Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3130303a3a2f34302d3430203d3e20323639363536.roa
File:                     323830343a363765303a3130303a3a2f34302d3430203d3e20323639363536.roa (raw, json)
Hash identifier:          UYDKOJ4/eT+mqGbQATHqI/Dki4dHwRfi1wepx7fCI4k=
Subject key identifier:   BA:2D:55:A7:C4:44:9A:D5:7D:CE:3A:4D:E9:55:E8:B7:2D:FB:2D:6B
Certificate issuer:       /CN=E4BEA066CBB984C2E6738C44F826B02333AD066E
Certificate serial:       5FCD86946A41BDDD05C0F95AEA7356604C071225
Authority key identifier: E4:BE:A0:66:CB:B9:84:C2:E6:73:8C:44:F8:26:B0:23:33:AD:06:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4BEA066CBB984C2E6738C44F826B02333AD066E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3130303a3a2f34302d3430203d3e20323639363536.roa
Signing time:             Fri 04 Aug 2023 13:44:09 +0000
ROA not before:           Fri 04 Aug 2023 13:39:09 +0000
ROA not after:            Fri 02 Aug 2024 13:44:09 +0000
asID:                     269656
IP address blocks:        2804:67e0:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cd:86:94:6a:41:bd:dd:05:c0:f9:5a:ea:73:56:60:4c:07:12:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4BEA066CBB984C2E6738C44F826B02333AD066E
        Validity
            Not Before: Aug  4 13:39:09 2023 GMT
            Not After : Aug  2 13:44:09 2024 GMT
        Subject: CN=BA2D55A7C4449AD57DCE3A4DE955E8B72DFB2D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:7a:ba:5e:d0:07:50:ad:3e:74:85:1e:8f:
                    c4:6f:bd:30:64:e2:a2:8b:72:72:93:36:0b:f8:dc:
                    1d:54:9b:4c:d8:83:9a:c4:e4:6c:7e:14:0a:57:a5:
                    1c:bb:99:a3:30:4f:6f:e5:fe:50:61:a6:5f:36:f1:
                    fc:31:f3:2b:4a:58:fa:81:86:35:43:89:38:1d:2d:
                    9f:ad:59:5a:0d:3a:51:9e:f9:cd:92:69:65:78:c4:
                    95:25:e1:6b:95:04:22:09:7a:26:08:64:13:84:e0:
                    84:2b:d1:3d:b1:a1:01:49:68:8a:19:0d:00:85:8f:
                    95:74:37:8a:6a:16:d3:d8:13:8a:c0:34:69:6a:f3:
                    ad:fa:11:08:79:9e:1a:6a:67:29:a3:59:c9:61:45:
                    c2:1d:89:5e:ca:80:3d:78:14:c5:59:99:9b:74:44:
                    25:36:7d:e2:5d:a5:a0:b0:a8:aa:0d:fc:53:3b:63:
                    96:b6:a9:dd:3e:f9:55:0d:0b:d8:5c:40:b1:0b:5d:
                    e3:80:b0:91:90:50:30:e0:27:e0:64:c2:7a:f0:71:
                    06:50:f1:8e:36:d2:2b:fb:5f:2d:85:d7:7c:eb:a8:
                    a5:2c:e4:eb:0a:47:05:be:db:f4:f6:ca:ec:10:dd:
                    ec:8d:33:06:01:df:35:f7:56:8d:81:94:5e:a7:10:
                    9a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2D:55:A7:C4:44:9A:D5:7D:CE:3A:4D:E9:55:E8:B7:2D:FB:2D:6B
            X509v3 Authority Key Identifier:
                keyid:E4:BE:A0:66:CB:B9:84:C2:E6:73:8C:44:F8:26:B0:23:33:AD:06:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/E4BEA066CBB984C2E6738C44F826B02333AD066E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4BEA066CBB984C2E6738C44F826B02333AD066E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3130303a3a2f34302d3430203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:8a:bb:20:5e:5b:ca:14:32:63:26:a3:7a:3b:16:ef:16:ce:
         cc:ff:55:9d:25:9c:c9:de:b4:dd:c8:8c:c9:f8:e7:59:33:4a:
         ff:c5:9b:3e:4b:1d:47:d7:01:1f:ef:3e:a6:0f:8c:05:d9:58:
         04:3e:98:18:64:52:d6:9c:8f:00:f0:77:05:92:05:73:0f:9d:
         bd:95:0c:c4:90:25:be:e6:25:ed:9d:58:3c:1f:c6:5c:66:e2:
         5b:3c:8e:25:13:ec:0b:15:c7:42:d5:39:db:39:d9:94:6b:30:
         9b:83:52:09:df:6c:bf:72:16:b3:a5:3b:27:ef:57:16:78:ce:
         a8:d5:3c:87:4e:34:0f:3b:b0:16:2e:d0:6d:2d:2d:f7:0b:f0:
         ea:b9:e5:dc:84:e1:d4:15:00:08:81:8c:07:68:74:44:09:20:
         e7:e8:af:31:a8:bb:78:bd:1a:00:be:36:8f:96:bb:a7:77:03:
         20:cf:a9:51:aa:23:16:68:54:9a:14:5b:aa:a2:74:db:85:fc:
         a4:af:22:23:2c:cb:85:0b:e7:a1:07:69:e6:c7:22:75:66:71:
         76:f9:54:90:27:92:97:0f:6c:48:a6:9c:1a:9b:9a:79:99:53:
         6f:03:fd:8f:fd:1d:97:b2:a3:30:20:27:20:6f:38:d8:e1:b1:
         fd:4e:a2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org