Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a3a2f33322d3332203d3e20323639353538.roa
File:                     323830343a363637303a3a2f33322d3332203d3e20323639353538.roa (raw, json)
Hash identifier:          Fnb/F0066Br5wgmEse+45zy35TSTLFAHK5ffZ2qDd8Y=
Subject key identifier:   AC:DE:39:21:A9:57:64:FA:E3:25:C2:98:85:93:CD:F5:D3:08:7E:4C
Certificate issuer:       /CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
Certificate serial:       65A42DD10B1F45890EE861E577007CE9EB64A5FC
Authority key identifier: BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a3a2f33322d3332203d3e20323639353538.roa
Signing time:             Wed 29 Mar 2023 02:30:02 +0000
ROA not before:           Wed 29 Mar 2023 02:25:02 +0000
ROA not after:            Wed 27 Mar 2024 02:30:02 +0000
asID:                     269558
IP address blocks:        2804:6670::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a4:2d:d1:0b:1f:45:89:0e:e8:61:e5:77:00:7c:e9:eb:64:a5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
        Validity
            Not Before: Mar 29 02:25:02 2023 GMT
            Not After : Mar 27 02:30:02 2024 GMT
        Subject: CN=ACDE3921A95764FAE325C2988593CDF5D3087E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:40:78:5e:f8:70:c4:fd:ce:d0:ed:dd:2b:99:
                    cc:7c:05:19:75:98:ca:af:50:e9:62:cc:25:d9:81:
                    6c:49:a2:12:9f:db:46:d5:83:95:a2:39:8d:57:86:
                    40:b5:98:cd:a2:c4:01:5e:33:0c:f6:cd:1e:20:e2:
                    91:0b:85:6b:b8:52:37:e8:cc:3b:02:d4:8c:18:b3:
                    40:e8:42:f2:e0:60:bd:2f:cd:a4:55:8a:de:1f:47:
                    97:17:48:0f:1e:da:d8:31:d5:ed:c0:97:d6:fa:0d:
                    7c:7a:ee:2a:89:29:19:f4:ec:0c:49:36:02:a6:84:
                    19:49:7c:2d:ec:11:e8:d5:07:50:ce:da:9a:02:2b:
                    d2:90:79:0c:cf:27:fc:1f:56:de:21:64:09:87:95:
                    0f:d9:2e:15:4f:bb:47:de:ab:47:63:52:d7:b7:0f:
                    58:ce:b3:f7:1a:d3:5c:2e:24:d9:a4:0b:3c:21:39:
                    a9:2a:ec:82:a2:74:7d:39:74:e6:c4:ce:d1:ea:65:
                    fc:4f:2e:70:d6:8d:3c:e5:7d:56:d2:dd:cd:0c:39:
                    b5:04:dc:2c:50:58:8d:59:66:0b:0d:cd:c2:01:5d:
                    75:46:82:f6:f9:83:2a:5e:52:5e:58:f8:8d:d1:0b:
                    e8:6b:7a:f6:6b:6e:83:59:80:25:b0:7a:3d:e2:e0:
                    ce:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DE:39:21:A9:57:64:FA:E3:25:C2:98:85:93:CD:F5:D3:08:7E:4C
            X509v3 Authority Key Identifier:
                keyid:BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a3a2f33322d3332203d3e20323639353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6670::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:94:8d:29:f8:7c:f1:1f:7d:e8:f3:6d:cb:40:3c:18:c1:
         7c:02:b1:6a:b3:b8:f6:58:66:59:29:8c:70:e4:a7:39:fa:8e:
         ef:00:58:2f:40:a5:73:ed:f4:a0:1a:a8:f9:a3:1b:c3:99:ce:
         2d:3e:3a:ab:7a:4a:c6:8c:08:c9:55:66:69:bc:e5:2f:e0:b9:
         e1:64:3b:74:07:76:56:1a:8a:ff:e7:3f:df:c5:0b:a1:bc:10:
         b5:0b:47:89:cb:f1:cc:e1:6b:44:b8:38:89:c3:fb:dd:1e:6d:
         59:1a:72:e6:78:f1:ba:79:fb:09:44:16:c1:6e:b3:0f:d6:bb:
         83:3e:42:98:a1:14:5e:0c:7d:9d:88:35:0d:39:9d:03:52:a7:
         a5:d2:ea:37:29:ba:0f:fb:d2:49:e3:c0:6c:cb:5c:52:12:08:
         bd:f9:5e:43:12:27:ab:83:b8:57:3b:3f:23:80:8e:0b:01:8e:
         60:b4:54:fb:1f:c7:32:2c:64:74:51:67:49:1b:2c:ce:64:1e:
         39:f1:03:93:4e:4f:ae:b8:06:64:c4:4d:ad:66:1f:d9:4d:19:
         43:cb:66:98:ad:18:21:77:c3:1c:12:cc:b4:ba:68:f1:1d:38:
         0f:78:60:ce:a5:07:12:40:5e:fa:b7:ee:24:cd:cf:d7:9c:76:
         56:02:10:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org