Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a3130303a3a2f34302d3430203d3e20323731333637.roa
File:                     323830343a376136303a3130303a3a2f34302d3430203d3e20323731333637.roa (raw, json)
Hash identifier:          9LHps1n/+3beALCGW5A1Dd6zrIh0u9RTBTSUlSpW5mo=
Subject key identifier:   33:56:7E:57:C6:12:58:0D:5B:F7:DA:E6:14:94:3D:D6:78:2A:C5:64
Certificate issuer:       /CN=8A6A024CE45904C9FB14F46F0F2725A783643C0A
Certificate serial:       4CCA094CF26CAED8655A1FE10AEF7B2C203335A7
Authority key identifier: 8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a3130303a3a2f34302d3430203d3e20323731333637.roa
Signing time:             Tue 04 Apr 2023 00:29:09 +0000
ROA not before:           Tue 04 Apr 2023 00:24:09 +0000
ROA not after:            Tue 02 Apr 2024 00:29:09 +0000
asID:                     271367
IP address blocks:        2804:7a60:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ca:09:4c:f2:6c:ae:d8:65:5a:1f:e1:0a:ef:7b:2c:20:33:35:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6A024CE45904C9FB14F46F0F2725A783643C0A
        Validity
            Not Before: Apr  4 00:24:09 2023 GMT
            Not After : Apr  2 00:29:09 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:56:26:83:85:af:c1:ad:2e:45:54:d8:1b:
                    4f:45:30:23:13:4f:82:d2:ec:cf:e6:a9:c5:36:23:
                    e4:9b:35:9b:78:00:7f:18:a9:8c:69:87:92:80:b2:
                    54:a8:6b:79:e2:bc:28:90:80:76:e3:01:e9:6a:79:
                    64:7c:de:2b:c4:d1:8a:e0:98:9b:78:0b:d7:4a:62:
                    50:b9:49:8e:87:77:ec:c1:33:50:0e:58:b2:8b:34:
                    94:57:42:2b:66:fd:dc:97:41:6a:d0:15:a8:54:91:
                    ab:d5:82:c0:10:92:62:34:fd:d7:05:26:63:2b:3f:
                    1e:4a:91:16:6e:e5:fd:19:28:26:13:33:a3:8f:d5:
                    5e:9f:0a:e2:cb:01:74:05:99:49:39:cf:78:2d:6b:
                    cd:dc:ad:d5:6c:2e:66:92:b4:ab:20:84:25:c8:4c:
                    c6:54:37:38:b4:9c:10:11:3c:30:f0:57:f8:8a:eb:
                    27:dc:ce:81:bb:9e:7b:81:37:9d:13:54:1c:f2:cd:
                    61:d6:b4:d3:f4:0c:6f:91:33:da:ce:eb:e3:8b:09:
                    80:de:86:81:5c:99:2f:60:62:d3:48:87:bc:bf:62:
                    8a:c3:02:4e:4c:20:56:55:94:e2:5c:ec:9b:a7:1c:
                    71:fe:5b:6f:41:0c:46:59:1f:98:7c:7c:54:95:b2:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:56:7E:57:C6:12:58:0D:5B:F7:DA:E6:14:94:3D:D6:78:2A:C5:64
            X509v3 Authority Key Identifier:
                keyid:8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a3130303a3a2f34302d3430203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a60:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:15:53:24:2d:f0:84:7a:8e:7d:fb:b5:d0:bc:fe:52:42:60:
         f2:85:56:1d:6b:4a:33:f8:84:eb:e1:ac:03:30:89:9d:4a:27:
         2d:7c:ed:ea:dd:93:a6:07:8d:35:b6:1b:82:61:0c:66:5e:17:
         3a:fb:d5:7d:f1:bf:f3:a0:a6:87:aa:f3:89:27:f7:d2:fb:de:
         83:ce:d7:4a:05:76:19:9b:d4:fb:79:50:e4:af:d1:e6:81:40:
         57:49:1b:96:6a:b7:48:c1:8d:3d:20:dd:cc:3a:e3:c7:12:43:
         12:bc:99:13:e3:a8:71:4d:93:c2:38:3f:fb:f5:fa:43:de:b4:
         30:a0:e8:98:2b:af:3f:5e:20:a8:b4:77:0e:4b:61:bd:68:82:
         e6:04:4a:68:6b:27:2d:5a:5a:7e:3a:f2:88:2a:80:97:2e:cf:
         a0:6f:4f:a9:5f:f0:19:aa:84:4c:e8:c9:95:7f:1e:fc:d6:77:
         20:15:46:6b:6e:37:c6:a5:ac:d9:b2:2c:f9:0d:35:49:82:cf:
         3d:e3:ca:81:ab:ce:a2:70:d8:d0:53:87:3f:0c:f4:24:67:52:
         d1:c6:f4:5e:43:ac:d7:89:20:99:b9:84:d5:c2:d3:98:68:c7:
         b7:fc:3d:6f:69:cb:b5:ec:b4:09:d2:d8:65:39:0b:fa:e5:3b:
         e6:e7:f6:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org