Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a323763633a383030303a3a2f33332d3333203d3e203533313235.roa
File:                     323830343a323763633a383030303a3a2f33332d3333203d3e203533313235.roa (raw, json)
Hash identifier:          QJKTEQWRVHZHHVMnWhWDLS3KUQgpAdMsB3jWoIZg8tQ=
Subject key identifier:   BC:D0:3D:4E:73:02:7E:18:6F:46:5C:5C:CC:40:FE:DD:C6:C5:5C:B8
Certificate issuer:       /CN=4AE4E57F7E0DB3A20F920599A286A672EE761AF3
Certificate serial:       438EBDF73E97B23ED9861CF82DB0F220B77786F3
Authority key identifier: 4A:E4:E5:7F:7E:0D:B3:A2:0F:92:05:99:A2:86:A6:72:EE:76:1A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a323763633a383030303a3a2f33332d3333203d3e203533313235.roa
Signing time:             Tue 31 Oct 2023 21:00:00 +0000
ROA not before:           Tue 31 Oct 2023 20:55:00 +0000
ROA not after:            Tue 29 Oct 2024 21:00:00 +0000
asID:                     53125
IP address blocks:        2804:27cc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8e:bd:f7:3e:97:b2:3e:d9:86:1c:f8:2d:b0:f2:20:b7:77:86:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AE4E57F7E0DB3A20F920599A286A672EE761AF3
        Validity
            Not Before: Oct 31 20:55:00 2023 GMT
            Not After : Oct 29 21:00:00 2024 GMT
        Subject: CN=BCD03D4E73027E186F465C5CCC40FEDDC6C55CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:88:6d:df:2c:16:ea:f3:06:d2:ab:3d:c6:c1:
                    61:24:33:e9:74:f9:1f:b0:d7:43:11:41:f7:6e:5a:
                    02:1c:cd:55:51:3f:1b:4a:3a:c8:b5:8d:cf:47:a9:
                    52:f5:d8:0e:88:1d:16:a1:28:65:5a:60:b7:06:ed:
                    45:80:90:2a:21:1d:a5:6f:4e:81:db:e6:1b:9e:93:
                    df:c0:7b:71:3e:a0:1b:56:58:dd:f2:4a:50:c2:50:
                    b7:16:11:6d:7d:d0:9f:50:18:aa:4c:3c:45:c0:00:
                    f4:74:94:93:27:21:4d:b7:94:f8:8f:de:32:d9:37:
                    fa:71:71:34:25:5c:10:a0:fb:5e:79:ad:ec:d2:53:
                    10:5e:ab:9d:18:d9:60:97:d4:6f:69:84:83:28:02:
                    50:66:4a:48:7d:fa:07:35:15:31:b8:e9:39:4f:63:
                    c3:5b:35:3a:58:be:2c:e4:6e:d5:49:93:40:e3:05:
                    32:54:d7:0e:7a:52:f6:0c:f3:eb:cf:aa:be:0f:2d:
                    0d:b0:8e:17:51:14:fa:e1:d4:4f:73:14:f5:2d:d3:
                    93:83:43:28:aa:eb:57:01:31:e2:9e:e3:6d:ed:73:
                    f3:0d:06:97:a7:50:71:12:c3:e0:40:50:5b:5c:78:
                    cc:34:f3:ec:0e:52:93:bc:8f:af:a6:de:72:60:7e:
                    37:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D0:3D:4E:73:02:7E:18:6F:46:5C:5C:CC:40:FE:DD:C6:C5:5C:B8
            X509v3 Authority Key Identifier:
                keyid:4A:E4:E5:7F:7E:0D:B3:A2:0F:92:05:99:A2:86:A6:72:EE:76:1A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a323763633a383030303a3a2f33332d3333203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27cc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         07:59:84:b6:96:f2:49:fc:dd:07:94:3b:a0:6c:6e:f2:ca:aa:
         3a:03:79:ce:cd:a5:5d:39:df:d6:ee:f4:e2:46:94:bc:82:f5:
         48:39:4e:17:51:ee:2a:c9:cf:9d:72:f3:b5:80:af:2e:2f:a4:
         55:34:e7:a6:44:c8:a2:0b:bc:43:ee:76:b8:60:64:a5:27:42:
         21:5b:7c:16:28:ad:e1:44:bd:dc:5d:5a:cd:cf:ab:58:58:b7:
         dc:0a:fe:a3:97:cf:1e:69:ca:36:c6:5b:dc:be:ba:f7:88:b2:
         b2:f6:0f:15:6a:35:d8:07:f1:34:b5:2c:52:eb:6c:72:f0:ac:
         1d:46:e2:cb:67:c3:d6:b2:e3:26:f5:c6:71:80:ed:fc:98:24:
         05:97:dc:21:8d:9a:c5:51:1a:be:ed:0b:b6:c5:ac:b8:b7:8b:
         d6:77:5e:5f:19:02:ab:13:35:3f:fb:0e:fd:c7:ad:20:6f:06:
         8b:d9:b0:c6:f8:16:13:b7:0b:43:4e:20:c8:44:ac:34:07:a6:
         d4:79:39:e2:11:b8:60:7a:55:d0:0b:21:dd:00:cf:cc:7d:2a:
         e5:8d:b6:17:e1:02:58:cd:50:aa:f1:63:d3:2b:77:54:8c:13:
         69:b3:8e:1f:41:02:87:b4:0b:dc:16:a4:23:2b:8e:a3:16:36:
         9f:7a:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org