Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa
File:                     323830343a343363383a3a2f33322d3336203d3e20323637353839.roa (raw, json)
Hash identifier:          dC1nbuN323biYJ7Z5QGPtwUUFA1MGO3cgDwKWseORgs=
Subject key identifier:   EC:80:63:66:84:8A:1A:2E:43:F3:1D:F2:13:72:A6:04:94:56:7F:9A
Certificate issuer:       /CN=BF3DB965EC536F25CA8D7D783C2670C7C4744C2F
Certificate serial:       027008725B4AAA94A9151257A0B48A2B10904159
Authority key identifier: BF:3D:B9:65:EC:53:6F:25:CA:8D:7D:78:3C:26:70:C7:C4:74:4C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa
Signing time:             Fri 16 Feb 2024 13:49:37 +0000
ROA not before:           Fri 16 Feb 2024 13:44:37 +0000
ROA not after:            Fri 14 Feb 2025 13:49:37 +0000
asID:                     267589
IP address blocks:        2804:43c8::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:70:08:72:5b:4a:aa:94:a9:15:12:57:a0:b4:8a:2b:10:90:41:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3DB965EC536F25CA8D7D783C2670C7C4744C2F
        Validity
            Not Before: Feb 16 13:44:37 2024 GMT
            Not After : Feb 14 13:49:37 2025 GMT
        Subject: CN=EC806366848A1A2E43F31DF21372A60494567F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:96:e2:04:59:06:d7:70:5e:1f:71:52:70:
                    84:8d:7b:3a:de:53:c7:a5:33:8d:41:85:eb:50:e9:
                    0b:84:74:33:11:43:26:e9:c6:87:59:b4:6a:02:25:
                    de:19:99:5a:68:8d:e8:15:ca:77:a8:8c:5c:7b:3c:
                    ca:d2:98:ef:1a:59:94:46:9c:5e:b9:fd:3f:36:bf:
                    1a:23:89:ce:f3:4f:f4:89:5a:8e:d5:a0:62:81:f2:
                    48:9a:c3:9e:93:97:b7:e7:57:80:05:83:16:29:65:
                    a7:72:ce:33:7d:92:1d:99:ea:a9:96:85:99:51:6e:
                    5d:44:a4:4d:28:90:c0:77:fc:f4:25:85:72:31:9f:
                    3a:65:45:12:ae:02:f2:25:d2:01:19:62:9f:61:f2:
                    86:e4:0d:5d:87:57:29:cf:7b:97:5c:22:af:6b:43:
                    2b:61:61:3e:d9:a9:19:6c:52:f0:b2:e0:c2:ef:e4:
                    e7:b5:0b:73:19:11:96:02:98:e6:6c:1a:78:d5:97:
                    c0:94:d9:4a:f5:e6:4a:b0:49:93:9a:40:e7:12:47:
                    8d:44:61:26:41:61:91:03:23:f3:9d:9c:1f:70:8b:
                    47:9e:e9:9c:33:e4:0c:0d:64:0e:8f:70:92:b2:12:
                    90:58:00:26:26:cb:cd:1c:f6:cc:42:ee:23:83:89:
                    14:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:80:63:66:84:8A:1A:2E:43:F3:1D:F2:13:72:A6:04:94:56:7F:9A
            X509v3 Authority Key Identifier:
                keyid:BF:3D:B9:65:EC:53:6F:25:CA:8D:7D:78:3C:26:70:C7:C4:74:4C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:29:51:f1:30:97:eb:ee:0c:1a:41:81:70:03:82:80:09:
         e0:53:41:e9:df:c1:e6:5c:d3:2c:de:2c:45:5a:75:99:d8:1c:
         a8:ae:bb:af:a9:0c:56:3b:cd:07:f7:ce:51:be:24:aa:37:bc:
         b1:17:bc:8b:49:38:c1:e9:5d:de:51:eb:d8:35:15:92:de:39:
         8e:d7:39:14:ee:ee:74:ad:7b:a1:15:a0:16:b6:7a:93:36:30:
         9b:be:cc:a5:b0:3b:28:0f:95:2f:09:f7:4f:17:7a:8c:84:2d:
         ac:e8:97:56:a4:cc:94:ad:b8:f1:87:3b:03:15:4d:58:d9:84:
         92:9f:c0:5a:b0:96:85:a2:10:3e:e2:ef:bd:3b:b2:c4:c5:34:
         78:58:d9:52:70:cf:e9:f1:20:f1:02:7f:df:0d:1c:08:8f:71:
         35:3f:2b:6b:05:00:d1:b6:8c:35:4f:83:11:28:9e:2b:0c:ad:
         0f:46:04:3f:f0:20:2a:e9:4f:3c:57:2f:f3:0f:09:3a:19:0c:
         18:61:ce:c0:ea:6f:db:e3:46:77:07:6c:79:74:b2:23:25:9b:
         1b:64:fa:0c:02:18:80:5f:1a:47:a5:41:a7:f2:d7:d8:3c:04:
         56:d7:22:25:f2:56:15:d3:04:f1:bb:0c:6b:67:6b:90:c5:a3:
         b0:4f:c2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org