Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3230303a3a2f34322d3432203d3e20323633343237.roa
File:                     323830343a313139633a3230303a3a2f34322d3432203d3e20323633343237.roa (raw, json)
Hash identifier:          mj28y+5GUUHRIhek+TjEoWtJnN9XeUJ0kibIbiuFHhM=
Subject key identifier:   41:A8:71:80:0C:B8:AC:A3:21:BE:DE:DB:F9:F8:50:B8:DC:8C:F7:4F
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       4DEDD63438DCD2239CDB703044399F8EC8618C42
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3230303a3a2f34322d3432203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:13:09 +0000
ROA not before:           Fri 09 Jun 2023 22:08:09 +0000
ROA not after:            Fri 07 Jun 2024 22:13:09 +0000
asID:                     263427
IP address blocks:        2804:119c:200::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ed:d6:34:38:dc:d2:23:9c:db:70:30:44:39:9f:8e:c8:61:8c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 22:08:09 2023 GMT
            Not After : Jun  7 22:13:09 2024 GMT
        Subject: CN=41A871800CB8ACA321BEDEDBF9F850B8DC8CF74F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:95:5f:af:22:46:eb:25:ec:74:84:d3:43:c7:
                    ac:a7:b7:5f:35:5b:0d:de:43:32:34:a2:11:41:17:
                    01:3c:f4:12:da:4f:f7:b4:56:8a:f1:23:2c:fd:a7:
                    20:b0:02:65:59:51:81:0d:d0:96:50:f8:33:24:4b:
                    84:67:88:7c:a7:e9:49:9c:b2:eb:cd:9f:0a:de:ab:
                    46:b8:cf:89:a5:ef:33:cc:67:21:dc:22:8f:f5:69:
                    f2:13:6d:62:73:bc:97:62:a7:aa:cd:27:bb:96:20:
                    20:f0:24:85:10:59:22:98:92:6a:f2:16:52:ea:eb:
                    3d:3d:9f:a7:24:85:e6:7c:74:75:9a:2b:ea:d8:2c:
                    e4:c6:76:9d:48:fc:90:70:a0:1b:d1:dc:ad:1e:2b:
                    58:31:62:bb:ed:10:54:98:45:0a:28:31:47:0c:76:
                    ad:90:71:8d:3a:45:a0:4f:14:2d:be:14:d1:eb:b7:
                    71:59:ea:d5:66:13:bd:61:1f:29:c3:4a:39:a1:99:
                    af:c1:6b:d6:fd:e5:fd:42:77:6d:bd:2f:6e:b8:cd:
                    93:97:3b:ad:cb:99:93:56:d2:b7:00:65:b0:31:4b:
                    70:33:a6:1f:73:11:16:68:f8:68:e7:a6:99:64:76:
                    aa:a9:0e:61:bd:6c:ce:7f:30:27:5d:cd:61:10:02:
                    0a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A8:71:80:0C:B8:AC:A3:21:BE:DE:DB:F9:F8:50:B8:DC:8C:F7:4F
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3230303a3a2f34322d3432203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:119c:200::/42

    Signature Algorithm: sha256WithRSAEncryption
         18:da:e1:86:ee:aa:ce:30:6b:26:b1:df:2f:f4:f2:ee:99:61:
         d9:8c:60:e7:19:a5:05:df:63:2a:e7:86:70:7e:39:4e:13:49:
         24:ae:0c:ee:ee:bc:b2:c3:06:bd:14:dc:b8:95:28:1c:db:29:
         57:ef:36:cf:a2:10:a2:b8:4d:60:9e:2c:39:db:c0:e5:ac:07:
         77:dc:5a:0a:98:e4:b4:5e:7d:e0:46:d9:5c:a6:8b:67:07:2f:
         6f:ba:b0:64:44:c5:34:33:89:db:f7:1e:bc:eb:b5:63:3d:10:
         5b:d9:4b:82:64:28:28:43:61:66:ca:3b:b4:ee:66:7b:48:a9:
         0d:fa:fb:68:b6:dc:e2:c8:18:3e:66:8d:05:7c:83:22:dc:9e:
         1f:88:8c:ac:66:0b:52:83:1b:6a:be:53:21:06:6b:e3:bf:fe:
         5e:43:32:94:96:26:42:44:02:f5:0b:84:8c:7c:b1:3a:a4:8e:
         d3:d3:03:01:e3:81:d0:d6:ce:73:3c:26:1e:ca:20:4c:e8:27:
         e2:a9:f8:b7:f4:40:e1:9a:7e:a2:64:c3:af:3a:24:fd:b8:f8:
         ff:72:0e:96:aa:bf:fb:8f:2c:5c:8d:a6:db:4b:c4:8e:3f:17:
         29:58:7c:55:05:f7:4f:b0:a3:38:78:5b:59:9b:00:41:39:cd:
         20:82:93:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org