3e:7a:a1:67:d2:28:5d:dd:a8:f5:29:c6:10:
                    2e:66:de:4f:34:ea:b0:b4:1d:8b:69:87:32:5c:7e:
                    a2:f5:73:61:49:e6:07:2b:38:a8:28:3d:6f:28:79:
                    f3:c9:aa:63:52:7b:71:6d:59:da:68:5b:86:3f:82:
                    28:4e:b8:b2:ef:e7:e5:5e:8d:7b:16:4b:a9:41:47:
                    42:f8:66:4e:ba:0d:be:c4:75:27:f1:71:31:0c:43:
                    cc:44:4a:6a:a6:bd:cb:d9:ba:2f:79:db:7a:f9:15:
                    9c:63:ea:43:92:00:38:fb:65:30:9f:98:01:4d:20:
                    6e:4b:cf:d6:43:cb:5c:19:de:ae:02:68:7f:57:bc:
                    7b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:40:03:86:83:B0:BF:9A:49:54:33:59:6B:3B:62:76:E6:FD:36:87
            X509v3 Authority Key Identifier:
                keyid:BB:E9:2D:73:9A:52:57:11:51:39:F5:98:38:20:BA:7C:AF:47:3B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/BBE92D739A5257115139F5983820BA7CAF473B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBE92D739A5257115139F5983820BA7CAF473B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/323830343a346131633a3a2f33322d3332203d3e20323637323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:92:41:59:7f:b9:dd:bd:a6:00:6d:e5:79:d2:06:bc:f7:12:
         9c:29:9e:0d:47:bf:38:d1:16:88:60:f3:cb:a1:65:95:74:e3:
         9b:1a:1a:ff:6e:4d:30:da:ff:1b:2e:45:22:cb:72:41:c5:45:
         7f:9c:40:3b:ac:2b:8c:ce:da:e1:49:90:76:41:35:16:1f:4d:
         f9:f4:3a:53:99:94:a7:a7:af:5a:ec:bf:7f:60:2e:98:9d:36:
         db:d7:73:ea:8a:90:98:7d:59:70:4d:5a:fd:0d:8a:88:bf:00:
         28:e9:48:f0:1b:ca:db:2a:56:bd:9f:4c:94:ad:01:a5:52:a3:
         85:eb:7d:cc:c5:7b:81:e2:b2:0d:d4:59:67:52:87:b5:28:97:
         07:d3:93:7d:58:4f:ce:91:d8:c4:e4:60:50:7b:a3:dc:58:b5:
         58:f7:1c:b1:97:76:47:a1:17:2d:2c:8b:6c:f7:59:ef:7a:4d:
         e3:65:12:99:11:ba:13:1a:04:97:71:67:c0:08:4e:6b:96:5e:
         27:d4:32:df:d9:8f:75:b7:60:65:25:6a:88:de:a2:a9:8d:e6:
         8e:c7:0f:62:82:a4:19:94:a1:5a:12:22:46:f6:df:23:67:8f:
         51:7f:63:42:9d:d7:89:e7:f2:5e:c8:19:a7:85:88:3b:a8:38:
         c6:04:06:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org