Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/323830343a376261303a3a2f33322d313238203d3e20323731343433.roa
File:                     323830343a376261303a3a2f33322d313238203d3e20323731343433.roa (raw, json)
Hash identifier:          n6ntGPmF20sYgDuSP4bdVY8HeBdD+Chka3OkGTuSYzY=
Subject key identifier:   F3:FC:A0:97:47:59:B0:88:8F:81:D4:8D:4E:32:A7:9C:AD:FC:C3:DE
Certificate issuer:       /CN=BDD55594F8052D5CA3F5F5869FE99F99CA0851F4
Certificate serial:       2F852560D36A41442499B3388FAA7763F111903D
Authority key identifier: BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/323830343a376261303a3a2f33322d313238203d3e20323731343433.roa
Signing time:             Tue 07 Mar 2023 21:59:57 +0000
ROA not before:           Tue 07 Mar 2023 21:54:57 +0000
ROA not after:            Tue 05 Mar 2024 21:59:57 +0000
asID:                     271443
IP address blocks:        2804:7ba0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:85:25:60:d3:6a:41:44:24:99:b3:38:8f:aa:77:63:f1:11:90:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDD55594F8052D5CA3F5F5869FE99F99CA0851F4
        Validity
            Not Before: Mar  7 21:54:57 2023 GMT
            Not After : Mar  5 21:59:57 2024 GMT
        Subject: CN=F3FCA0974759B0888F81D48D4E32A79CADFCC3DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:f6:71:23:cf:7f:61:0b:7a:c9:02:27:17:
                    0e:d9:84:81:96:87:00:9a:87:14:7d:cf:5a:1d:16:
                    33:e7:40:3d:97:b1:41:f5:cb:a1:51:e8:56:86:71:
                    10:00:4e:ab:82:f2:9b:6c:94:c9:07:30:38:ac:31:
                    25:1f:30:56:61:ca:e1:2e:7e:a2:b0:8f:50:53:7a:
                    ab:63:cf:47:3a:b1:a6:25:f6:ac:af:8f:e4:c3:de:
                    ea:4c:42:aa:31:aa:bb:83:c3:0f:0a:03:84:84:b3:
                    c0:d7:69:bf:07:1f:bf:a5:78:17:bc:41:ed:18:30:
                    a2:34:51:bb:f4:43:87:e0:40:f7:fa:88:73:95:ab:
                    96:38:1f:3c:90:4d:b9:5a:4c:45:ed:62:79:7a:68:
                    d7:2b:a7:0f:9a:c7:0a:8d:c1:2e:d3:fa:3f:ce:c7:
                    e9:70:67:d8:18:91:ba:da:c0:48:ee:54:0d:eb:83:
                    3d:bc:f0:2b:e3:bb:3b:3d:ee:41:c0:bb:69:10:6e:
                    72:bf:3b:10:91:79:82:d4:97:6d:45:e3:46:a1:67:
                    2d:e5:90:5e:19:ac:b0:ab:35:79:ab:5f:98:55:30:
                    49:fd:c5:03:4d:24:34:f6:62:c0:08:65:56:dc:8a:
                    ec:41:99:6c:4d:92:2e:e3:5e:23:66:fb:c0:8c:3f:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FC:A0:97:47:59:B0:88:8F:81:D4:8D:4E:32:A7:9C:AD:FC:C3:DE
            X509v3 Authority Key Identifier:
                keyid:BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/323830343a376261303a3a2f33322d313238203d3e20323731343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:ef:e3:bd:4c:3d:d0:a4:ac:79:3b:ca:a7:63:4e:ea:25:3d:
         0a:52:05:51:36:2a:71:9f:6a:6a:0c:00:28:3f:91:46:ac:41:
         ea:20:97:e5:58:45:bb:f7:8a:51:29:af:ff:d9:28:30:bb:af:
         2c:17:97:03:49:e2:7f:cd:fd:34:3f:52:69:89:94:89:28:95:
         8f:3b:d9:3a:93:9b:b0:a7:0c:ff:58:19:90:db:cb:c1:0a:29:
         87:7b:fb:f2:cb:6c:69:eb:1a:36:5f:97:09:e7:cc:e6:bc:23:
         b0:c6:12:85:d5:12:b7:0d:ae:fa:7a:4c:b8:f6:08:5c:cd:a4:
         2b:4b:95:fb:6c:d3:7e:47:03:67:9e:08:38:d9:2b:de:4a:cf:
         8b:f9:c6:20:0c:4f:e9:c1:f3:0d:40:08:88:5f:45:d0:fa:bb:
         a0:5a:90:cc:6f:b7:f0:e6:11:cd:4b:db:75:2a:9f:e7:f8:f6:
         ee:d2:27:8b:6e:1c:b8:d1:cd:88:4c:e0:ef:3d:b4:49:25:6e:
         a1:20:d3:c5:ac:d0:74:56:18:33:49:36:6a:e5:0f:ef:b5:0d:
         1c:df:fd:e0:92:75:0c:cd:64:4d:47:d2:4a:47:6c:39:3d:55:
         ac:84:ee:b0:d0:47:92:6c:a5:2b:8c:d7:ee:9b:cb:e0:31:4d:
         63:07:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org