Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a383030303a3a2f33332d3333203d3e20323637393939.roa
File:                     323830343a353637343a383030303a3a2f33332d3333203d3e20323637393939.roa (raw, json)
Hash identifier:          lO0uXlHNs4FUPbszC8071t09Q4MTbySxqi4YwGM964M=
Subject key identifier:   4B:11:48:27:3B:61:35:C2:46:CE:91:89:95:A3:12:AF:2F:FB:5A:51
Certificate issuer:       /CN=BA0388E1CA5924A916BB11653DD42285A7776A4B
Certificate serial:       13BD7A4A6FCE8B7A30D963B24B97ED7884E400CB
Authority key identifier: BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a383030303a3a2f33332d3333203d3e20323637393939.roa
Signing time:             Thu 30 Nov 2023 20:51:14 +0000
ROA not before:           Thu 30 Nov 2023 20:46:14 +0000
ROA not after:            Thu 28 Nov 2024 20:51:14 +0000
asID:                     267999
IP address blocks:        2804:5674:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:bd:7a:4a:6f:ce:8b:7a:30:d9:63:b2:4b:97:ed:78:84:e4:00:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0388E1CA5924A916BB11653DD42285A7776A4B
        Validity
            Not Before: Nov 30 20:46:14 2023 GMT
            Not After : Nov 28 20:51:14 2024 GMT
        Subject: CN=4B1148273B6135C246CE918995A312AF2FFB5A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:5f:27:d8:c0:e5:ac:77:fc:55:74:49:6b:
                    6b:d9:e8:04:71:20:5d:e2:32:a7:b4:7f:bc:db:46:
                    97:54:a3:37:19:4e:ec:75:2b:e4:1c:04:ef:06:18:
                    ae:6b:3b:8e:06:fc:df:31:34:b4:97:70:0b:65:ef:
                    f2:33:5e:da:fd:c5:e6:e0:dd:aa:94:39:cd:7e:ac:
                    a9:cf:ab:59:3c:b5:a1:37:23:84:4e:ac:bb:7a:40:
                    98:2c:55:18:da:44:b1:3d:45:a2:99:cf:d8:62:10:
                    92:07:4f:75:31:cd:de:9a:82:03:b4:a9:0c:3a:62:
                    df:f9:f8:3a:90:b8:52:da:22:56:3f:d6:0e:34:34:
                    05:48:ca:72:be:2d:90:d3:eb:5d:8a:87:b5:1a:98:
                    82:cb:0f:2c:89:87:24:91:6a:00:08:3b:5f:19:74:
                    ea:82:89:5f:2c:2c:15:42:fe:88:35:21:07:b0:e1:
                    54:d0:89:5a:e9:9a:f3:0c:04:91:89:95:ae:82:2b:
                    3d:ef:46:e4:57:aa:57:9c:f4:69:68:21:12:e2:10:
                    ce:62:7c:88:a8:83:dc:c2:15:39:4f:a3:2b:a2:49:
                    4a:4a:e4:a1:38:3b:fe:a5:5b:5c:26:f3:a0:7a:4d:
                    40:dc:ea:14:92:48:7d:b7:e8:4d:e9:a8:88:56:23:
                    ec:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:11:48:27:3B:61:35:C2:46:CE:91:89:95:A3:12:AF:2F:FB:5A:51
            X509v3 Authority Key Identifier:
                keyid:BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a383030303a3a2f33332d3333203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         61:23:7c:ae:40:a5:a5:ca:54:37:86:15:8d:68:25:26:bf:a9:
         2d:94:9b:1d:9e:19:98:2a:f4:89:84:5e:fb:de:df:3e:1f:85:
         2e:7b:2a:c7:ba:79:3a:0e:e9:07:5a:74:b0:d2:1a:72:3a:b2:
         ac:cd:6e:52:4b:a9:a1:8c:86:b6:e2:6b:87:1d:45:cd:80:78:
         31:23:bc:c7:9a:ac:2e:f4:ca:9c:e6:98:84:d1:a6:8e:f6:0f:
         05:90:52:6b:da:c2:a2:16:fb:8b:0c:1b:06:82:fa:e4:4e:47:
         08:19:1c:49:b5:2a:36:94:85:96:bf:d6:6a:95:ef:9b:26:51:
         3a:33:5f:4d:fd:5f:0b:87:97:f2:5c:f0:09:59:12:6f:09:42:
         d2:1c:4d:fb:7a:3f:fc:50:e3:52:d6:32:0c:e2:a3:ed:fb:f7:
         4d:ba:ad:4b:56:19:af:bd:2b:e3:f7:92:d2:79:e1:fd:80:3f:
         e7:76:3b:6f:c5:cf:2f:8a:71:d1:f0:dd:fd:cf:86:ff:78:14:
         f2:43:12:98:27:3d:83:53:d0:ae:39:ae:1e:67:a9:97:c4:2a:
         43:d5:48:0b:a9:97:27:dd:b7:2b:50:b9:b4:97:fb:0e:3a:0e:
         f1:58:f0:38:a6:fe:be:d4:e8:38:63:3c:c8:ce:3d:00:d3:a7:
         cc:c9:3f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org