Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a343030303a3a2f33342d3334203d3e20323637393939.roa
File:                     323830343a353637343a343030303a3a2f33342d3334203d3e20323637393939.roa (raw, json)
Hash identifier:          PbZR4RDiRO7VqhrY/5i8Vbk7YnVIXS7eML/DNCm0s78=
Subject key identifier:   69:92:31:4B:E6:5A:58:2E:33:C7:84:F6:C3:C3:0E:F4:33:D5:F1:3B
Certificate issuer:       /CN=BA0388E1CA5924A916BB11653DD42285A7776A4B
Certificate serial:       03ED9481E8FC92E9ECBEE41D724CF41CA5CC3493
Authority key identifier: BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a343030303a3a2f33342d3334203d3e20323637393939.roa
Signing time:             Thu 30 Nov 2023 20:51:10 +0000
ROA not before:           Thu 30 Nov 2023 20:46:10 +0000
ROA not after:            Thu 28 Nov 2024 20:51:10 +0000
asID:                     267999
IP address blocks:        2804:5674:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ed:94:81:e8:fc:92:e9:ec:be:e4:1d:72:4c:f4:1c:a5:cc:34:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0388E1CA5924A916BB11653DD42285A7776A4B
        Validity
            Not Before: Nov 30 20:46:10 2023 GMT
            Not After : Nov 28 20:51:10 2024 GMT
        Subject: CN=6992314BE65A582E33C784F6C3C30EF433D5F13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:6b:d2:d8:e9:fe:7b:18:19:0b:7a:c8:0b:
                    e4:9a:b4:94:0d:42:5a:2c:25:4d:3f:b5:2e:60:65:
                    5e:9c:0f:65:ad:38:c1:94:15:8f:21:19:0c:84:e2:
                    3c:6d:2a:df:05:3e:c5:82:c2:44:37:19:8c:2a:be:
                    de:96:4f:7d:f4:61:04:b3:1d:dd:ff:ce:3b:e0:cb:
                    12:c9:a0:ae:1f:93:37:17:74:bf:81:4c:45:df:a7:
                    15:5d:21:37:0a:59:c2:bd:a5:2e:f3:11:98:92:cd:
                    d9:fc:88:4f:75:21:45:23:d2:87:98:6c:f0:46:52:
                    1e:e7:56:8c:7f:f2:0f:9e:bf:b9:2e:e1:7f:f3:3e:
                    b9:27:85:b2:cc:75:73:2f:6e:6b:29:16:73:38:f0:
                    5a:a0:57:b1:44:68:e0:2e:22:b5:d7:ee:7c:b0:c0:
                    28:8e:83:c2:55:1a:6f:60:b3:d2:ed:f5:42:2b:1d:
                    74:ce:d4:6c:47:de:3b:05:1d:03:c6:94:6d:5f:8f:
                    e6:08:2c:d7:58:91:67:d4:ec:0c:2b:73:be:ec:3a:
                    ca:d4:53:e4:ee:ec:f1:20:cf:97:0c:b1:9d:d7:f4:
                    37:42:dc:7b:7c:f4:c0:38:1a:67:b6:92:bd:a9:67:
                    b1:0a:45:7e:89:5b:3e:cf:03:1d:f9:b4:5a:3b:59:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:92:31:4B:E6:5A:58:2E:33:C7:84:F6:C3:C3:0E:F4:33:D5:F1:3B
            X509v3 Authority Key Identifier:
                keyid:BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a343030303a3a2f33342d3334203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         49:d7:e6:96:4a:11:aa:c4:88:0b:e8:f3:5b:ef:1a:14:21:d7:
         d1:88:1e:5f:ed:7c:20:b5:62:e4:0e:0c:78:3c:8d:05:87:bd:
         3f:5b:77:e6:b8:11:be:99:ac:c2:b7:90:9d:2f:76:d0:1c:ee:
         5e:a8:a7:81:bd:5c:30:d3:b1:8a:af:c9:85:1a:4d:7c:4a:c8:
         a4:6a:00:ee:e7:19:d5:87:64:1a:41:65:bb:b3:5d:72:01:db:
         2e:4e:58:1f:de:d2:65:e5:48:5a:58:c3:f2:52:99:3b:a2:58:
         69:ce:40:de:81:4d:ca:3a:cc:49:1c:49:5f:5a:52:88:b7:a4:
         5b:85:46:31:36:6d:b7:a6:f3:54:78:0a:ab:99:55:50:9c:81:
         93:b5:d7:34:fa:b8:20:64:3f:18:cf:a7:c1:d4:c2:6e:bc:c0:
         13:72:6e:ea:a4:88:53:d4:a0:3f:ce:2e:db:dd:ab:11:2e:1f:
         d5:8d:21:de:13:1f:12:54:14:a7:71:6d:81:6e:cd:7e:57:61:
         cc:ab:06:e9:ce:26:80:aa:fa:d5:46:d4:f2:cc:49:75:e2:41:
         ea:74:79:d4:aa:07:ed:84:bd:56:23:63:fc:36:fb:9c:57:51:
         31:8f:85:7d:1b:8b:f4:5d:8c:57:9a:4c:ac:d1:8e:d8:21:4a:
         21:84:41:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org