Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a313130323a3a2f34382d3438203d3e20323634353835.roa
File:                     323830343a323230303a313130323a3a2f34382d3438203d3e20323634353835.roa (raw, json)
Hash identifier:          Wa4XfH3apXf6c4FQ7P66tmQJv8sA7HQ0G1OJ0nx+w88=
Subject key identifier:   B9:19:66:8B:08:88:93:A4:64:17:18:D0:8F:5C:A2:C4:7C:D5:9A:4B
Certificate issuer:       /CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
Certificate serial:       0C443ECA9465FD96559BE2BBD8B7C0946F3D2EFA
Authority key identifier: BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a313130323a3a2f34382d3438203d3e20323634353835.roa
Signing time:             Mon 04 Sep 2023 15:34:14 +0000
ROA not before:           Mon 04 Sep 2023 15:29:14 +0000
ROA not after:            Mon 02 Sep 2024 15:34:14 +0000
asID:                     264585
IP address blocks:        2804:2200:1102::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:44:3e:ca:94:65:fd:96:55:9b:e2:bb:d8:b7:c0:94:6f:3d:2e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
        Validity
            Not Before: Sep  4 15:29:14 2023 GMT
            Not After : Sep  2 15:34:14 2024 GMT
        Subject: CN=B919668B088893A4641718D08F5CA2C47CD59A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:ad:d3:15:4b:46:eb:c2:5c:e5:e7:b4:55:
                    a1:5c:77:20:67:42:b5:14:6d:70:25:87:30:f8:cd:
                    5d:0a:c5:d1:a2:a9:21:5f:6e:ac:cf:33:b3:09:3b:
                    24:b8:1e:9b:0d:05:7c:77:cf:9c:4a:25:b5:ae:a3:
                    8c:2b:3f:cf:6b:40:37:be:69:54:36:ff:7c:53:39:
                    db:85:21:56:df:0e:42:42:f6:18:f4:c5:8f:10:1f:
                    76:f3:25:4f:bf:a1:53:40:aa:56:9f:2f:74:01:97:
                    c4:52:8c:81:c8:6a:20:8d:86:73:93:53:2e:4a:e3:
                    7d:e6:d5:87:83:fc:65:fa:aa:ff:0f:d0:36:27:77:
                    62:0c:99:17:3e:75:b9:30:0a:20:0a:d6:66:35:6d:
                    cd:22:c1:c2:52:54:78:61:e1:76:30:ec:04:ac:e0:
                    ad:c5:cf:e1:ab:fb:46:d7:ef:e9:50:50:5f:b9:d5:
                    35:af:2b:26:d3:08:b6:8c:ea:2f:8e:6c:2b:85:94:
                    e0:d6:74:ab:d3:df:05:0e:d1:65:78:e8:16:bc:a5:
                    83:8b:43:7a:85:7f:cb:53:2f:46:b2:40:a5:a2:4c:
                    46:05:54:bf:ae:63:02:b1:05:1f:3f:95:ef:8d:65:
                    33:2b:32:fc:f3:39:c5:cf:39:e5:c5:4f:e4:e8:34:
                    32:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:19:66:8B:08:88:93:A4:64:17:18:D0:8F:5C:A2:C4:7C:D5:9A:4B
            X509v3 Authority Key Identifier:
                keyid:BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a313130323a3a2f34382d3438203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2200:1102::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:64:01:70:a3:a5:57:4f:10:5a:f8:c8:b9:f1:99:6a:18:46:
         1b:25:45:d3:00:52:45:7d:34:c7:55:2c:f9:81:f1:65:27:c5:
         93:ae:fb:74:e4:a6:61:98:91:4d:ff:91:3f:e0:98:d1:56:52:
         da:0f:bc:87:ba:02:00:cf:ce:63:b5:af:ed:a5:64:fa:57:3e:
         02:5a:10:52:69:d5:5f:7a:cc:43:05:5c:15:c0:97:15:57:ae:
         d0:d6:61:e8:a8:03:67:84:a7:12:35:51:7f:58:c7:d2:b9:99:
         24:be:da:6e:0d:74:0d:e1:ab:55:a1:46:0c:78:25:d1:8e:f4:
         6c:14:a9:dd:46:04:a0:cf:d4:e5:35:24:b5:56:93:84:a5:13:
         95:bb:49:bc:af:a8:b0:ba:e1:ed:56:7e:2e:4f:cd:84:64:cb:
         cf:2c:ab:90:0b:75:f6:8c:4f:85:a3:b6:a8:d7:24:e6:db:0c:
         2c:da:8f:2b:4a:f1:02:f8:1d:5d:80:38:e2:5f:f9:13:66:67:
         4d:7d:e1:ff:dc:d6:43:59:4d:2b:4e:7c:c9:6d:c8:98:29:c0:
         6e:7b:a0:3f:d4:a1:84:27:80:27:82:74:ed:eb:65:a6:33:c3:
         d8:e8:98:d0:88:b7:68:a9:71:72:b3:15:c5:4c:06:fd:10:93:
         57:b6:41:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org