Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a3a2f33322d3332203d3e20323637393939.roa
File:                     323830343a353637343a3a2f33322d3332203d3e20323637393939.roa (raw, json)
Hash identifier:          oN9fuIgI2AnTaI0vrfnVDdq6YPh34K8i3WWoj9qeyV4=
Subject key identifier:   0D:32:AC:73:95:5E:31:53:B9:D6:53:AF:70:0E:B4:0A:0B:6D:EE:D4
Certificate issuer:       /CN=BA0388E1CA5924A916BB11653DD42285A7776A4B
Certificate serial:       4FF60323F820EBCBBE0F438A59527984B9E813F5
Authority key identifier: BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a3a2f33322d3332203d3e20323637393939.roa
Signing time:             Thu 30 Nov 2023 20:50:58 +0000
ROA not before:           Thu 30 Nov 2023 20:45:58 +0000
ROA not after:            Thu 28 Nov 2024 20:50:58 +0000
asID:                     267999
IP address blocks:        2804:5674::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f6:03:23:f8:20:eb:cb:be:0f:43:8a:59:52:79:84:b9:e8:13:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0388E1CA5924A916BB11653DD42285A7776A4B
        Validity
            Not Before: Nov 30 20:45:58 2023 GMT
            Not After : Nov 28 20:50:58 2024 GMT
        Subject: CN=0D32AC73955E3153B9D653AF700EB40A0B6DEED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a8:48:31:0e:e9:51:1e:23:c7:6e:02:73:54:
                    d3:30:06:12:27:b0:bc:ef:bc:ba:74:1e:aa:e1:82:
                    1d:f8:9a:13:ba:f3:b8:03:96:19:b9:c5:ba:b0:44:
                    80:20:93:ce:3c:de:d4:02:3c:05:f5:fe:42:c0:f9:
                    14:34:89:db:2f:07:2c:4c:ab:55:5b:82:3a:9e:00:
                    54:4c:10:8f:6d:f8:21:0a:35:1d:d3:6f:13:89:6f:
                    7e:bf:f2:39:5f:e5:6d:05:f0:da:2a:8e:32:e8:58:
                    3f:7b:11:85:c0:16:76:2e:db:5b:43:27:a7:be:a3:
                    af:a4:3f:44:d4:96:a4:63:a0:a3:9b:64:a5:42:1b:
                    70:a0:12:ea:94:17:5c:0d:84:6b:f9:69:24:c1:f4:
                    c5:1a:a6:1e:63:a5:62:80:cc:ce:71:3b:57:bb:c0:
                    6e:0c:fb:37:9e:7c:df:91:f5:f5:97:3f:d3:e7:00:
                    37:ba:d8:b9:e0:98:0f:f4:f5:f2:b1:8b:45:b0:99:
                    75:d3:56:0d:1e:4e:48:cb:1a:ad:a3:39:f9:82:54:
                    96:60:4a:bd:36:4b:3f:18:a8:e2:e9:cd:57:ec:81:
                    8a:a1:e4:6c:84:09:5b:d5:46:3d:27:0f:e1:fe:75:
                    ca:17:ba:20:a7:ce:69:fa:c7:1f:f9:36:a6:e0:c3:
                    10:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:32:AC:73:95:5E:31:53:B9:D6:53:AF:70:0E:B4:0A:0B:6D:EE:D4
            X509v3 Authority Key Identifier:
                keyid:BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a3a2f33322d3332203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:23:af:d8:3c:15:00:78:81:19:bf:27:b3:a9:70:ca:ed:5e:
         08:63:41:2c:7e:b7:ca:f1:19:2e:40:2c:87:b7:2b:e6:70:1e:
         f4:f8:37:da:c3:35:33:68:52:99:31:3d:94:2e:cd:93:42:57:
         9e:12:7b:a0:85:0a:5c:73:2d:20:ca:3d:e6:97:e6:cd:c8:48:
         2b:cf:62:6d:cd:f1:22:07:6e:8c:07:06:58:93:af:2e:c2:0a:
         b0:a1:84:8d:38:23:9c:df:3c:7f:23:19:41:65:e6:be:1f:2a:
         29:07:eb:aa:5c:38:8d:9c:b2:38:f1:58:41:c3:d9:b3:0e:69:
         1f:51:b4:52:06:3b:9b:26:20:65:69:2d:6c:52:7a:7e:ee:08:
         fb:7f:44:26:42:fb:09:8b:a7:bf:39:6a:31:a4:f2:fd:8b:3c:
         ff:5c:67:0b:ec:19:50:bf:9d:8d:7e:ea:34:1a:0a:97:b2:f3:
         ab:c7:19:6a:78:5f:7e:10:1a:20:24:63:74:d2:70:20:cb:2c:
         ef:c6:ab:f0:05:10:de:a1:9a:e9:1c:59:e9:24:30:b0:26:94:
         df:3d:72:f6:4c:75:10:92:80:76:a4:d5:c4:ac:fe:62:8c:10:
         b8:84:6f:d6:66:23:18:7a:e7:44:7d:e6:2a:f1:ee:52:d8:a9:
         bc:72:03:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org