Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/323830343a373431303a3a2f33322d3332203d3e20323730393536.roa
File:                     323830343a373431303a3a2f33322d3332203d3e20323730393536.roa (raw, json)
Hash identifier:          z6bzqlDXzQKm7nk3f7ORgaFZub5ApWqb3xZybX93urU=
Subject key identifier:   CC:68:E9:4B:35:73:6E:E2:EB:52:B7:79:07:BF:66:56:88:CE:A0:7B
Certificate issuer:       /CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
Certificate serial:       125289E0A3BA166DAB5E375EF07630FA298F7934
Authority key identifier: BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/323830343a373431303a3a2f33322d3332203d3e20323730393536.roa
Signing time:             Thu 11 May 2023 03:58:34 +0000
ROA not before:           Thu 11 May 2023 03:53:34 +0000
ROA not after:            Thu 09 May 2024 03:58:34 +0000
asID:                     270956
IP address blocks:        2804:7410::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:52:89:e0:a3:ba:16:6d:ab:5e:37:5e:f0:76:30:fa:29:8f:79:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
        Validity
            Not Before: May 11 03:53:34 2023 GMT
            Not After : May  9 03:58:34 2024 GMT
        Subject: CN=CC68E94B35736EE2EB52B77907BF665688CEA07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:22:6b:a3:b5:bb:42:ef:25:4c:a9:ab:9a:
                    de:52:fe:91:f7:38:cc:85:b8:a9:c9:f6:d4:60:89:
                    e9:82:67:ee:66:19:43:fd:66:1f:a0:64:b2:f9:de:
                    95:2c:bc:98:70:cc:46:c5:93:fc:64:2a:45:21:4a:
                    c9:d5:7f:6d:6d:a6:91:47:ad:34:07:aa:85:c2:22:
                    ab:76:8c:b8:81:8b:bf:c2:74:9c:6a:e5:4a:5a:40:
                    a0:25:d0:b7:bf:fb:aa:ed:51:85:e9:c2:39:d0:c1:
                    9c:e2:0f:e6:22:64:eb:ea:a0:cb:58:d8:14:62:b8:
                    e7:89:0e:10:44:2e:81:26:d1:68:00:35:e3:9c:9b:
                    1b:c4:96:ef:02:6e:2e:49:77:c1:06:89:a0:85:2b:
                    bb:48:7f:27:33:b8:46:1c:29:fb:31:29:7c:2f:4b:
                    c1:ac:6c:be:62:3d:93:ae:0a:39:cf:cb:77:91:b4:
                    f9:89:ab:6b:71:e2:87:3d:73:7d:a4:a1:1e:04:e0:
                    9b:57:a1:50:38:b5:47:b8:11:b8:9a:37:46:47:a9:
                    45:cf:21:22:97:99:a4:86:1d:1d:a1:72:2e:fd:34:
                    41:94:eb:14:22:0e:b1:62:2d:ce:f9:ef:d1:5f:52:
                    99:c8:39:0e:fb:06:63:cd:7e:9f:02:7a:fc:fe:35:
                    ce:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:68:E9:4B:35:73:6E:E2:EB:52:B7:79:07:BF:66:56:88:CE:A0:7B
            X509v3 Authority Key Identifier:
                keyid:BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/323830343a373431303a3a2f33322d3332203d3e20323730393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7410::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:2a:59:18:ae:cf:8c:8f:5b:c3:8e:d7:90:c1:a9:0d:cb:71:
         e6:b3:79:63:ed:18:b9:67:9e:e5:10:d6:06:0b:d5:ce:35:ab:
         f5:f2:a3:55:00:e3:a0:d1:79:60:5b:09:18:56:7d:59:5b:5d:
         24:35:95:08:e1:3e:8a:a7:2d:90:3e:60:c9:0d:27:d5:7a:7c:
         a3:90:93:b5:90:eb:f4:6b:10:0c:dc:5d:59:2f:50:f5:2e:4a:
         b8:03:fb:51:3f:cb:0d:3a:45:1f:38:12:b1:0c:29:01:14:d8:
         d0:0b:72:97:e3:f1:76:7a:1e:9b:b4:ae:55:f1:2d:b5:6b:15:
         41:06:8c:d5:b2:27:a1:25:83:eb:57:41:2b:bf:ed:76:f1:b5:
         61:a4:ec:6d:b5:94:f9:25:ac:e5:91:80:ed:58:73:ac:db:e1:
         b5:ab:e5:50:b8:ad:38:a6:83:92:ef:6f:b3:8d:71:28:36:2d:
         82:e6:6d:af:cd:03:58:70:73:d6:ef:91:2d:20:10:03:1c:17:
         23:2f:27:a3:4e:65:05:dc:bc:ff:f7:88:05:9e:6e:73:43:18:
         56:b5:e4:dd:2a:05:b1:a3:03:a5:47:7a:15:0a:63:56:e8:e9:
         9c:12:23:0b:0f:d1:a7:07:38:f7:05:34:ba:8d:fa:13:08:8d:
         d0:0a:36:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org