Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/323830343a343733383a3a2f33322d3332203d3e20323637303339.roa
File:                     323830343a343733383a3a2f33322d3332203d3e20323637303339.roa (raw, json)
Hash identifier:          w7eoj4QdCSuZ195Y7ie2EYyqjTdkU274DgQVycrJPWU=
Subject key identifier:   72:3C:8B:BD:15:7C:89:85:4E:C7:AE:5F:73:18:39:20:C7:E7:11:99
Certificate issuer:       /CN=BC2290B6A1F63711FA18C3BF18D3C425314DC780
Certificate serial:       6DADB5A13F3E765F5E3FA17193FC898424081D8A
Authority key identifier: BC:22:90:B6:A1:F6:37:11:FA:18:C3:BF:18:D3:C4:25:31:4D:C7:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC2290B6A1F63711FA18C3BF18D3C425314DC780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/323830343a343733383a3a2f33322d3332203d3e20323637303339.roa
Signing time:             Tue 10 Aug 2021 21:00:02 +0000
ROA not before:           Tue 10 Aug 2021 20:55:02 +0000
ROA not after:            Wed 10 Aug 2022 21:00:02 +0000
asID:                     267039
IP address blocks:        2804:4738::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ad:b5:a1:3f:3e:76:5f:5e:3f:a1:71:93:fc:89:84:24:08:1d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC2290B6A1F63711FA18C3BF18D3C425314DC780
        Validity
            Not Before: Aug 10 20:55:02 2021 GMT
            Not After : Aug 10 21:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:e8:55:5e:bc:58:ed:64:5b:32:9d:96:58:
                    d9:7d:2e:e7:de:77:20:ee:66:18:36:f3:b5:d9:c6:
                    43:df:0a:86:ee:8f:bb:eb:e0:90:1a:c1:13:6d:ab:
                    5d:b6:80:a8:bd:6c:c7:a0:01:49:b5:c2:24:cf:30:
                    71:05:1d:f8:4f:22:c5:0f:53:45:5e:f3:2c:a1:27:
                    20:b4:51:f5:a8:e1:73:6b:7c:d1:fb:5d:d7:b6:82:
                    7d:b9:bd:6d:af:ee:3c:ff:c5:db:08:c0:e0:37:a4:
                    22:9a:24:86:f5:41:de:57:b8:51:70:9e:cb:41:ae:
                    5f:c1:19:2e:41:c5:b8:ba:3c:dd:29:ff:ad:74:a5:
                    f5:0f:2d:1a:1d:97:6e:49:7c:b8:97:a8:6c:91:12:
                    7d:45:39:bc:b6:0d:36:87:d4:57:e4:cb:a3:39:93:
                    db:8e:32:a1:8c:99:cd:c5:7c:f6:54:22:5c:02:51:
                    a6:2f:f5:92:d4:82:b9:3a:6d:ba:20:70:74:63:ad:
                    8b:22:b2:3d:ce:44:17:26:6b:11:43:47:bf:12:1b:
                    07:8a:a0:e1:5c:06:0c:21:6c:bd:0e:06:db:2e:c7:
                    3b:e4:d1:97:32:3e:41:15:d3:ed:42:23:29:bd:a2:
                    db:8f:18:da:10:91:9f:c3:26:13:be:40:76:e1:93:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3C:8B:BD:15:7C:89:85:4E:C7:AE:5F:73:18:39:20:C7:E7:11:99
            X509v3 Authority Key Identifier:
                keyid:BC:22:90:B6:A1:F6:37:11:FA:18:C3:BF:18:D3:C4:25:31:4D:C7:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/BC2290B6A1F63711FA18C3BF18D3C425314DC780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC2290B6A1F63711FA18C3BF18D3C425314DC780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/323830343a343733383a3a2f33322d3332203d3e20323637303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4738::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:ef:82:2e:c0:24:17:9d:76:87:f8:8c:4a:76:db:d5:1b:91:
         3c:6d:1e:42:72:2b:69:82:e8:c0:c9:46:57:b2:f4:46:c8:a1:
         01:f3:10:2b:19:e9:0c:c1:f7:6c:f3:62:9e:87:e0:76:26:2f:
         96:83:e3:09:75:a3:c5:e2:33:d4:d1:22:62:35:fa:ba:9a:05:
         10:41:f8:f2:37:ee:2f:76:a3:41:37:fd:e6:df:16:40:19:f1:
         72:7c:b9:e7:37:81:17:e2:c1:30:ee:cf:1c:90:bd:78:a2:f0:
         ff:ba:76:46:a1:1c:78:34:8e:d6:89:7c:6a:4c:85:49:92:07:
         ef:b7:e3:27:cf:70:b6:ad:67:b1:05:7d:67:6e:74:8b:77:5e:
         e9:05:b0:d8:6c:b3:31:23:f3:af:60:af:4f:cc:1b:a5:9f:6d:
         ac:06:d2:9f:3f:a1:70:f7:9f:a8:66:75:51:28:32:38:61:eb:
         2e:10:03:00:6a:4c:5e:80:b3:8b:77:b5:53:2a:29:59:55:7e:
         b3:dd:ef:37:28:cc:2b:84:e6:c3:87:cb:38:11:0b:33:1d:29:
         5d:90:95:d0:e5:5a:20:27:6d:f1:e1:64:c2:bd:89:99:00:61:
         e0:c6:63:5b:4f:3e:ae:54:fe:be:46:39:06:df:a5:6c:b5:d0:
         fd:1f:64:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org