Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/323830343a333836633a3a2f33322d313238203d3e20323636343736.roa
File:                     323830343a333836633a3a2f33322d313238203d3e20323636343736.roa (raw, json)
Hash identifier:          XnLUMsihmdjtA905c64E85bzP970cAAVaxs2LB6yE10=
Subject key identifier:   17:B6:9F:86:EC:14:05:D9:E3:8E:48:B5:C0:35:2A:7C:8A:97:6C:9C
Certificate issuer:       /CN=BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05
Certificate serial:       7B8604B991B78F7DA11E549016B16207C5B1D0A4
Authority key identifier: BA:B4:3B:B8:90:0B:A7:B9:2C:91:D6:5B:3D:E1:2D:CC:80:A5:CA:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/323830343a333836633a3a2f33322d313238203d3e20323636343736.roa
Signing time:             Thu 26 Jan 2023 13:39:11 +0000
ROA not before:           Thu 26 Jan 2023 13:34:11 +0000
ROA not after:            Thu 25 Jan 2024 13:39:11 +0000
asID:                     266476
IP address blocks:        2804:386c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:86:04:b9:91:b7:8f:7d:a1:1e:54:90:16:b1:62:07:c5:b1:d0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05
        Validity
            Not Before: Jan 26 13:34:11 2023 GMT
            Not After : Jan 25 13:39:11 2024 GMT
        Subject: CN=17B69F86EC1405D9E38E48B5C0352A7C8A976C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:76:ad:fd:9d:44:a3:e0:75:77:69:b6:2a:
                    8f:8a:25:94:6d:25:26:ad:30:29:69:d1:b2:57:5f:
                    51:58:8a:58:e8:03:5a:38:a8:14:e1:ae:9e:40:11:
                    73:5a:12:b1:c6:5b:56:a6:ff:e2:e9:2c:8d:9b:6a:
                    27:01:a1:39:db:af:1d:aa:0b:67:74:f6:14:df:dc:
                    92:5f:50:d4:85:41:15:13:4e:ee:3c:cd:01:08:64:
                    e7:e5:50:c7:4f:36:ab:9c:87:f1:d3:9d:b0:a5:71:
                    81:63:87:f2:75:1e:85:ba:da:c3:bc:4c:d9:99:6c:
                    af:85:28:62:bd:47:ff:d2:96:81:c4:39:9e:e7:54:
                    6b:19:bb:58:6e:c2:0a:ff:4c:a6:ef:ba:6f:1d:b4:
                    52:63:98:dd:1e:69:fb:86:03:7b:36:36:ee:62:3d:
                    85:b5:f6:85:7e:2c:f0:33:df:71:1f:e8:5e:67:dc:
                    81:ee:2c:b6:72:b8:2e:c1:68:70:45:20:85:90:4a:
                    2d:49:0e:ff:d7:bf:da:ae:ee:c6:b6:e8:03:91:1b:
                    1f:62:e4:63:9b:ea:53:5b:41:ed:f7:8f:85:3e:f8:
                    f2:a1:7c:1e:51:ab:75:79:1c:ec:bb:d6:ac:2a:8e:
                    d1:01:30:1d:b5:d4:44:0a:0e:7a:1d:86:67:a4:2e:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B6:9F:86:EC:14:05:D9:E3:8E:48:B5:C0:35:2A:7C:8A:97:6C:9C
            X509v3 Authority Key Identifier:
                keyid:BA:B4:3B:B8:90:0B:A7:B9:2C:91:D6:5B:3D:E1:2D:CC:80:A5:CA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/323830343a333836633a3a2f33322d313238203d3e20323636343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:386c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:60:3c:18:4f:95:92:47:9f:af:6c:b1:5e:bc:7f:70:a8:37:
         02:f0:d9:a9:b6:a6:b6:40:11:65:88:f3:58:08:38:99:f0:8b:
         03:c4:ee:79:f2:6a:05:f8:ee:c2:26:94:78:c8:15:7e:1c:aa:
         b8:84:6b:dd:b6:08:95:0c:39:17:9f:68:11:2c:3a:77:1f:1d:
         12:97:2a:30:8d:09:ac:bb:9b:53:28:5d:c0:5e:65:ea:ae:63:
         7a:a9:a9:76:83:90:e8:72:6e:23:a7:1f:89:9f:16:1a:1f:ac:
         f0:81:1b:fd:32:fc:20:af:66:3e:70:f4:2c:1a:06:af:a1:1b:
         82:f9:0f:a8:02:f7:61:31:fb:d2:c4:06:35:7b:44:66:95:dc:
         ef:7e:94:d8:a7:cc:b2:b5:d8:d9:2b:53:ef:83:0f:f3:b4:b4:
         34:38:a5:07:2b:21:b1:e0:8d:d2:67:fa:88:97:f1:d4:cb:0d:
         2a:36:2d:a5:bf:bb:30:bf:ba:03:e1:fa:9f:ff:17:44:66:2e:
         74:ac:b7:90:cb:73:ce:4a:a9:63:aa:e6:1c:34:1c:53:02:f0:
         12:f7:6e:16:d9:e1:e5:c8:29:0b:09:21:24:b4:1f:84:98:d4:
         45:49:04:6d:37:51:ae:d0:33:c8:63:6c:27:d2:a7:1b:16:45:
         ae:b2:d9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org