Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/323830343a366635343a633030303a3a2f33342d3334203d3e20323730363533.roa
File:                     323830343a366635343a633030303a3a2f33342d3334203d3e20323730363533.roa (raw, json)
Hash identifier:          LcK5RbK2E5MYDvlKeEX2K8sB8bEri3o+DzKkaG32qWw=
Subject key identifier:   17:95:81:24:D1:60:E0:CA:4F:4C:EE:2E:01:02:7C:8C:ED:63:E5:C1
Certificate issuer:       /CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
Certificate serial:       58E47978D3C127ED2071FCD8595C9AFB39ACC13B
Authority key identifier: 04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/323830343a366635343a633030303a3a2f33342d3334203d3e20323730363533.roa
Signing time:             Wed 28 Jun 2023 15:00:00 +0000
ROA not before:           Wed 28 Jun 2023 14:55:00 +0000
ROA not after:            Wed 26 Jun 2024 15:00:00 +0000
asID:                     270653
IP address blocks:        2804:6f54:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e4:79:78:d3:c1:27:ed:20:71:fc:d8:59:5c:9a:fb:39:ac:c1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
        Validity
            Not Before: Jun 28 14:55:00 2023 GMT
            Not After : Jun 26 15:00:00 2024 GMT
        Subject: CN=17958124D160E0CA4F4CEE2E01027C8CED63E5C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:bb:8a:79:50:3b:ca:14:b1:6d:e0:4d:a1:
                    06:e1:fe:1e:21:5f:d3:6f:f4:ed:7c:cc:e2:0e:5e:
                    ea:be:c1:de:82:b1:04:07:84:c8:d0:76:d2:ef:80:
                    1f:4e:c0:0c:3d:92:f1:33:aa:c9:c2:e2:b3:b0:b8:
                    75:0b:a9:1b:e8:e0:bf:43:41:f0:35:07:99:40:5c:
                    45:ac:9a:a3:06:85:76:4d:de:52:13:03:04:94:36:
                    81:22:b4:2d:6b:61:a5:04:3e:75:44:9f:f0:da:16:
                    71:03:ef:72:9e:72:c2:e6:aa:c7:7a:51:36:24:59:
                    ca:9f:36:a5:f5:4e:9f:da:3f:6d:8b:b6:f9:eb:9d:
                    f4:ce:53:f0:10:6b:14:1a:18:db:f7:2b:a3:5b:41:
                    c3:d9:9f:d1:f6:69:76:9e:08:1b:9b:ba:82:c5:66:
                    2d:a7:9c:2d:ee:d3:d7:17:4d:65:f6:88:7f:bb:91:
                    04:7d:d7:13:bc:fb:83:fc:65:ad:5e:2b:bb:e7:f3:
                    47:dc:30:97:fc:d6:5e:36:41:af:cf:00:63:52:8d:
                    54:60:41:84:5b:db:ad:30:b2:69:b3:d5:bb:59:43:
                    33:d3:cb:7d:3b:f6:6f:3e:b4:35:ea:31:b3:5f:6a:
                    dd:a2:f4:ca:65:a2:f9:fe:23:62:15:79:5d:fd:0a:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:95:81:24:D1:60:E0:CA:4F:4C:EE:2E:01:02:7C:8C:ED:63:E5:C1
            X509v3 Authority Key Identifier:
                keyid:04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/323830343a366635343a633030303a3a2f33342d3334203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f54:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6e:91:6f:fe:f4:4a:29:b0:51:e3:b9:7c:f9:d4:a6:45:38:c4:
         e4:00:59:38:da:7d:18:ac:db:ba:4c:cf:e8:9e:29:fc:04:29:
         dc:f0:dc:57:6c:a4:d4:26:e4:99:fb:d4:0a:38:98:34:57:4b:
         72:8b:53:bb:3a:20:64:49:24:83:a7:4d:40:43:af:d4:bb:05:
         bb:8f:99:44:6d:95:cf:cd:c8:de:9d:83:0d:49:80:b2:84:a0:
         7d:db:01:d4:33:fa:42:0b:16:64:8f:ea:08:ea:e9:dd:62:91:
         f9:ef:0b:d0:70:08:4b:d1:a6:a6:06:c8:53:6c:46:7e:58:6a:
         9f:c6:14:cd:99:a2:bd:b3:54:13:5c:79:1a:9f:ac:17:40:66:
         09:f0:d8:dc:fc:ce:fa:c0:87:0f:bc:10:cd:36:dc:ed:81:c2:
         86:fb:3e:34:78:73:7e:a8:9e:af:8e:0c:1c:67:db:50:c6:f0:
         37:37:6c:8c:04:ae:93:e1:d2:ab:20:3c:22:35:9d:69:16:3b:
         ed:cc:2c:ff:a4:34:89:56:80:b8:86:bd:59:b6:da:16:c8:67:
         d4:7f:07:08:bd:00:6c:ba:db:81:ef:db:40:06:96:b1:8e:8a:
         d0:ab:81:06:02:7d:a0:be:5a:81:b0:63:f2:0b:34:24:a8:ba:
         04:4c:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:17 2024 by rpki-client on console-fra.rpki-client.org