Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3230303a3a2f34302d3430203d3e20323639363536.roa
File:                     323830343a363765303a3230303a3a2f34302d3430203d3e20323639363536.roa (raw, json)
Hash identifier:          Q8RZTz4sPUd0jYfnJ3UVRe90529Ic413uydUgupbO0A=
Subject key identifier:   23:78:C8:0D:13:76:D9:82:C1:64:D7:AC:E6:26:D8:1F:8E:7D:FA:65
Certificate issuer:       /CN=E4BEA066CBB984C2E6738C44F826B02333AD066E
Certificate serial:       1BC7FA940536DCC9B2A29F3AC6D2232D321B2EF5
Authority key identifier: E4:BE:A0:66:CB:B9:84:C2:E6:73:8C:44:F8:26:B0:23:33:AD:06:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4BEA066CBB984C2E6738C44F826B02333AD066E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3230303a3a2f34302d3430203d3e20323639363536.roa
Signing time:             Fri 04 Aug 2023 13:44:10 +0000
ROA not before:           Fri 04 Aug 2023 13:39:10 +0000
ROA not after:            Fri 02 Aug 2024 13:44:10 +0000
asID:                     269656
IP address blocks:        2804:67e0:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c7:fa:94:05:36:dc:c9:b2:a2:9f:3a:c6:d2:23:2d:32:1b:2e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4BEA066CBB984C2E6738C44F826B02333AD066E
        Validity
            Not Before: Aug  4 13:39:10 2023 GMT
            Not After : Aug  2 13:44:10 2024 GMT
        Subject: CN=2378C80D1376D982C164D7ACE626D81F8E7DFA65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:91:99:0c:11:d9:95:08:25:92:1f:92:8d:b9:
                    44:94:43:0e:bc:c7:98:8c:6b:7f:87:77:1f:88:3d:
                    98:e7:84:17:e0:73:d1:c6:25:1d:29:8f:6d:24:03:
                    ee:6a:68:be:2d:f3:97:b5:f4:bd:33:a6:59:9d:78:
                    0a:d4:3a:b3:8a:0b:77:84:5d:97:14:c3:cb:ec:5a:
                    07:f2:39:34:0c:7e:b6:22:e7:0f:35:ed:a2:7d:5c:
                    ac:f4:d3:0f:06:68:f2:40:83:b0:13:7c:f2:75:e2:
                    ba:d5:19:28:17:10:6b:b1:7b:38:e7:7e:75:98:65:
                    d6:93:8c:cc:23:87:87:c4:b1:11:fc:37:a2:13:4d:
                    03:3a:dc:16:68:ce:f9:6b:3f:50:77:75:ab:ae:9c:
                    b4:0d:e9:34:02:13:68:dd:cb:7c:99:ba:e4:b8:df:
                    ab:34:2b:df:ed:95:03:ac:1d:68:9c:aa:01:de:eb:
                    f0:f6:4b:53:c3:a7:c7:33:50:a3:2e:6f:09:98:c1:
                    3f:01:ef:31:99:92:5d:6c:93:13:92:28:4e:95:db:
                    0f:f4:98:ea:e4:4e:22:3e:32:4c:91:2f:cb:43:c8:
                    64:9e:59:35:b3:ca:f6:f0:32:7e:7e:55:84:7d:d0:
                    8e:80:3c:f9:63:a0:ac:1c:23:aa:bc:10:de:ac:af:
                    ae:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:78:C8:0D:13:76:D9:82:C1:64:D7:AC:E6:26:D8:1F:8E:7D:FA:65
            X509v3 Authority Key Identifier:
                keyid:E4:BE:A0:66:CB:B9:84:C2:E6:73:8C:44:F8:26:B0:23:33:AD:06:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/E4BEA066CBB984C2E6738C44F826B02333AD066E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4BEA066CBB984C2E6738C44F826B02333AD066E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3230303a3a2f34302d3430203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:fc:c6:86:5f:7a:d2:da:8f:20:25:b6:c0:68:26:0f:21:ca:
         b6:53:44:46:49:ac:1d:f6:e1:62:6d:a1:f8:d7:be:25:0a:03:
         5e:69:c4:64:5a:c3:c9:1a:8e:1c:5e:60:87:c6:5d:93:1a:96:
         d3:8a:cd:e8:e2:30:b4:4b:6f:1a:a4:44:59:ee:d5:8f:93:a4:
         18:29:35:f6:92:9b:eb:40:03:a4:88:2e:56:a4:64:8d:d7:0f:
         1b:c4:7d:7c:ad:2d:5d:10:06:34:af:96:84:e0:87:a7:81:68:
         7a:73:be:42:1b:be:bf:aa:8f:09:73:78:46:95:58:7e:37:63:
         6f:35:fe:8b:cd:e4:58:0b:46:76:2a:99:b9:7c:0d:07:c2:14:
         ee:33:77:63:59:31:49:47:f9:6d:b2:7a:e5:47:5f:c1:2a:cd:
         81:fa:99:17:24:c7:42:9e:8d:e6:ab:48:f9:90:a2:50:37:70:
         e2:07:b9:0b:c4:0f:c6:53:6b:cc:66:02:db:e7:db:7e:df:04:
         e0:64:b0:66:6e:d4:e0:7f:67:d3:8a:00:2a:95:54:5c:a0:c2:
         ab:e0:00:18:a0:93:37:53:97:eb:43:f2:df:27:20:b4:4e:3a:
         88:5f:ca:82:91:45:7c:d1:6f:be:26:76:c5:f5:e8:61:ae:a7:
         53:fa:c8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:51 2024 by rpki-client on console-ams.rpki-client.org