Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/323830343a366635343a343030303a3a2f33342d3334203d3e20323730363533.roa
File:                     323830343a366635343a343030303a3a2f33342d3334203d3e20323730363533.roa (raw, json)
Hash identifier:          5+urkLw+nCosKmKIEqlgrMe2rrl9se0oJI/XM55bm64=
Subject key identifier:   77:93:80:00:20:65:6C:7E:72:48:AE:7E:21:6D:6F:18:14:43:9A:E7
Certificate issuer:       /CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
Certificate serial:       3F40DB113A04B990CF917EACA19BCCB8C7546566
Authority key identifier: 04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/323830343a366635343a343030303a3a2f33342d3334203d3e20323730363533.roa
Signing time:             Wed 28 Jun 2023 15:00:00 +0000
ROA not before:           Wed 28 Jun 2023 14:55:00 +0000
ROA not after:            Wed 26 Jun 2024 15:00:00 +0000
asID:                     270653
IP address blocks:        2804:6f54:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:40:db:11:3a:04:b9:90:cf:91:7e:ac:a1:9b:cc:b8:c7:54:65:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
        Validity
            Not Before: Jun 28 14:55:00 2023 GMT
            Not After : Jun 26 15:00:00 2024 GMT
        Subject: CN=7793800020656C7E7248AE7E216D6F1814439AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:51:f6:0c:66:fd:3f:62:e8:fc:b3:10:1b:
                    ba:79:5b:83:c9:ef:71:5c:d6:ee:cf:b1:3d:78:7b:
                    ef:73:b0:ef:52:b3:63:81:24:25:b7:3d:36:62:7c:
                    3a:8d:c0:75:e8:92:d5:8a:92:a5:db:3d:c1:ea:d1:
                    c4:be:d8:c6:0e:56:09:64:1c:6f:c0:a6:b7:52:a6:
                    00:39:9d:51:2f:98:79:de:aa:fc:44:6f:70:44:60:
                    71:b3:77:87:e7:28:66:8b:d1:2e:66:79:66:92:f8:
                    3a:17:17:f4:2a:5f:48:23:f7:14:db:79:00:1f:c1:
                    f9:aa:a9:52:7e:a8:8f:8b:ba:54:a6:12:8a:3b:53:
                    71:54:34:dc:50:5e:e6:bd:4d:5c:79:90:9f:60:59:
                    70:0c:0f:f6:5a:20:a4:86:6a:95:3e:08:f2:22:0d:
                    e2:93:d2:c7:25:df:e1:36:9b:cb:f9:c1:19:c0:da:
                    5d:fd:74:bb:69:71:b2:9f:bc:ed:25:b3:d2:5f:b4:
                    ad:5a:7c:c5:08:e3:b6:25:0d:90:44:d7:08:00:89:
                    58:9f:ac:c0:76:11:e1:5f:c4:fa:3d:ec:2a:32:8b:
                    ea:93:ce:0a:70:fd:63:c9:0d:bc:ce:e5:96:98:34:
                    a4:0a:b4:ea:56:18:e8:ec:ea:a3:0d:c3:52:fb:5e:
                    57:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:93:80:00:20:65:6C:7E:72:48:AE:7E:21:6D:6F:18:14:43:9A:E7
            X509v3 Authority Key Identifier:
                keyid:04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/323830343a366635343a343030303a3a2f33342d3334203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f54:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         85:19:95:61:83:21:9d:13:f3:e7:03:f8:15:44:8b:c7:84:9c:
         51:90:e9:8e:7c:c3:53:00:c1:87:a9:85:4b:fd:fa:20:af:92:
         ec:f2:2e:2c:48:6b:b0:9d:50:c4:de:0a:a0:70:ca:ec:97:7c:
         4e:0c:cd:37:da:1e:52:4e:79:02:ef:11:8e:9e:00:0c:ac:39:
         df:07:81:49:8c:11:48:61:7d:5a:ce:4c:ab:c2:c1:93:31:8d:
         fb:7a:47:d5:d0:9a:82:70:63:c0:46:1e:5e:e0:93:84:3a:1c:
         53:48:47:af:cb:f3:dd:93:61:25:d3:02:34:fa:72:b9:bf:0a:
         13:e7:ec:71:e8:0b:a5:6e:d1:b3:30:d9:49:93:e4:ed:21:67:
         ed:85:86:ea:69:41:3c:60:0a:99:37:1f:2a:2d:60:d3:b3:9b:
         f5:c1:05:40:f1:39:03:c5:b9:03:cf:21:b9:2c:e5:9f:05:40:
         1c:b4:a5:32:05:d5:9e:d6:11:a0:4e:02:ff:cb:32:f4:20:3f:
         03:bc:ee:9d:b7:16:e6:ce:52:89:9f:36:4e:6c:c4:71:17:7d:
         dc:9c:f2:1d:e5:a9:cf:33:09:c6:35:a8:43:20:45:df:c5:0a:
         39:93:41:00:36:8f:90:27:ad:6c:eb:ee:65:b2:ba:85:13:19:
         45:83:88:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org