Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/323830343a336263383a3a2f33332d3438203d3e20323636313730.roa
File:                     323830343a336263383a3a2f33332d3438203d3e20323636313730.roa (raw, json)
Hash identifier:          d08TWz1M4t7qCRn/3wweQJZbZgKP0HbEI3v/3JWWStI=
Subject key identifier:   6C:E8:5E:66:5B:97:00:0C:EA:F4:19:C2:BD:BE:2D:41:83:CC:AF:50
Certificate issuer:       /CN=BFE42304450EA733F37BD9420D070B3323835C2F
Certificate serial:       42C7A44D902F9CE71E11EA89B651CB0C533F4EE2
Authority key identifier: BF:E4:23:04:45:0E:A7:33:F3:7B:D9:42:0D:07:0B:33:23:83:5C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE42304450EA733F37BD9420D070B3323835C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/323830343a336263383a3a2f33332d3438203d3e20323636313730.roa
Signing time:             Fri 09 Feb 2024 12:33:35 +0000
ROA not before:           Fri 09 Feb 2024 12:28:35 +0000
ROA not after:            Fri 07 Feb 2025 12:33:35 +0000
asID:                     266170
IP address blocks:        2804:3bc8::/33 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c7:a4:4d:90:2f:9c:e7:1e:11:ea:89:b6:51:cb:0c:53:3f:4e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE42304450EA733F37BD9420D070B3323835C2F
        Validity
            Not Before: Feb  9 12:28:35 2024 GMT
            Not After : Feb  7 12:33:35 2025 GMT
        Subject: CN=6CE85E665B97000CEAF419C2BDBE2D4183CCAF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:b8:68:f6:88:ad:21:34:58:30:94:83:ac:
                    3f:de:9c:84:f1:24:bc:73:50:f1:32:d6:e9:02:02:
                    89:17:7d:fb:8c:78:b2:2d:8e:11:d8:fd:ec:7e:97:
                    0a:b8:61:69:97:45:d1:4a:83:72:46:12:21:55:35:
                    91:01:9f:bf:93:e4:bc:96:ca:1a:56:6e:df:c9:13:
                    6d:bc:2f:cc:af:69:56:46:36:bb:6d:ad:ec:25:fa:
                    e3:c9:cf:d2:bc:3a:0d:22:f5:93:d9:1d:98:61:14:
                    0d:2d:b4:9e:1a:d3:9d:41:ef:a8:e6:ec:b9:4a:ff:
                    54:2e:9b:b4:d9:08:02:e2:6d:1b:c9:f5:8f:c2:a9:
                    88:8b:2c:bf:b1:c5:1e:fb:33:67:5f:c3:09:4a:db:
                    a9:c0:38:e5:99:ac:e1:88:e6:20:3f:fa:4d:97:6d:
                    a0:d2:9a:e6:56:de:cb:b2:f8:81:97:e3:c2:62:4a:
                    a2:c8:67:e9:a7:50:c1:d0:10:b0:16:80:2d:c6:c6:
                    38:f5:8c:77:e5:cd:56:33:b1:0a:11:b1:95:40:9c:
                    d1:3f:d1:9f:8c:9c:6f:7e:ac:8a:e0:a7:cf:20:6f:
                    60:db:6c:dc:9d:94:16:5d:80:a5:60:82:55:86:9a:
                    1d:f7:60:41:c7:cb:c4:33:ba:25:d6:8d:35:65:9b:
                    5f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E8:5E:66:5B:97:00:0C:EA:F4:19:C2:BD:BE:2D:41:83:CC:AF:50
            X509v3 Authority Key Identifier:
                keyid:BF:E4:23:04:45:0E:A7:33:F3:7B:D9:42:0D:07:0B:33:23:83:5C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/BFE42304450EA733F37BD9420D070B3323835C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE42304450EA733F37BD9420D070B3323835C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/323830343a336263383a3a2f33332d3438203d3e20323636313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc8::/33

    Signature Algorithm: sha256WithRSAEncryption
         07:20:97:39:76:c1:d7:c2:49:ac:3d:fc:ff:b0:03:2e:05:d9:
         c7:e4:21:b4:e2:d2:0a:7c:e5:75:ef:5e:17:09:e7:33:9a:47:
         47:76:41:ee:6a:36:be:0a:3e:f3:9c:c5:f4:c3:a8:de:06:a1:
         6b:f4:2e:31:b7:36:6f:89:7c:7c:eb:75:17:db:e6:3a:1d:5b:
         e8:b7:de:74:fa:8e:02:06:9d:0f:a7:32:27:62:c7:d1:14:26:
         d1:6a:b1:99:37:b0:cf:7b:c5:5c:40:e7:76:a7:f7:16:3e:bb:
         b8:04:90:ac:8d:9e:18:3a:38:64:c6:bb:9a:34:60:c0:e2:f7:
         a8:fb:9e:49:08:20:91:62:d4:7d:d7:17:a1:d9:85:68:51:0e:
         22:2a:fb:e9:cc:15:4e:c9:21:ba:67:43:bc:66:05:9e:41:0e:
         89:ea:9a:e3:76:ed:ba:d2:8d:fc:b6:52:ec:e1:d7:d1:1d:e2:
         72:e4:26:c7:bd:a7:34:3f:53:3a:32:6c:c0:c0:99:c7:d8:5a:
         f6:96:4e:4b:c3:42:25:51:67:5a:d4:b7:10:04:d9:5a:58:2a:
         bd:ad:aa:f5:6b:18:f9:ae:3a:99:1d:af:8e:07:50:41:11:d9:
         c6:2b:1c:de:48:bd:4b:00:9a:ab:0e:74:4c:37:d5:70:27:7d:
         cd:5d:f5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:15 2024 by rpki-client on console-ams.rpki-client.org