Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a383030303a3a2f33342d3334203d3e20323639353538.roa
File:                     323830343a363637303a383030303a3a2f33342d3334203d3e20323639353538.roa (raw, json)
Hash identifier:          xro8NZjR/9GFbWAe/fmFHtPFbYdESUSwXBvbgMl/Ws0=
Subject key identifier:   41:B6:47:1E:77:31:EA:08:FB:10:75:E9:2D:4E:BE:DF:CF:70:C6:35
Certificate issuer:       /CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
Certificate serial:       42C7BE4D726DDB533E64A751AF696351B1AA9EA1
Authority key identifier: BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a383030303a3a2f33342d3334203d3e20323639353538.roa
Signing time:             Wed 29 Mar 2023 02:30:13 +0000
ROA not before:           Wed 29 Mar 2023 02:25:13 +0000
ROA not after:            Wed 27 Mar 2024 02:30:13 +0000
asID:                     269558
IP address blocks:        2804:6670:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c7:be:4d:72:6d:db:53:3e:64:a7:51:af:69:63:51:b1:aa:9e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
        Validity
            Not Before: Mar 29 02:25:13 2023 GMT
            Not After : Mar 27 02:30:13 2024 GMT
        Subject: CN=41B6471E7731EA08FB1075E92D4EBEDFCF70C635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:8d:d3:c8:d8:b1:cc:01:f8:a6:8a:2f:a0:
                    82:eb:22:43:1c:c9:10:3c:db:01:12:1b:30:e7:02:
                    e1:48:74:75:25:9a:3d:27:4b:4b:57:4b:d5:64:90:
                    16:0f:76:9e:14:4d:d1:e7:92:5c:73:54:84:ac:9b:
                    28:5c:01:da:67:8f:f2:bf:d1:74:9b:aa:0c:0a:7f:
                    8a:df:60:d6:09:af:22:cc:8e:79:90:63:c6:9f:21:
                    60:f9:92:49:4f:09:cf:ea:b4:12:82:b2:f2:9f:3e:
                    ba:96:e4:b0:bb:93:ad:80:7e:ba:4d:c1:92:6a:91:
                    95:c1:b2:96:e6:ca:08:d7:37:27:cf:a7:b2:15:33:
                    5b:d5:b1:0c:ae:92:47:e2:83:bb:9f:93:b1:ec:28:
                    73:25:83:3a:96:ae:1f:11:d3:10:eb:5c:52:f8:e0:
                    0d:07:ef:fc:94:03:0e:eb:9e:15:91:ed:ca:08:72:
                    8e:b2:5d:be:e9:c9:28:88:f2:a8:a7:d0:a7:ab:e0:
                    7b:ff:3c:78:45:1b:17:dc:b4:c4:e2:5a:00:68:13:
                    70:4c:e8:a0:55:6f:c8:3c:8b:ec:6a:5f:24:a8:2d:
                    b6:66:b7:0f:ac:f1:bc:bb:f2:91:ed:41:0b:b6:e2:
                    3f:b6:c5:55:56:24:04:1f:98:b9:25:0d:ab:4a:0f:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B6:47:1E:77:31:EA:08:FB:10:75:E9:2D:4E:BE:DF:CF:70:C6:35
            X509v3 Authority Key Identifier:
                keyid:BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a383030303a3a2f33342d3334203d3e20323639353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6670:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:09:32:67:09:3e:28:31:ea:b7:1a:20:2b:64:59:2a:c6:a7:
         20:6a:47:d7:5c:28:be:39:81:32:73:64:c5:0e:69:59:9f:65:
         8c:69:f1:96:7d:62:7a:60:32:70:5c:cd:9a:0a:38:7c:3e:50:
         37:4d:41:4b:a3:83:35:b8:c9:b7:e6:43:58:a8:86:e0:05:8c:
         fe:67:36:fc:42:47:5a:ce:16:23:34:46:b4:cf:07:9e:b5:33:
         c4:a4:33:77:5e:e7:fc:54:31:0c:94:96:ba:fc:f4:04:d1:f7:
         f4:02:c2:68:a0:48:fb:e6:92:36:9b:c1:ad:f6:d9:4d:47:d1:
         86:ac:bb:03:fc:ff:a6:fe:da:48:bd:6c:51:06:9d:dc:be:f3:
         b4:a6:b2:f9:73:e9:e9:cd:5f:45:f2:58:ec:9a:ad:4c:f8:da:
         ae:25:4c:be:9c:aa:52:b3:63:ac:73:83:47:33:80:a6:bf:75:
         04:99:1e:c1:cc:c6:7c:21:70:a2:91:cb:97:4b:70:1e:bb:1b:
         98:7e:97:15:80:48:18:ce:58:a9:34:3b:b0:5d:e8:39:a0:7c:
         09:63:3c:ca:9e:4d:75:af:da:47:c5:fe:12:56:a8:d5:78:79:
         b0:a5:88:72:5b:b0:21:f3:4d:ad:74:e3:01:6b:2a:49:03:bb:
         b7:c5:78:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org