Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a3a2f33322d3430203d3e20323731333637.roa
File:                     323830343a376136303a3a2f33322d3430203d3e20323731333637.roa (raw, json)
Hash identifier:          Ua+HGGssnBsBZwcB5vljHvNjBdVOr41Y7tyielCuOBA=
Subject key identifier:   D2:7D:BB:94:92:32:79:B9:09:9A:70:01:D9:BF:43:2C:12:51:A5:40
Certificate issuer:       /CN=8A6A024CE45904C9FB14F46F0F2725A783643C0A
Certificate serial:       689DCEA78FB714268CECC60942CD1802CA655AAD
Authority key identifier: 8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a3a2f33322d3430203d3e20323731333637.roa
Signing time:             Sat 05 Aug 2023 12:12:24 +0000
ROA not before:           Sat 05 Aug 2023 12:07:24 +0000
ROA not after:            Sat 03 Aug 2024 12:12:24 +0000
asID:                     271367
IP address blocks:        2804:7a60::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9d:ce:a7:8f:b7:14:26:8c:ec:c6:09:42:cd:18:02:ca:65:5a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6A024CE45904C9FB14F46F0F2725A783643C0A
        Validity
            Not Before: Aug  5 12:07:24 2023 GMT
            Not After : Aug  3 12:12:24 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7b:e6:11:7a:a1:09:68:63:57:dc:31:5b:30:
                    c3:0d:f4:54:f4:62:93:b6:ef:ce:e3:37:ec:b7:61:
                    c3:7c:f6:34:93:71:43:f3:1c:5c:e8:2a:a3:3e:83:
                    99:96:df:ee:b1:ad:43:d4:42:35:3f:6b:91:11:a1:
                    21:19:18:07:7e:36:af:99:a2:70:63:e5:bf:f6:4e:
                    32:17:c5:e6:af:5a:a4:c7:60:4d:6c:e0:c6:bc:15:
                    4f:3a:c2:ce:69:21:d6:2c:d2:bf:b4:31:b3:22:62:
                    34:c0:15:f7:22:48:b7:35:e6:56:8c:20:0c:93:e1:
                    e8:c4:23:d6:9a:c7:81:ec:62:54:97:44:b9:f3:c3:
                    3b:f8:42:aa:40:0f:d7:b0:a9:cb:9b:f6:6c:84:61:
                    ff:df:ab:a6:1a:e0:06:ba:2d:f5:80:22:fb:48:f0:
                    2f:74:0f:47:69:04:0b:20:56:9c:23:b1:cf:b2:ed:
                    bc:fb:33:80:62:71:4b:52:ba:cb:7a:4a:e9:08:cb:
                    6f:27:68:25:c4:8f:98:4e:c2:97:cd:eb:42:eb:c6:
                    e8:25:e1:f6:72:dd:c2:63:f1:d4:0c:63:3a:23:17:
                    85:26:44:ee:32:58:0c:ba:d5:44:58:6c:56:62:8f:
                    4f:18:ca:b6:96:6d:30:79:02:6e:99:48:dc:9e:9b:
                    2e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7D:BB:94:92:32:79:B9:09:9A:70:01:D9:BF:43:2C:12:51:A5:40
            X509v3 Authority Key Identifier:
                keyid:8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a3a2f33322d3430203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:67:45:01:e2:d0:e8:22:1f:35:03:32:94:73:07:38:75:35:
         10:5f:82:a9:22:34:81:a9:a6:3f:01:44:f5:2e:9a:54:ee:2c:
         cd:83:02:a8:82:68:34:ba:d0:c4:1c:ca:46:7e:31:28:eb:6b:
         19:ae:eb:d2:ab:5a:2b:1a:ea:e6:4c:60:7a:e8:a7:3c:b0:7c:
         2b:2c:71:d0:cf:ba:ca:11:f4:80:41:f3:d5:8b:c6:c0:0c:8d:
         20:5d:9e:4e:c4:eb:5e:2e:ef:37:b6:a2:60:d0:98:02:31:e4:
         dd:67:01:0d:74:03:9f:b7:14:f7:9d:41:02:a9:58:af:30:31:
         db:35:02:22:b7:33:d3:bc:72:c1:54:ce:fb:f9:d7:31:38:5c:
         d8:0c:f6:83:4b:7e:cc:47:01:37:d4:75:bc:7b:c5:9c:25:11:
         28:d2:7c:50:3c:fd:36:d2:2f:b1:15:60:08:07:c9:2c:98:3f:
         35:7f:7c:ea:b7:da:db:1d:95:59:7a:20:5a:40:39:f6:b9:09:
         80:83:e2:b1:ce:df:fe:8e:d9:76:b5:65:97:2a:03:a6:b6:0c:
         d2:f6:4e:6f:b7:87:57:1c:e4:90:f3:63:a2:6a:61:43:ef:21:
         90:89:29:8b:29:73:4c:09:d1:34:84:c6:a5:df:2c:f3:6c:3a:
         1c:1a:db:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org