Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a383030303a3a2f33332d313238203d3e20323634303931.roa
File:                     323830343a326162633a383030303a3a2f33332d313238203d3e20323634303931.roa (raw, json)
Hash identifier:          BZQ3dR/oTGEieKWDUwcBiEu6m5XTddtNojauQe8WvkY=
Subject key identifier:   0A:8E:88:20:40:0B:D1:F4:5B:F0:93:2E:CF:B7:BC:40:74:43:48:DA
Certificate issuer:       /CN=E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102
Certificate serial:       0471C561471CA6FC5B3EEF756A08AC87B00125AA
Authority key identifier: E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a383030303a3a2f33332d313238203d3e20323634303931.roa
Signing time:             Thu 21 Mar 2024 19:51:12 +0000
ROA not before:           Thu 21 Mar 2024 19:46:12 +0000
ROA not after:            Thu 20 Mar 2025 19:51:12 +0000
asID:                     264091
IP address blocks:        2804:2abc:8000::/33 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:71:c5:61:47:1c:a6:fc:5b:3e:ef:75:6a:08:ac:87:b0:01:25:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102
        Validity
            Not Before: Mar 21 19:46:12 2024 GMT
            Not After : Mar 20 19:51:12 2025 GMT
        Subject: CN=0A8E8820400BD1F45BF0932ECFB7BC40744348DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:b3:9b:f5:17:b5:cb:c4:75:2d:35:1a:1e:
                    56:9e:ab:05:a7:5d:e1:be:b9:ba:60:88:60:66:e1:
                    45:d5:e0:c2:a6:4b:70:57:d2:f9:b4:64:07:60:15:
                    21:6a:36:8b:a7:e6:72:6a:f0:94:f4:56:87:15:4c:
                    72:cc:d2:b0:81:c1:c8:b0:d2:60:3a:cf:b0:f5:9f:
                    14:ab:3f:4f:41:af:93:92:c7:e6:bf:44:d5:93:35:
                    df:48:ca:83:dc:5f:73:55:c4:34:57:fa:4b:ba:c2:
                    1c:67:e0:79:eb:19:94:1a:66:20:d7:ff:0e:5c:01:
                    e4:f3:f4:17:17:3e:8a:76:1a:38:de:34:e1:93:50:
                    d5:f6:6e:f7:9d:58:bb:1e:a7:79:ed:17:f8:f0:32:
                    8d:2d:50:0c:f2:6e:d1:ca:38:96:7d:2a:80:57:cf:
                    a5:ff:fd:6d:3f:78:8d:b7:2e:bd:bc:a6:f7:c6:d8:
                    12:d8:d2:62:b1:db:e9:55:6b:ed:1a:bb:79:7b:5b:
                    d3:fc:60:29:d7:ef:bb:bb:dc:6a:4d:d4:b8:2b:b4:
                    8a:b9:71:4a:d3:cd:25:60:1e:6d:da:6b:ab:f6:80:
                    9d:f1:0d:04:13:f0:31:f1:99:ab:99:41:ce:3d:b6:
                    07:fe:f5:7b:22:e1:0b:b7:37:ca:75:09:94:74:1f:
                    3f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8E:88:20:40:0B:D1:F4:5B:F0:93:2E:CF:B7:BC:40:74:43:48:DA
            X509v3 Authority Key Identifier:
                keyid:E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a383030303a3a2f33332d313238203d3e20323634303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2abc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         01:ac:27:16:22:47:81:2c:d2:d0:71:06:f5:90:b7:0e:95:ed:
         c2:59:5f:8b:93:96:24:ad:cc:4c:60:ab:53:16:d9:bd:93:e6:
         6a:e8:3f:8d:44:01:94:d0:d5:5c:fa:1e:24:56:ad:fc:b4:90:
         7f:db:c1:da:42:d6:7c:6c:56:82:76:d7:b0:d7:ef:3a:b9:62:
         32:91:c3:e9:5f:1a:1a:af:6a:f4:cb:f9:e6:02:35:00:d2:0c:
         2d:5c:e9:f8:59:67:f7:71:8e:c0:62:ed:2f:9b:76:40:7a:1c:
         41:7e:1c:3e:f4:b4:0f:75:f2:c3:38:4d:eb:a8:7a:e2:9f:88:
         e2:f9:01:6e:bb:0c:8f:9c:e4:45:57:1c:90:be:34:bd:66:13:
         01:e2:41:f2:3f:95:2e:83:dc:c6:78:1c:cb:2c:ff:ef:24:1a:
         80:0d:fc:8f:dc:71:c1:c3:29:e7:20:78:ef:25:71:ed:6f:02:
         d9:f7:3d:9a:17:1c:77:91:60:28:b5:96:74:ca:12:b1:25:b0:
         77:94:a2:57:ad:93:5a:6a:13:87:60:6a:d4:e6:80:fe:8f:43:
         c0:b3:7e:aa:e1:33:5d:ef:61:87:3b:b4:8e:b0:2d:8f:7c:37:
         98:02:b9:7f:54:59:17:1d:c3:ee:15:9e:b4:2d:82:98:cb:61:
         5f:59:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org