Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a633030303a3a2f33342d3334203d3e20323635313430.roa
File:                     323830343a326233343a633030303a3a2f33342d3334203d3e20323635313430.roa (raw, json)
Hash identifier:          bOYJvlx5WrrbDGOjSncHGyB3nZ0qNWHUP53/Ar85sK8=
Subject key identifier:   BA:10:05:85:A5:72:50:DB:D8:B8:A0:3F:2A:7B:E8:C0:8A:8D:51:66
Certificate issuer:       /CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
Certificate serial:       3E3B4CE46639B5F5F24063C020E5D0D3DE4B5FC8
Authority key identifier: AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a633030303a3a2f33342d3334203d3e20323635313430.roa
Signing time:             Thu 04 Apr 2024 15:20:51 +0000
ROA not before:           Thu 04 Apr 2024 15:15:51 +0000
ROA not after:            Thu 03 Apr 2025 15:20:51 +0000
asID:                     265140
IP address blocks:        2804:2b34:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3b:4c:e4:66:39:b5:f5:f2:40:63:c0:20:e5:d0:d3:de:4b:5f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
        Validity
            Not Before: Apr  4 15:15:51 2024 GMT
            Not After : Apr  3 15:20:51 2025 GMT
        Subject: CN=BA100585A57250DBD8B8A03F2A7BE8C08A8D5166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:6c:89:2a:c2:d2:7c:9b:c1:a3:97:da:2c:
                    5c:23:e3:65:3c:be:a0:f4:17:5e:6d:a5:f3:e7:65:
                    fc:46:59:bc:37:51:bd:6f:99:1f:7e:ed:14:be:f0:
                    49:99:c7:51:b9:93:55:6e:90:08:93:6b:0c:ed:9c:
                    7e:35:36:57:62:c3:e1:a9:4c:2e:79:49:5a:8d:1b:
                    2b:de:84:5e:55:5d:26:32:38:9d:1c:93:ce:57:88:
                    93:07:ac:4c:45:28:91:e5:64:30:d6:31:dc:8e:59:
                    1f:30:bc:27:da:e9:01:a5:96:59:76:16:df:9d:84:
                    0a:01:47:7e:05:21:84:fa:bb:78:90:17:08:03:d4:
                    62:77:55:18:a6:fc:8e:7e:18:80:82:9d:8c:66:7c:
                    f9:66:7a:dd:f0:4e:9a:11:e1:48:aa:0d:1d:18:3d:
                    79:0c:85:f4:fd:b1:4a:26:47:a7:d2:bc:cd:84:a5:
                    21:5f:72:1d:9a:d3:82:de:d5:d2:cf:d8:bf:c4:7f:
                    94:1e:23:6a:b6:80:e8:8a:a2:f3:a7:80:7e:a3:a5:
                    13:bf:94:02:34:06:03:f1:bd:2a:3c:81:b9:8b:59:
                    c3:b2:8f:74:af:47:70:3a:ed:5e:92:fa:d2:8a:9c:
                    6b:1a:ba:0a:55:28:aa:e9:de:1f:dd:87:77:2d:b7:
                    e8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:10:05:85:A5:72:50:DB:D8:B8:A0:3F:2A:7B:E8:C0:8A:8D:51:66
            X509v3 Authority Key Identifier:
                keyid:AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a633030303a3a2f33342d3334203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b34:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:ac:e3:bf:cd:e7:72:7b:7f:fc:99:77:c5:97:26:3a:1b:d7:
         a3:20:f5:43:27:b0:c4:c0:b7:46:28:01:41:7a:00:ee:9a:61:
         c8:22:f9:51:d1:87:0e:04:bd:7c:3b:02:05:ed:5d:08:90:26:
         8c:e9:1e:56:b6:95:cd:9c:b8:75:04:8e:dd:ba:c6:a6:dc:70:
         c7:e4:c1:89:80:0a:6e:a8:06:92:67:93:ee:97:55:8e:f7:c6:
         c6:db:26:66:27:92:43:41:5c:ab:d1:d7:88:58:3d:a9:f8:8c:
         64:48:e9:a5:55:37:6f:76:77:48:23:56:09:19:a7:d5:ca:83:
         2c:2d:28:56:b1:e3:99:f4:64:34:40:56:e4:bd:b0:f8:e1:b0:
         f6:61:64:e0:1e:ed:94:98:22:dc:36:50:62:67:2c:07:7d:bc:
         0c:ad:6e:5e:48:a4:d8:96:f0:3c:4d:89:30:39:c3:ba:71:b0:
         4d:5a:8d:c5:f8:87:ad:0c:9b:e8:fa:f7:25:59:48:c4:9b:0c:
         70:4a:9c:3c:b2:4f:3b:df:19:19:81:95:40:be:42:24:4b:40:
         4f:f4:07:9a:b9:31:63:ef:18:cc:08:ac:8e:19:af:f5:ff:17:
         0b:3b:3d:ba:e0:c4:c9:55:6d:9e:50:3f:bf:58:d9:48:87:0e:
         10:a7:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org