Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/323830343a376336303a343030303a3a2f33342d3334203d3e20323731343932.roa
File:                     323830343a376336303a343030303a3a2f33342d3334203d3e20323731343932.roa (raw, json)
Hash identifier:          hhEZH5E5tmEvoe5QQ0pyRd5DMBrtdmJ0YvpVSUXrlBU=
Subject key identifier:   E3:68:9E:E1:14:16:E8:41:71:BD:8B:C3:0F:B7:9E:85:6F:19:90:01
Certificate issuer:       /CN=0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB
Certificate serial:       07C9E522ED9CE37AC1E3FDE0B14380AA963ACCC4
Authority key identifier: 0F:F0:34:B9:BE:86:ED:04:F4:7C:8E:99:B1:7F:D2:2F:D9:B5:8B:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/323830343a376336303a343030303a3a2f33342d3334203d3e20323731343932.roa
Signing time:             Sat 10 Jun 2023 14:00:29 +0000
ROA not before:           Sat 10 Jun 2023 13:55:29 +0000
ROA not after:            Sat 08 Jun 2024 14:00:29 +0000
asID:                     271492
IP address blocks:        2804:7c60:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c9:e5:22:ed:9c:e3:7a:c1:e3:fd:e0:b1:43:80:aa:96:3a:cc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB
        Validity
            Not Before: Jun 10 13:55:29 2023 GMT
            Not After : Jun  8 14:00:29 2024 GMT
        Subject: CN=E3689EE11416E84171BD8BC30FB79E856F199001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:4f:25:f9:65:86:0d:0f:59:26:e5:73:9c:
                    de:16:9a:5a:4e:5e:b5:7f:95:16:d3:0e:57:20:32:
                    ab:2f:d3:97:72:11:11:f0:23:08:cf:ac:fd:7f:6b:
                    b6:2f:10:24:1d:e8:bf:d7:ac:6f:15:73:f5:52:1f:
                    5e:37:8c:83:65:67:45:41:37:25:5b:5b:a4:44:64:
                    b7:20:d9:24:70:fd:ca:37:4e:68:93:0c:70:ab:df:
                    cf:4f:55:13:03:1c:33:16:3f:55:4f:a8:f0:11:cf:
                    c5:c6:3e:90:3b:c3:79:32:1c:1e:b3:b1:c5:aa:17:
                    1b:7f:a9:55:1e:58:ce:4a:fc:01:b9:b4:1e:a2:0b:
                    5c:b1:10:49:20:ee:45:d3:ec:39:91:6a:d5:31:63:
                    c8:67:87:00:29:c0:6e:f9:a5:50:9b:6c:2c:9a:ab:
                    66:76:90:ec:c5:53:62:f7:c1:4a:2b:10:2c:1d:5a:
                    b1:bd:fd:40:18:c3:35:63:5c:6b:7c:0f:59:48:a9:
                    df:20:fd:bb:6f:96:15:8f:75:01:1d:2b:49:59:f1:
                    2a:e2:9c:2e:26:20:5a:bc:6b:d8:dc:c2:d8:e6:ca:
                    96:59:23:1d:5d:c3:38:d6:45:2a:a2:c6:04:8d:de:
                    04:62:45:b2:9e:2f:49:d8:68:bb:6d:49:2f:c5:36:
                    7a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:68:9E:E1:14:16:E8:41:71:BD:8B:C3:0F:B7:9E:85:6F:19:90:01
            X509v3 Authority Key Identifier:
                keyid:0F:F0:34:B9:BE:86:ED:04:F4:7C:8E:99:B1:7F:D2:2F:D9:B5:8B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/323830343a376336303a343030303a3a2f33342d3334203d3e20323731343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c60:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9b:b3:ca:2d:73:c6:ac:3e:c3:c3:82:1c:6f:62:8d:18:bd:ad:
         2b:93:c7:7a:6a:6e:79:ca:e2:60:74:f7:2f:74:88:02:09:6d:
         d3:dc:37:a8:84:3f:0f:fe:a3:a4:d5:cf:3c:f6:10:8c:ac:e3:
         d5:71:9b:51:ab:45:3f:9d:9b:cd:89:1d:8c:ee:2c:cb:14:3a:
         f1:6a:40:d4:9e:6a:51:51:52:95:61:d3:a1:76:a5:5f:1f:2f:
         18:26:18:cc:10:bc:5a:28:04:bb:07:a8:b9:3a:74:14:22:88:
         70:dd:4d:28:4e:83:63:4d:4f:aa:90:15:7f:90:1e:e9:ba:68:
         8b:51:bb:87:67:73:f9:fe:14:77:77:84:fd:c7:30:e0:08:27:
         83:39:39:e0:14:99:2e:1d:34:6f:95:1a:0f:c2:d3:a1:db:24:
         46:31:e9:39:3d:e9:bf:7a:b4:b0:70:55:91:36:55:fe:9a:70:
         33:ed:e1:fa:c4:a1:4d:64:ef:3f:4b:0e:f0:70:97:c6:83:d6:
         ad:2a:7b:6b:86:96:6d:7a:bd:f7:5e:be:43:cf:d0:42:55:e8:
         54:65:0d:d7:36:47:ee:6e:cf:81:6e:10:d1:93:3b:b2:bb:a1:
         07:e8:8b:cb:14:ce:fe:2a:72:ca:00:42:0a:60:d1:78:40:7b:
         30:4b:37:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org