Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/323830343a333664303a3a2f33332d3333203d3e20323636333734.roa
File:                     323830343a333664303a3a2f33332d3333203d3e20323636333734.roa (raw, json)
Hash identifier:          L5PCIOzJ/gY8zmLwgEUZ1uH9vjwGE7S1ATB3+iF9oLo=
Subject key identifier:   CC:99:E5:2E:1B:A0:6F:A7:31:BD:67:F8:32:70:2D:33:A9:08:C0:79
Certificate issuer:       /CN=BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD
Certificate serial:       5DAB21663ED5AE0450511B7DE643BDFA5EE2C4B6
Authority key identifier: BF:8A:4A:E4:CC:FB:51:6D:07:A1:A2:40:39:C6:62:A1:F8:6B:89:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/323830343a333664303a3a2f33332d3333203d3e20323636333734.roa
Signing time:             Tue 27 Jun 2023 14:08:31 +0000
ROA not before:           Tue 27 Jun 2023 14:03:31 +0000
ROA not after:            Tue 25 Jun 2024 14:08:31 +0000
asID:                     266374
IP address blocks:        2804:36d0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ab:21:66:3e:d5:ae:04:50:51:1b:7d:e6:43:bd:fa:5e:e2:c4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD
        Validity
            Not Before: Jun 27 14:03:31 2023 GMT
            Not After : Jun 25 14:08:31 2024 GMT
        Subject: CN=CC99E52E1BA06FA731BD67F832702D33A908C079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a6:58:2d:27:bb:1c:bc:a4:24:7e:39:b8:1f:
                    9f:da:10:c3:fc:7b:41:7c:23:f7:2c:2b:a0:c1:44:
                    af:13:13:3e:50:32:94:2a:f0:a8:21:14:1b:ce:ec:
                    8c:7c:a5:df:55:a3:fd:90:82:7e:10:91:cb:89:4e:
                    06:c6:3d:59:0c:40:71:b9:57:00:c6:ce:d8:3b:2f:
                    b4:10:26:02:91:ee:ce:04:05:5c:a0:55:e0:27:db:
                    ea:cf:45:66:24:10:a9:cb:c9:8b:2b:41:66:b2:d3:
                    9d:c2:06:e6:6d:18:2f:ca:d2:b0:b2:bf:1b:6b:62:
                    20:19:bf:f4:d3:1a:a9:d0:0a:0f:79:ab:6b:f3:a4:
                    77:35:7e:9b:41:d0:50:40:9c:d3:cb:1f:80:9c:d7:
                    c8:7b:ea:8e:82:ed:e5:fd:94:c2:32:63:11:39:53:
                    17:60:d4:c4:5c:a8:e0:3f:cc:f0:25:40:bd:4d:6b:
                    71:53:fb:37:19:65:fb:3c:7c:42:9c:bd:fb:be:93:
                    b5:ca:31:17:ae:a6:ba:40:bc:af:78:7b:03:4e:a9:
                    6e:4d:40:ed:91:62:c4:4b:78:f4:78:80:71:85:25:
                    63:47:19:3d:66:1d:0b:d7:75:b4:66:f3:72:49:3d:
                    e1:4f:e6:80:0c:18:7c:87:c2:63:15:53:7a:f8:a8:
                    03:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:99:E5:2E:1B:A0:6F:A7:31:BD:67:F8:32:70:2D:33:A9:08:C0:79
            X509v3 Authority Key Identifier:
                keyid:BF:8A:4A:E4:CC:FB:51:6D:07:A1:A2:40:39:C6:62:A1:F8:6B:89:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/323830343a333664303a3a2f33332d3333203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d0::/33

    Signature Algorithm: sha256WithRSAEncryption
         74:b5:d3:2b:9e:dd:5e:a3:97:61:d3:c1:67:49:f2:ba:a1:b9:
         ca:74:f1:e7:8a:7b:6a:a6:ce:d5:27:0f:57:df:2e:71:29:ae:
         dc:37:ec:d8:cd:b4:49:d7:d1:36:81:db:0f:e8:79:00:2a:24:
         a6:cf:fc:fd:19:b2:aa:45:9f:3c:63:d0:ae:80:85:0b:dd:78:
         f9:f5:23:d0:ab:60:29:2b:8c:b4:ae:2b:8a:86:6a:52:87:0e:
         87:89:53:c3:f8:f3:9f:cd:46:3d:b9:d4:87:fb:b9:4e:21:f9:
         eb:48:e6:89:17:e9:e4:30:97:5c:e9:ef:a3:9d:25:23:d0:5e:
         bb:be:36:f3:b7:d7:6f:4c:30:59:d6:55:df:36:b3:3c:c6:54:
         2e:ab:60:30:77:82:25:97:7e:c8:f2:72:70:ca:ee:69:79:3a:
         b8:53:f8:53:d1:90:2c:eb:eb:b1:0d:75:9b:67:52:a0:bc:b5:
         f1:37:39:1c:ce:06:d2:20:d1:6e:cf:e9:9b:77:4d:f8:94:47:
         19:7d:b3:dc:d0:50:78:f6:87:ab:80:b7:74:2b:0b:54:34:f5:
         e0:30:bd:25:ab:7b:c6:eb:de:3f:b7:75:5c:47:b9:89:04:d1:
         c6:d3:32:58:7a:4c:95:50:d4:8c:c6:7f:fa:45:9c:a5:a4:2a:
         20:ec:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org