Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/323830343a353237303a3a2f33322d313238203d3e20323638353138.roa
File:                     323830343a353237303a3a2f33322d313238203d3e20323638353138.roa (raw, json)
Hash identifier:          FvM9FIE2vQW/v3OCZ/gcJMGvFAfj6PLjQgxziX+jzi4=
Subject key identifier:   86:A2:AD:64:2C:F6:CA:B8:25:10:D9:24:AA:83:FF:70:33:BA:96:86
Certificate issuer:       /CN=7709F75654873E63970569AB6B345ACAA5F3367F
Certificate serial:       53FBD75903872C995F56518CF02F81948FB8F708
Authority key identifier: 77:09:F7:56:54:87:3E:63:97:05:69:AB:6B:34:5A:CA:A5:F3:36:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7709F75654873E63970569AB6B345ACAA5F3367F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/323830343a353237303a3a2f33322d313238203d3e20323638353138.roa
Signing time:             Thu 11 Apr 2024 12:15:09 +0000
ROA not before:           Thu 11 Apr 2024 12:10:09 +0000
ROA not after:            Thu 10 Apr 2025 12:15:09 +0000
asID:                     268518
IP address blocks:        2804:5270::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fb:d7:59:03:87:2c:99:5f:56:51:8c:f0:2f:81:94:8f:b8:f7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7709F75654873E63970569AB6B345ACAA5F3367F
        Validity
            Not Before: Apr 11 12:10:09 2024 GMT
            Not After : Apr 10 12:15:09 2025 GMT
        Subject: CN=86A2AD642CF6CAB82510D924AA83FF7033BA9686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:c8:64:c4:61:3e:bb:d2:96:09:48:a0:14:
                    39:43:bc:d7:c5:1f:68:88:ad:75:54:f7:49:69:90:
                    e4:0d:27:59:bf:48:a1:e7:2d:0a:7a:45:f8:b6:81:
                    9e:4a:6a:97:90:c5:09:a0:32:4d:cc:70:b0:29:ff:
                    49:20:90:50:83:4b:1c:53:b7:27:92:19:29:ab:ff:
                    f3:60:07:ea:1c:85:63:3e:3b:00:d0:f0:14:6f:3b:
                    d5:21:6f:eb:5c:1d:c6:ce:9c:4c:de:70:43:79:a6:
                    92:0b:09:ce:d0:58:16:34:cc:cf:cb:08:a8:f2:2d:
                    30:be:9b:22:82:e0:83:67:be:35:50:3c:96:7c:5a:
                    f1:99:b0:c2:7d:c9:43:24:12:f3:d8:5f:bb:63:41:
                    d9:15:32:0f:9d:fa:cf:36:9a:54:70:2c:26:65:41:
                    b3:16:fa:c9:9f:36:70:96:d1:2f:a4:ed:51:10:ef:
                    13:c6:02:f1:7c:70:96:f6:63:e4:31:73:cb:42:e7:
                    8a:64:22:9e:d3:13:12:d1:24:81:8a:f7:cf:07:ad:
                    7a:e7:a9:73:39:79:7b:ee:d6:fb:64:23:f9:ac:19:
                    8a:19:f5:14:27:02:38:31:ef:18:29:2a:3d:e3:2c:
                    6d:1d:c6:d7:31:e8:c8:fd:cb:08:73:cd:f6:9a:a3:
                    e0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A2:AD:64:2C:F6:CA:B8:25:10:D9:24:AA:83:FF:70:33:BA:96:86
            X509v3 Authority Key Identifier:
                keyid:77:09:F7:56:54:87:3E:63:97:05:69:AB:6B:34:5A:CA:A5:F3:36:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/7709F75654873E63970569AB6B345ACAA5F3367F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7709F75654873E63970569AB6B345ACAA5F3367F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/323830343a353237303a3a2f33322d313238203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5270::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:f6:a6:09:3d:bb:73:37:7d:2a:34:7c:57:65:a4:ed:85:ce:
         21:2d:3b:76:4d:77:43:a2:b9:10:04:7c:84:1e:64:d8:0d:75:
         85:91:37:de:46:65:13:f4:c9:2a:8c:41:fe:a4:12:80:4d:d5:
         fe:d0:04:83:20:6e:ea:f8:9a:ba:1d:03:58:7e:4b:5c:ec:84:
         dd:98:32:37:71:b2:17:89:e8:15:c0:55:3d:a6:58:4f:3f:7c:
         30:ce:db:d2:e6:72:5d:eb:4d:8b:a8:ed:86:0e:aa:61:10:12:
         a4:9b:50:15:ce:c0:a4:83:4a:08:67:84:b8:73:92:e4:95:6f:
         da:62:0f:97:86:01:d4:1e:0c:e5:1e:9a:11:dc:d2:01:55:0b:
         86:03:1f:b3:75:2b:65:44:e3:34:90:a5:aa:8f:99:3a:ab:59:
         13:41:51:ee:ac:62:8d:88:ca:3a:98:f5:f4:dd:ad:ac:73:e6:
         af:03:b7:8c:b6:17:8b:59:e2:02:20:58:69:2d:81:6b:75:50:
         b9:19:9a:62:8b:c8:f3:ff:4f:57:35:5d:94:02:f8:1d:06:2b:
         fb:d4:7b:ad:62:bd:18:56:97:80:7b:91:35:81:4f:24:85:6d:
         69:80:4a:1e:20:77:50:a1:05:77:cb:39:ca:3d:d9:ff:65:db:
         a7:4a:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org