Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/323830343a376336303a633030303a3a2f33342d3334203d3e20323731343932.roa
File:                     323830343a376336303a633030303a3a2f33342d3334203d3e20323731343932.roa (raw, json)
Hash identifier:          yqsMtwMqhcwIbOu1dOtK+Y7V5rvYKuwPeNPahqqzfhE=
Subject key identifier:   2B:61:87:AE:E8:2C:5D:F2:28:8E:83:1B:D6:D5:AD:9F:63:2C:95:C6
Certificate issuer:       /CN=0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB
Certificate serial:       1DD8F3FF7884BAA5FEB5F62C3F28A39A738857BC
Authority key identifier: 0F:F0:34:B9:BE:86:ED:04:F4:7C:8E:99:B1:7F:D2:2F:D9:B5:8B:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/323830343a376336303a633030303a3a2f33342d3334203d3e20323731343932.roa
Signing time:             Sat 10 Jun 2023 14:00:29 +0000
ROA not before:           Sat 10 Jun 2023 13:55:29 +0000
ROA not after:            Sat 08 Jun 2024 14:00:29 +0000
asID:                     271492
IP address blocks:        2804:7c60:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d8:f3:ff:78:84:ba:a5:fe:b5:f6:2c:3f:28:a3:9a:73:88:57:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB
        Validity
            Not Before: Jun 10 13:55:29 2023 GMT
            Not After : Jun  8 14:00:29 2024 GMT
        Subject: CN=2B6187AEE82C5DF2288E831BD6D5AD9F632C95C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:23:bf:43:0b:44:30:63:a5:a7:6b:ee:e2:
                    26:35:3d:8b:4d:49:c7:72:c3:99:7d:49:5a:4e:fc:
                    15:03:a9:c6:a0:b5:ef:2c:cd:63:cf:50:53:7b:a4:
                    cd:cb:ea:66:ff:2d:c1:fe:21:e8:b1:75:33:50:f6:
                    82:ca:3d:95:2f:b2:4a:cf:8b:1c:dc:53:10:69:95:
                    d3:46:19:a4:b8:e5:4f:d7:62:03:31:25:c3:ee:4a:
                    42:ab:6d:46:77:30:66:d2:0b:d2:09:58:13:81:55:
                    08:f8:f2:7a:0c:b4:4f:5e:af:f9:3c:ec:4e:8b:3a:
                    ae:b0:c1:f0:75:37:97:a3:46:37:31:d4:e1:a1:84:
                    ae:45:d8:f8:e2:d6:ef:bb:30:80:31:a5:81:1c:5c:
                    6d:6a:b6:80:3a:45:7f:42:05:79:35:1c:c1:7d:70:
                    4b:43:d3:3e:2f:c1:db:d7:76:a5:37:33:73:73:39:
                    56:00:eb:63:2b:03:71:0f:77:c6:7a:59:a6:a5:57:
                    b1:d1:dc:a8:c2:ab:f2:09:79:52:67:b9:71:d7:38:
                    b9:7d:db:4a:7e:5c:03:b6:5c:60:f3:53:46:6a:a4:
                    4d:75:56:5e:1b:7e:6b:2f:df:a2:48:fb:66:89:84:
                    33:cc:91:ce:13:66:fd:9c:a1:63:9c:2c:4c:6b:93:
                    72:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:61:87:AE:E8:2C:5D:F2:28:8E:83:1B:D6:D5:AD:9F:63:2C:95:C6
            X509v3 Authority Key Identifier:
                keyid:0F:F0:34:B9:BE:86:ED:04:F4:7C:8E:99:B1:7F:D2:2F:D9:B5:8B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/323830343a376336303a633030303a3a2f33342d3334203d3e20323731343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c60:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:39:74:a0:70:b2:ce:a1:a6:66:a4:9b:1b:fc:b9:b1:4f:cb:
         b7:0b:71:79:7b:f8:f8:23:47:be:14:a4:6b:ad:22:07:dd:1e:
         83:12:a0:22:b2:39:31:78:45:18:66:b1:16:9b:52:ac:4f:9a:
         50:cb:ed:6f:73:bc:4b:8c:62:7c:8a:3c:64:2e:80:27:06:0b:
         f2:4c:3f:46:b0:1b:19:f3:a6:58:9d:ce:7f:9d:eb:54:4b:17:
         cd:b1:f1:6f:97:42:b6:fa:c7:b5:7e:0e:72:81:94:e1:e3:3a:
         df:65:22:13:5d:74:54:f1:5f:71:16:59:75:5a:26:6b:9b:6b:
         28:73:2c:a7:4e:e9:d1:cd:40:f7:75:05:3a:9d:99:6a:94:90:
         79:cc:b7:66:db:85:fa:24:15:7d:fd:b6:2a:3c:9b:55:5a:47:
         c3:8f:ec:ae:94:18:4a:d4:f7:dd:15:22:88:6e:86:e7:e9:ae:
         17:6a:c4:0f:70:bb:7f:2f:ff:19:3c:0d:12:de:7d:81:2b:f7:
         cd:17:47:c8:e1:e6:78:3f:28:9e:14:e6:fa:d3:a3:32:4a:40:
         a7:42:e9:d2:40:d9:ed:c5:d1:4e:9e:83:bf:63:dd:e6:64:20:
         4d:6c:66:36:1e:db:fb:38:b5:fd:19:e8:51:2e:2f:72:83:a5:
         6f:62:fd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org