Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/323830343a353737633a383030303a3a2f33332d3333203d3e20323638303638.roa
File:                     323830343a353737633a383030303a3a2f33332d3333203d3e20323638303638.roa (raw, json)
Hash identifier:          B7kSE9d6k2/FpnMy0l1W8D0w0OAp9zI+aDK/VxthKNI=
Subject key identifier:   0C:DF:6B:75:D7:4F:47:BA:77:72:96:90:24:E9:93:78:B7:7B:6D:38
Certificate issuer:       /CN=BAEE190B65B2228090D515B7CF62B6AEAC2F5270
Certificate serial:       72242E2F96A9A9B4F091854FF032830E8520FB7E
Authority key identifier: BA:EE:19:0B:65:B2:22:80:90:D5:15:B7:CF:62:B6:AE:AC:2F:52:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/323830343a353737633a383030303a3a2f33332d3333203d3e20323638303638.roa
Signing time:             Wed 17 May 2023 14:42:52 +0000
ROA not before:           Wed 17 May 2023 14:37:52 +0000
ROA not after:            Wed 15 May 2024 14:42:52 +0000
asID:                     268068
IP address blocks:        2804:577c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:24:2e:2f:96:a9:a9:b4:f0:91:85:4f:f0:32:83:0e:85:20:fb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAEE190B65B2228090D515B7CF62B6AEAC2F5270
        Validity
            Not Before: May 17 14:37:52 2023 GMT
            Not After : May 15 14:42:52 2024 GMT
        Subject: CN=0CDF6B75D74F47BA7772969024E99378B77B6D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cd:ad:bf:9f:25:cc:2f:ee:b3:9c:2a:03:b8:
                    a2:f3:7a:a6:d4:5f:e2:cd:f5:a3:81:b2:1a:a0:4c:
                    4d:05:fb:31:e2:9b:4d:2a:e0:fd:f4:1b:2f:be:dc:
                    24:ac:16:ec:06:42:87:b1:a1:7d:25:50:0d:25:56:
                    ec:fc:a6:91:77:99:5d:9a:62:70:92:fc:70:71:b6:
                    1b:ac:26:1f:46:7b:6f:b4:1a:9d:98:96:ee:02:ab:
                    ef:71:27:22:6d:a8:cf:76:af:05:ec:b1:61:ec:cf:
                    c5:c0:36:30:a3:67:e5:81:53:09:6a:f6:91:a8:53:
                    5f:46:a5:f4:5f:19:3a:8d:61:93:1d:2b:ff:14:54:
                    e7:98:ad:a7:01:63:63:62:9b:cb:f9:e4:d8:13:d4:
                    96:60:15:bb:5a:1f:0a:8d:df:4a:7f:70:07:bb:0a:
                    76:59:1a:df:01:38:d5:5f:e7:84:c0:9d:07:63:15:
                    72:81:d8:65:34:67:fd:39:63:ab:f8:07:04:a6:b1:
                    05:3e:52:86:0a:29:01:d9:88:63:06:c3:a7:d7:f1:
                    99:c7:3c:53:5e:45:a0:90:e3:d4:f6:ba:92:87:7a:
                    89:af:8b:71:95:f6:59:27:e5:22:d4:c3:c1:1d:65:
                    61:b5:79:60:c7:ba:b3:90:a9:dd:36:f6:62:6f:63:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DF:6B:75:D7:4F:47:BA:77:72:96:90:24:E9:93:78:B7:7B:6D:38
            X509v3 Authority Key Identifier:
                keyid:BA:EE:19:0B:65:B2:22:80:90:D5:15:B7:CF:62:B6:AE:AC:2F:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/323830343a353737633a383030303a3a2f33332d3333203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:577c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         76:d6:5a:bd:b5:ef:6e:ea:e4:d8:11:ad:85:12:d9:2b:f7:93:
         63:c6:3c:08:41:bb:4f:26:fe:bb:2d:b3:71:67:a3:93:31:86:
         80:c9:81:c4:ed:9f:a2:73:14:30:e1:2c:4f:85:f3:b6:af:f3:
         76:39:b6:36:52:e4:06:61:3d:a8:85:9c:a8:ef:ca:c5:cc:31:
         16:91:b6:0f:21:20:2f:31:6e:82:9c:06:82:f0:f9:58:80:84:
         79:77:a7:4b:ed:83:b5:4f:2f:9d:47:3b:50:9e:01:90:c9:68:
         ba:0c:cc:7a:58:c0:93:66:65:d6:ea:cc:7e:79:c4:ea:70:24:
         80:0f:f6:68:15:18:93:3d:ba:63:ae:a1:af:89:e7:74:6f:aa:
         1b:7e:30:60:37:e4:4c:ea:d7:c1:7b:59:7c:28:b1:93:e2:4e:
         b5:11:19:11:f3:4f:e9:29:9e:f4:87:d3:05:c2:12:f2:c9:48:
         d5:ef:59:a9:59:1b:17:5f:3b:32:64:0b:87:f7:2e:1c:08:c1:
         10:73:dd:06:b1:7e:7a:dd:b4:46:06:57:3c:15:16:86:82:6e:
         e0:9d:2b:4e:96:72:b4:79:e7:33:7f:e5:07:88:91:b1:ad:c6:
         de:8c:ff:09:1d:0f:ad:03:9e:96:1c:44:9e:cb:34:2e:bf:94:
         ee:01:f0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org