Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/1/323830343a3663383a3a2f33322d3438203d3e20323632363036.roa
File:                     323830343a3663383a3a2f33322d3438203d3e20323632363036.roa (raw, json)
Hash identifier:          ifhnbfsSrFWZgoBU5ZfFoxeT/0XBQ+H5YvsckfFEZlE=
Subject key identifier:   4E:87:C7:3B:76:05:97:C7:2E:7A:84:50:19:71:BE:D0:5F:81:A6:69
Certificate issuer:       /CN=BB3CC1D35CE466F9158D5E711B7A6D990160050C
Certificate serial:       537DE6582B38AC1792DFC4C0EF0109BBAB4EC996
Authority key identifier: BB:3C:C1:D3:5C:E4:66:F9:15:8D:5E:71:1B:7A:6D:99:01:60:05:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB3CC1D35CE466F9158D5E711B7A6D990160050C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/1/323830343a3663383a3a2f33322d3438203d3e20323632363036.roa
Signing time:             Mon 30 Oct 2023 15:24:27 +0000
ROA not before:           Mon 30 Oct 2023 15:19:27 +0000
ROA not after:            Mon 28 Oct 2024 15:24:27 +0000
asID:                     262606
IP address blocks:        2804:6c8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7d:e6:58:2b:38:ac:17:92:df:c4:c0:ef:01:09:bb:ab:4e:c9:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB3CC1D35CE466F9158D5E711B7A6D990160050C
        Validity
            Not Before: Oct 30 15:19:27 2023 GMT
            Not After : Oct 28 15:24:27 2024 GMT
        Subject: CN=4E87C73B760597C72E7A84501971BED05F81A669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bc:a8:eb:d7:f1:e5:57:fe:9b:58:02:98:ab:
                    6b:a1:8c:55:cc:6e:8d:16:a0:e4:53:1e:df:9b:79:
                    08:fe:aa:14:ee:37:e7:1e:6b:0f:23:e7:79:75:31:
                    1c:1a:11:2f:98:57:23:af:7b:eb:30:73:3e:9e:1f:
                    2b:6c:3a:0f:c2:61:a2:43:a7:7e:9e:c2:c2:35:68:
                    87:03:22:ff:42:65:3d:da:be:5c:1e:11:97:39:3f:
                    58:70:e8:84:2b:2d:15:20:d1:95:e3:93:a0:e9:a1:
                    87:45:b3:d6:ee:df:69:e9:95:ae:8e:a3:58:4f:ad:
                    db:35:de:bd:3b:af:50:2c:3e:df:5c:59:f4:5c:4c:
                    e6:d9:6e:51:4f:64:82:5d:80:ff:30:44:32:71:88:
                    d4:4c:fc:f4:5b:a7:14:46:a2:56:7a:7c:c1:2f:b1:
                    0b:68:38:58:e0:17:99:76:dd:23:fb:67:6f:a7:c6:
                    1d:fd:59:a3:02:97:a7:1b:33:4a:68:6b:07:8a:9c:
                    74:3f:f9:80:86:08:2b:48:da:14:db:52:83:ba:3a:
                    01:08:34:f9:1c:15:2d:84:fc:63:b9:d1:84:55:17:
                    75:a5:2b:0a:9d:51:ae:85:6a:81:c2:42:f7:12:a5:
                    08:73:e7:20:0e:00:82:64:4e:55:44:f6:0a:6d:ad:
                    43:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:87:C7:3B:76:05:97:C7:2E:7A:84:50:19:71:BE:D0:5F:81:A6:69
            X509v3 Authority Key Identifier:
                keyid:BB:3C:C1:D3:5C:E4:66:F9:15:8D:5E:71:1B:7A:6D:99:01:60:05:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/1/BB3CC1D35CE466F9158D5E711B7A6D990160050C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB3CC1D35CE466F9158D5E711B7A6D990160050C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/1/323830343a3663383a3a2f33322d3438203d3e20323632363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:52:25:8a:8d:0e:65:36:e8:05:a0:2b:37:f5:b5:cf:cf:4a:
         ab:cf:9b:03:5c:59:de:09:dd:93:c9:9d:93:9b:1a:cf:8f:3d:
         6e:71:21:4a:cd:52:e5:83:58:5f:ef:f3:46:2d:3a:2d:54:7c:
         e3:a1:e4:c4:28:8b:2e:3e:79:4d:53:0a:39:2c:f5:ef:e0:b7:
         d6:5d:88:4f:98:cb:0d:ff:f9:1c:64:8f:19:01:de:44:71:30:
         4f:1d:79:e4:2a:ea:0b:3c:e1:da:97:41:f7:7b:96:d3:df:4a:
         5d:77:e2:3c:18:00:78:f5:f0:80:7c:41:e9:d9:20:bd:4d:8e:
         af:51:75:51:7f:67:24:29:79:cf:a6:6b:19:26:60:66:26:8a:
         55:77:73:84:a9:da:8d:4d:df:4f:f1:07:2f:fb:30:79:28:0b:
         77:7e:c9:69:69:88:17:77:f3:b1:a5:bb:16:d6:db:3e:01:f3:
         66:86:2d:ca:60:8e:06:03:ce:d4:f4:1b:77:ba:0f:af:62:01:
         17:2b:d6:55:5d:18:7d:1e:19:cc:5e:e4:a2:8f:86:e6:93:92:
         bc:17:5a:e5:3e:1a:e1:df:99:6d:b2:fb:a2:b3:8b:c2:6c:e9:
         51:35:be:31:a2:92:a7:0e:d8:dc:d2:a4:49:dd:22:b7:a1:72:
         17:0e:6a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org