Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/323830343a353237303a3a2f33322d3332203d3e20323638353138.roa
File:                     323830343a353237303a3a2f33322d3332203d3e20323638353138.roa (raw, json)
Hash identifier:          zJI//tSmiCJvwHBCpUxwI/yLOhR/S1sPZqhbe75VqoE=
Subject key identifier:   D6:EB:3F:46:80:53:C5:B5:6F:B8:DE:43:42:8E:65:25:82:9E:56:8C
Certificate issuer:       /CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
Certificate serial:       037DA82D663CDE89DF679B921E77F6B8F2A467C5
Authority key identifier: 01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/323830343a353237303a3a2f33322d3332203d3e20323638353138.roa
Signing time:             Mon 18 Oct 2021 14:26:33 +0000
ROA not before:           Mon 18 Oct 2021 14:21:33 +0000
ROA not after:            Mon 17 Oct 2022 14:26:33 +0000
asID:                     268518
IP address blocks:        2804:5270::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7d:a8:2d:66:3c:de:89:df:67:9b:92:1e:77:f6:b8:f2:a4:67:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
        Validity
            Not Before: Oct 18 14:21:33 2021 GMT
            Not After : Oct 17 14:26:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:fc:c3:1d:22:a5:79:58:bb:c7:9b:6f:d1:
                    41:c1:f1:5c:54:42:b3:c2:cb:f6:5a:97:93:75:9d:
                    31:ce:0c:d8:75:ca:cb:52:8a:46:a3:bb:9a:3d:e2:
                    52:68:1d:cc:4e:9a:30:ff:0f:2b:72:26:83:63:19:
                    a0:78:eb:c9:36:53:59:19:8d:5e:c8:08:f3:85:57:
                    93:2a:ed:c1:5b:2e:37:20:4c:f5:76:e4:58:e9:4f:
                    52:4b:3b:3e:8a:11:61:5b:4b:95:8c:f1:33:e5:ec:
                    ac:b2:85:a7:30:67:29:67:c2:a3:6f:43:c9:eb:2a:
                    58:5e:79:11:88:73:7c:99:f3:e9:47:e3:33:85:a7:
                    92:08:ab:f5:a3:62:08:7a:b9:62:e2:b9:74:3e:bd:
                    99:b8:29:2d:1f:18:c9:3f:0b:d5:62:c7:1f:6f:9f:
                    7c:61:3c:91:eb:d7:57:d6:42:42:9f:13:4f:45:50:
                    71:7d:70:e7:de:18:68:24:b5:c8:c8:11:ac:75:ca:
                    47:5e:49:57:99:47:d2:36:f7:0c:fa:a3:9e:6a:42:
                    01:39:96:e4:5e:5d:e9:22:8b:25:7a:3f:1e:e5:45:
                    e6:34:28:1e:3a:c8:b8:ee:68:e2:31:50:e0:22:be:
                    d9:bf:c4:da:8e:4c:e7:d8:e0:77:09:3f:58:f6:ca:
                    04:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EB:3F:46:80:53:C5:B5:6F:B8:DE:43:42:8E:65:25:82:9E:56:8C
            X509v3 Authority Key Identifier:
                keyid:01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/323830343a353237303a3a2f33322d3332203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5270::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:2f:a5:b9:bc:59:d8:76:8b:b4:d8:c3:de:76:50:d4:fd:af:
         9e:45:9b:45:cc:a1:11:a6:be:0f:eb:bc:30:21:9a:11:89:ee:
         ef:12:18:e7:b2:75:a5:69:86:7c:cf:a6:39:fd:70:75:44:ac:
         d2:77:a7:ff:9e:a3:e1:87:f8:7d:f6:85:be:75:36:ce:ca:1a:
         b0:a2:c5:ff:b8:7a:94:76:84:48:17:93:c5:31:fe:66:33:34:
         89:6e:79:ed:74:92:56:d7:af:12:0c:70:d8:0b:0f:2d:04:36:
         9a:db:36:95:41:a8:b8:60:1e:85:94:5b:ae:2b:38:bc:dc:d0:
         0a:ab:a0:f1:ca:90:cd:ac:bb:6a:cb:5e:a1:84:ef:ce:4e:b3:
         30:84:8f:9d:88:58:0b:fd:70:2c:19:82:d9:e3:a4:b9:4a:81:
         c5:8b:44:05:70:51:63:26:15:d5:4f:da:3a:16:46:0a:5d:1b:
         36:b1:4f:7f:cd:36:6e:61:cf:75:36:a5:d9:cb:43:1d:cb:50:
         a6:85:96:bb:d8:17:12:df:24:10:ce:29:82:59:e3:31:db:fa:
         f5:9e:6e:26:47:a6:20:9c:02:ef:3b:c3:68:51:17:96:63:16:
         3d:4a:ed:8c:0a:3e:f5:f0:d5:76:45:14:24:57:3a:3d:8e:af:
         fe:00:5d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:17 2024 by rpki-client on console-fra.rpki-client.org