Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a633030303a3a2f33342d3334203d3e20323639353538.roa
File:                     323830343a363637303a633030303a3a2f33342d3334203d3e20323639353538.roa (raw, json)
Hash identifier:          FLKe2UsslZ5rNRe5yWnGbdhwUk8Yp6Xs5BqHtyGC4xo=
Subject key identifier:   1F:07:BF:38:B8:5A:A8:04:56:B4:2C:59:71:DA:C8:2A:CA:F2:C6:FE
Certificate issuer:       /CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
Certificate serial:       752984068C5C87F1816C0FBB00B4D7520390CD7B
Authority key identifier: BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a633030303a3a2f33342d3334203d3e20323639353538.roa
Signing time:             Wed 29 Mar 2023 02:30:17 +0000
ROA not before:           Wed 29 Mar 2023 02:25:17 +0000
ROA not after:            Wed 27 Mar 2024 02:30:17 +0000
asID:                     269558
IP address blocks:        2804:6670:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:29:84:06:8c:5c:87:f1:81:6c:0f:bb:00:b4:d7:52:03:90:cd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
        Validity
            Not Before: Mar 29 02:25:17 2023 GMT
            Not After : Mar 27 02:30:17 2024 GMT
        Subject: CN=1F07BF38B85AA80456B42C5971DAC82ACAF2C6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:d2:64:47:d4:c5:9e:05:c3:dd:51:eb:ec:
                    f6:7f:8f:d3:98:7c:b8:22:5f:fd:55:07:bb:be:59:
                    a4:ea:bb:0d:f9:e3:4b:4b:7f:fb:8d:12:a0:a6:a3:
                    55:de:35:29:be:6d:d1:e3:d4:e9:9b:6a:e4:43:f7:
                    84:9a:88:df:09:96:f6:e6:b4:24:28:07:d4:e0:8d:
                    d8:28:44:83:65:92:14:4b:61:1c:80:35:02:28:90:
                    00:2d:95:d9:aa:0e:0d:57:00:49:43:ba:89:39:61:
                    23:3a:b1:9d:aa:ce:cf:2a:5a:42:5e:96:cc:87:fd:
                    3a:04:b8:23:4c:5d:57:aa:e1:ac:01:eb:35:af:24:
                    a5:8c:bb:9d:80:63:ff:45:18:6c:b6:b5:d1:08:f8:
                    c6:16:65:a1:f3:4d:6d:3d:cc:06:d4:b9:ac:9e:4e:
                    e8:cb:da:34:83:15:44:61:0f:b3:c1:82:06:fd:0f:
                    0a:3c:b7:43:02:f2:db:75:56:9e:88:33:12:75:cb:
                    32:fc:6f:ff:0a:f7:6e:a4:82:0d:52:86:4b:a3:c8:
                    4d:62:c4:27:a2:79:9f:9c:52:58:e4:d0:01:cf:df:
                    9c:22:66:eb:96:0b:4e:13:8b:9e:cf:ed:c3:71:23:
                    8c:47:cc:78:98:24:04:d2:82:35:a7:76:c0:b9:49:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:07:BF:38:B8:5A:A8:04:56:B4:2C:59:71:DA:C8:2A:CA:F2:C6:FE
            X509v3 Authority Key Identifier:
                keyid:BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a633030303a3a2f33342d3334203d3e20323639353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6670:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:ba:56:c5:23:79:16:7e:e4:60:b1:e5:c2:30:d5:bc:82:90:
         c3:30:d2:eb:5f:57:61:06:e1:d7:e3:c7:c8:24:98:b0:bc:6b:
         8f:fd:fe:8d:a4:11:9a:d4:46:6a:67:84:55:d8:b2:00:70:49:
         ee:e6:54:e2:23:f3:a3:45:8a:fd:94:9b:ca:d3:ed:19:3e:77:
         5d:4f:e2:15:fb:48:19:0e:eb:c6:2b:3b:8b:1e:64:68:44:e8:
         a3:27:f8:ae:f8:bb:35:b8:7e:2a:d3:1a:8a:b7:ea:8f:3f:fc:
         8f:8e:03:f9:34:7e:7c:7c:c1:6d:f4:91:ef:ac:21:72:80:c1:
         bf:72:3f:0c:bc:74:27:93:48:00:4a:eb:35:96:4b:0e:a1:c7:
         2f:b3:f0:9c:9a:13:dc:1f:f8:59:a6:9f:fe:57:ed:54:3d:39:
         d0:04:1d:50:b2:d9:3b:18:91:02:33:49:2d:6b:c1:6e:3b:91:
         92:45:ba:5c:68:72:38:e7:dd:aa:8f:3e:09:1a:46:5d:5b:12:
         a6:4e:de:b4:67:ca:fb:d2:bd:d2:e8:e8:90:1f:cb:d7:57:e8:
         ba:33:ba:ce:df:58:95:10:a6:95:3d:5c:f6:5e:a3:af:a3:56:
         01:a4:a0:a1:34:94:04:24:99:6b:a2:d4:97:4f:c2:9d:c3:18:
         26:93:ed:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org