Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/323830343a376336303a633030303a3a2f33342d3334203d3e20323731343932.roa
File:                     323830343a376336303a633030303a3a2f33342d3334203d3e20323731343932.roa (raw, json)
Hash identifier:          BntTUDdbXwE2+MW+T8X8UyJcLqqwyP7IBhzS8XpMBao=
Subject key identifier:   B3:D6:D4:1D:AD:77:4A:60:B0:99:44:D6:D3:7F:48:B9:AE:16:86:2E
Certificate issuer:       /CN=C0EF709048855BA9C15EDC1FB1E07C8C74D4212F
Certificate serial:       51996EAC9CE66230FAE2E67867FC2A971F571DA0
Authority key identifier: C0:EF:70:90:48:85:5B:A9:C1:5E:DC:1F:B1:E0:7C:8C:74:D4:21:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/323830343a376336303a633030303a3a2f33342d3334203d3e20323731343932.roa
Signing time:             Wed 29 Nov 2023 17:32:54 +0000
ROA not before:           Wed 29 Nov 2023 17:27:54 +0000
ROA not after:            Wed 27 Nov 2024 17:32:54 +0000
asID:                     271492
IP address blocks:        2804:7c60:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:99:6e:ac:9c:e6:62:30:fa:e2:e6:78:67:fc:2a:97:1f:57:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0EF709048855BA9C15EDC1FB1E07C8C74D4212F
        Validity
            Not Before: Nov 29 17:27:54 2023 GMT
            Not After : Nov 27 17:32:54 2024 GMT
        Subject: CN=B3D6D41DAD774A60B09944D6D37F48B9AE16862E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:38:b4:84:40:c2:5d:05:02:e0:42:2b:8b:
                    9d:b5:98:74:67:a0:ef:9b:c8:0a:df:12:2e:7e:2c:
                    90:24:c0:73:da:08:06:e2:29:01:24:b0:87:55:0a:
                    e5:98:85:37:d3:85:de:36:44:a5:c1:b5:29:d9:fa:
                    b0:25:cb:05:29:b3:ba:fc:fe:0e:f8:ab:dc:da:6c:
                    cf:e3:3c:dd:08:1b:f0:69:0b:36:90:93:b6:fa:7e:
                    e8:7e:64:76:fd:ff:7b:cd:f6:1c:8a:59:7d:cc:32:
                    ea:e8:24:84:21:45:81:7c:43:cc:b7:90:05:d6:8a:
                    6f:b4:a4:cb:95:e5:d3:ec:ee:f4:f4:20:44:69:a5:
                    33:0d:8d:c3:01:a7:6a:e3:9d:84:5f:45:52:29:ca:
                    96:74:3f:01:44:6f:e0:ff:7f:e5:e0:12:1f:be:a8:
                    51:5e:5b:a7:bc:f7:e4:52:3b:c7:17:0c:bb:32:cc:
                    3c:b4:42:40:53:29:16:21:bd:82:fb:6e:38:fd:78:
                    a0:06:e1:e3:06:a4:60:e1:fb:20:78:a3:31:4f:e2:
                    c6:49:5b:5d:d4:4c:65:55:08:d2:73:98:2c:c7:09:
                    4b:22:be:5c:50:dc:84:42:61:22:5a:ae:31:16:54:
                    aa:f9:94:9a:17:23:c9:e0:d3:ab:43:84:90:df:d8:
                    a2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D6:D4:1D:AD:77:4A:60:B0:99:44:D6:D3:7F:48:B9:AE:16:86:2E
            X509v3 Authority Key Identifier:
                keyid:C0:EF:70:90:48:85:5B:A9:C1:5E:DC:1F:B1:E0:7C:8C:74:D4:21:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/323830343a376336303a633030303a3a2f33342d3334203d3e20323731343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c60:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5f:f5:78:1c:73:6d:e3:71:89:20:d8:cc:60:97:28:d1:b5:cd:
         84:71:36:7e:f8:70:e2:3e:05:a6:77:3a:97:21:51:38:df:a1:
         a4:9d:35:60:09:f3:a6:4f:5c:61:37:2d:25:e9:a6:98:d7:db:
         01:2b:97:6b:59:7a:0f:2f:53:0f:e0:f4:d1:83:bb:c0:69:90:
         95:c3:8a:81:db:fa:61:e2:49:16:9c:88:cf:f1:32:3e:f4:9a:
         b9:8a:b2:de:ea:6e:0a:05:3b:39:8c:38:63:3f:66:fd:a0:2b:
         66:c6:40:c6:05:61:7a:6d:75:23:25:50:5e:4e:61:5a:96:f7:
         28:46:7e:eb:33:86:97:a2:21:1a:4f:e3:0a:bc:f8:da:8f:00:
         6f:c9:90:5e:6d:b1:f2:ec:0d:43:da:92:10:56:16:16:2d:53:
         ce:ac:4a:a1:78:54:e6:51:22:23:74:ea:eb:67:6a:75:a3:15:
         50:41:93:55:5f:8c:46:c6:6a:85:d9:82:fc:d7:fb:f8:bc:49:
         65:b4:5e:35:a0:80:54:cc:12:cb:6f:93:43:bb:39:89:62:c5:
         09:98:49:4d:94:94:15:8d:64:87:27:b5:17:98:94:03:aa:7b:
         aa:a7:56:7c:95:b5:fe:b6:af:46:bd:5a:d3:84:1b:ee:61:d2:
         a1:f4:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org