Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a3a2f33332d3333203d3e20323634303931.roa
File:                     323830343a326162633a3a2f33332d3333203d3e20323634303931.roa (raw, json)
Hash identifier:          PoKEP6xzN3r85GkjrAn2MIdRgV3IMgCmI6Gz1L/P9J4=
Subject key identifier:   73:CA:93:22:35:32:1D:C9:34:24:9B:93:93:72:BB:2D:E6:C2:7D:8F
Certificate issuer:       /CN=A6768A6B148248844D8E04551B1998D03AB86D3D
Certificate serial:       0EE7262055DC4EC9665D8DA0C97F7826F1A72F66
Authority key identifier: A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6768A6B148248844D8E04551B1998D03AB86D3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a3a2f33332d3333203d3e20323634303931.roa
Signing time:             Wed 18 Jan 2023 04:06:47 +0000
ROA not before:           Wed 18 Jan 2023 04:01:47 +0000
ROA not after:            Wed 17 Jan 2024 04:06:47 +0000
asID:                     264091
IP address blocks:        2804:2abc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e7:26:20:55:dc:4e:c9:66:5d:8d:a0:c9:7f:78:26:f1:a7:2f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6768A6B148248844D8E04551B1998D03AB86D3D
        Validity
            Not Before: Jan 18 04:01:47 2023 GMT
            Not After : Jan 17 04:06:47 2024 GMT
        Subject: CN=73CA932235321DC934249B939372BB2DE6C27D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:82:2b:c9:8c:e8:25:83:43:83:58:b5:e4:
                    84:c1:de:a1:1f:06:d5:50:82:fe:10:f6:0c:0c:6e:
                    1a:4a:ad:80:c9:66:39:36:f8:ad:cb:80:f2:95:80:
                    46:7e:d8:54:de:af:9a:5a:11:72:dc:0a:c8:22:60:
                    83:fe:a1:7f:ab:f1:ce:01:3b:79:45:2f:7e:c9:97:
                    fd:85:9e:0d:bf:31:be:37:bd:df:37:f9:a2:ab:8a:
                    6d:54:67:8f:17:41:94:47:dd:9d:11:32:22:66:e3:
                    94:2c:e6:0a:ed:83:11:fa:7b:9f:ea:01:e8:e3:6b:
                    8a:61:f1:b3:b8:21:af:56:16:66:fe:d8:42:23:9b:
                    fb:8e:51:a0:d4:e0:c0:39:51:37:9a:cf:50:bc:b5:
                    0f:3b:bf:16:37:0f:6d:48:f9:2f:ee:aa:37:40:54:
                    df:7f:9a:43:65:ba:be:b5:5a:a6:7d:e9:ed:a3:f9:
                    2a:a1:35:b0:95:c4:d9:5a:2d:44:cf:0d:18:4a:ff:
                    07:18:46:d7:8a:13:d9:63:de:c7:10:b3:61:91:f9:
                    24:9c:09:6a:0f:2a:bf:0c:88:61:50:12:df:32:92:
                    3d:24:d7:79:c7:ce:d2:85:b1:93:65:10:7a:bb:1f:
                    9f:fb:9c:9f:fa:63:eb:ed:62:b9:f1:1b:32:de:54:
                    5f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CA:93:22:35:32:1D:C9:34:24:9B:93:93:72:BB:2D:E6:C2:7D:8F
            X509v3 Authority Key Identifier:
                keyid:A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/A6768A6B148248844D8E04551B1998D03AB86D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6768A6B148248844D8E04551B1998D03AB86D3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a3a2f33332d3333203d3e20323634303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2abc::/33

    Signature Algorithm: sha256WithRSAEncryption
         2a:aa:44:d0:14:93:8f:2d:ec:b0:79:8d:33:89:47:af:46:be:
         9a:e5:d3:95:7f:5b:6b:fc:bb:07:21:7e:64:81:eb:eb:b8:23:
         e5:97:7a:1e:3b:fd:f4:84:91:5e:dc:33:4b:c8:cb:2f:d9:1a:
         ef:a8:32:dc:bf:a9:e8:14:33:6e:c2:ec:be:79:6c:f5:28:69:
         e8:12:45:79:ad:1b:ba:53:71:7d:49:aa:3e:9a:8e:ff:46:6d:
         cf:17:09:95:d4:42:f2:45:c7:d1:f4:8c:46:bf:98:f0:fe:c2:
         76:a9:b2:e6:63:9b:b1:f0:8c:99:05:f0:1d:09:c2:a1:04:3e:
         f2:9e:fd:47:b2:2a:41:4b:5d:e5:69:6c:93:85:ed:10:a5:c7:
         63:6f:74:cd:6b:c1:c2:16:32:f9:62:97:8b:2e:18:fe:6e:48:
         e1:21:5e:3f:96:2f:3c:66:b9:6c:32:44:fd:ab:43:8e:39:87:
         7e:99:8c:20:ee:e5:74:6e:c8:df:7f:74:2b:57:50:91:9f:b4:
         16:c3:c7:5c:bf:a2:be:a7:99:f4:eb:21:78:c1:cf:07:0a:5e:
         42:79:1a:49:a0:5a:d5:07:8b:43:ec:94:12:85:07:e3:d8:24:
         9b:39:0c:4a:9e:f1:86:40:9a:1e:c0:1d:a6:66:1d:40:28:b5:
         8b:22:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org