Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/0/323830343a323262383a3a2f3332203d3e20323634313138.roa
File:                     323830343a323262383a3a2f3332203d3e20323634313138.roa (raw, json)
Hash identifier:          T0PYvuS0CAHbUSdU/WGBuHcpnH8IfyyHJ+ho1CEkGFw=
Subject key identifier:   AE:6E:9B:AF:C2:35:61:A3:3F:36:25:3B:BB:01:09:69:2A:5E:2C:E6
Certificate issuer:       /CN=0B4F8A9710EACEB078A4026C4F482E40833DFC98
Certificate serial:       6B8CB2441C0CD11445A335A6BA3818BEDAFB6449
Authority key identifier: 0B:4F:8A:97:10:EA:CE:B0:78:A4:02:6C:4F:48:2E:40:83:3D:FC:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B4F8A9710EACEB078A4026C4F482E40833DFC98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/0/323830343a323262383a3a2f3332203d3e20323634313138.roa
Signing time:             Thu 14 Dec 2023 13:33:46 +0000
ROA not before:           Thu 14 Dec 2023 13:28:46 +0000
ROA not after:            Thu 12 Dec 2024 13:33:46 +0000
asID:                     264118
IP address blocks:        2804:22b8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8c:b2:44:1c:0c:d1:14:45:a3:35:a6:ba:38:18:be:da:fb:64:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B4F8A9710EACEB078A4026C4F482E40833DFC98
        Validity
            Not Before: Dec 14 13:28:46 2023 GMT
            Not After : Dec 12 13:33:46 2024 GMT
        Subject: CN=AE6E9BAFC23561A33F36253BBB0109692A5E2CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:e5:37:51:5e:d5:b4:2a:c0:b3:8c:4d:3a:
                    9e:d4:42:e0:ee:df:4a:31:e1:21:2e:74:6f:46:d4:
                    11:ca:fe:6e:bd:37:80:ab:ba:6a:4a:54:f3:1b:8f:
                    d1:1c:5a:81:3d:10:09:68:9c:20:99:36:1f:bb:18:
                    93:cc:bc:06:a4:3e:c5:bb:7f:03:c8:df:68:d1:40:
                    a4:9d:37:4b:3f:e6:f1:a4:27:fd:56:30:79:52:0f:
                    42:a3:7b:4f:62:8f:03:24:4d:a5:21:6a:74:cd:5e:
                    e4:b6:2d:00:ac:47:17:f1:6c:51:e9:7d:9d:f8:1e:
                    37:c3:95:49:4c:0b:fa:b0:f5:a5:ff:b4:de:4b:05:
                    70:37:1d:71:a8:c4:8f:65:f0:d4:f4:b6:68:f2:c5:
                    54:27:9c:30:5a:06:c2:42:79:3f:af:17:72:5c:b4:
                    ca:cd:72:75:c6:a8:c7:21:6e:87:8e:35:fa:61:24:
                    9d:db:dd:23:b8:29:62:5a:e1:c0:cc:4c:d5:72:0d:
                    bf:f4:1c:52:b1:91:4f:e0:59:01:24:af:63:f1:25:
                    a2:a9:7c:86:82:57:37:45:b3:cb:a7:4a:28:12:c7:
                    17:40:35:4d:a1:b8:4f:57:fb:a1:f4:84:00:d2:e1:
                    cd:9b:5c:ce:f6:85:1c:21:cf:e6:40:df:a1:e7:4c:
                    12:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6E:9B:AF:C2:35:61:A3:3F:36:25:3B:BB:01:09:69:2A:5E:2C:E6
            X509v3 Authority Key Identifier:
                keyid:0B:4F:8A:97:10:EA:CE:B0:78:A4:02:6C:4F:48:2E:40:83:3D:FC:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/0/0B4F8A9710EACEB078A4026C4F482E40833DFC98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B4F8A9710EACEB078A4026C4F482E40833DFC98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/0/323830343a323262383a3a2f3332203d3e20323634313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:dc:7c:4b:8b:6d:b8:6c:e6:f7:40:9f:56:79:2e:54:40:3b:
         31:a5:e4:ba:21:7f:3d:fd:09:fb:87:d4:ad:30:a9:30:c5:8c:
         03:88:04:c8:b7:34:c6:03:44:c7:29:e9:2e:9d:61:4a:cc:ab:
         91:d7:1d:91:c3:08:5d:b1:42:5a:1f:c3:b7:24:56:9a:2d:86:
         af:e5:34:8e:f5:f8:4a:9e:f2:d6:32:44:90:14:76:11:40:5b:
         ef:ba:e9:72:0c:a6:82:99:c6:1b:7f:75:9a:37:61:a0:af:11:
         dc:5b:8e:c1:db:a9:e2:cd:31:d1:d9:0c:46:71:5c:e3:79:d2:
         5b:1d:77:02:96:73:a5:6b:0d:16:bf:30:97:5f:3c:1e:ee:73:
         e1:26:f8:8b:da:e6:34:a7:4a:5e:b1:b6:34:cc:47:0a:fb:72:
         a1:78:8e:0e:9f:cb:35:0c:f6:e5:78:d7:b2:09:5b:c4:69:54:
         ed:c0:bd:d1:56:87:e3:54:17:30:1e:df:56:23:73:9c:d5:89:
         e7:76:ff:aa:5e:03:8f:f5:cf:55:30:1b:03:9f:39:bb:60:b6:
         6d:04:89:68:04:a4:7d:63:a6:b7:82:4b:b9:77:cf:9d:b2:9e:
         63:4c:93:5d:fa:4a:03:f6:9f:3d:28:80:31:fb:e0:c9:15:15:
         4a:19:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org