Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/323830343a326162633a383030303a3a2f33332d313238203d3e20323634303931.roa
File:                     323830343a326162633a383030303a3a2f33332d313238203d3e20323634303931.roa (raw, json)
Hash identifier:          vICQlPWtpkvX+9Nv4ZYx75v6MipwY4n1l8o5dz3PDDk=
Subject key identifier:   7F:6E:C3:DB:CB:6F:D6:BD:B0:44:1B:45:E6:53:A5:F1:A3:5E:23:AF
Certificate issuer:       /CN=965C3F6319859C81532121D28A8D0F5563BB2986
Certificate serial:       30F7587A4B34DE7E34278E9D9342517764D82A6D
Authority key identifier: 96:5C:3F:63:19:85:9C:81:53:21:21:D2:8A:8D:0F:55:63:BB:29:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/965C3F6319859C81532121D28A8D0F5563BB2986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/323830343a326162633a383030303a3a2f33332d313238203d3e20323634303931.roa
Signing time:             Wed 03 Apr 2024 22:19:02 +0000
ROA not before:           Wed 03 Apr 2024 22:14:02 +0000
ROA not after:            Wed 02 Apr 2025 22:19:02 +0000
asID:                     264091
IP address blocks:        2804:2abc:8000::/33 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f7:58:7a:4b:34:de:7e:34:27:8e:9d:93:42:51:77:64:d8:2a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965C3F6319859C81532121D28A8D0F5563BB2986
        Validity
            Not Before: Apr  3 22:14:02 2024 GMT
            Not After : Apr  2 22:19:02 2025 GMT
        Subject: CN=7F6EC3DBCB6FD6BDB0441B45E653A5F1A35E23AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:65:f8:58:74:40:ed:38:39:58:83:36:c6:70:
                    52:b7:42:cb:36:7c:e1:1e:81:7a:e5:fa:eb:22:0f:
                    44:1d:3a:e7:99:c8:e1:6c:3a:74:fa:96:d8:bb:09:
                    48:09:96:ef:9a:5a:28:1c:bc:79:ba:b6:ff:6a:ca:
                    64:b9:57:8d:e6:db:60:0c:78:56:da:33:b0:95:49:
                    da:3c:02:34:ed:46:05:62:d9:b8:7d:c2:88:ac:d7:
                    9c:78:10:7f:09:1e:e2:d5:7f:d1:00:5b:af:c8:23:
                    27:14:d8:70:06:71:70:d7:85:5e:ec:47:d7:4f:88:
                    63:82:54:10:50:72:6d:28:05:89:25:fe:58:05:d0:
                    45:1e:c1:83:89:6c:c3:4b:6e:ea:04:56:96:51:a7:
                    0f:53:c0:5e:26:25:95:c5:8e:a2:39:0a:12:ca:fc:
                    2c:74:da:ab:c0:e2:88:b6:d2:71:15:a8:9a:5d:b5:
                    bc:27:f5:cb:62:a7:31:a1:b3:97:50:d2:99:47:19:
                    93:7b:22:f0:d3:0a:a0:70:f2:0b:19:6c:73:f1:9f:
                    74:25:5c:5e:59:8d:d0:b2:86:56:3f:cf:40:3e:32:
                    01:d2:47:f9:d0:88:9f:d1:b5:9f:e5:8d:1a:56:00:
                    b7:35:91:61:15:b3:df:5e:03:a4:4d:d0:05:85:66:
                    ad:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6E:C3:DB:CB:6F:D6:BD:B0:44:1B:45:E6:53:A5:F1:A3:5E:23:AF
            X509v3 Authority Key Identifier:
                keyid:96:5C:3F:63:19:85:9C:81:53:21:21:D2:8A:8D:0F:55:63:BB:29:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/965C3F6319859C81532121D28A8D0F5563BB2986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/965C3F6319859C81532121D28A8D0F5563BB2986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/323830343a326162633a383030303a3a2f33332d313238203d3e20323634303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2abc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         51:a5:32:59:81:7b:ab:8e:94:10:cf:94:1e:c7:6b:57:5d:29:
         41:a2:27:6d:a6:ad:39:e9:aa:64:97:3e:bf:77:41:1d:4e:af:
         d2:3e:4d:bb:18:41:c3:1c:b9:cf:e6:ef:98:9c:80:35:12:99:
         85:be:4e:23:ff:69:3d:17:a3:84:50:80:35:3c:c7:16:5c:3b:
         5b:11:e6:ed:ba:24:96:ac:02:23:85:d4:68:7d:0c:63:34:37:
         8d:b5:29:39:49:57:8f:f2:2f:bc:bf:3c:81:3e:ee:cd:b7:f9:
         12:a7:09:d3:26:25:ca:27:39:e3:c4:8f:07:7b:22:05:a5:60:
         d8:41:f5:1d:e3:e2:38:bb:ad:2c:d8:19:48:a3:1e:f1:47:b0:
         b5:05:66:e6:f0:42:91:f0:2c:f5:e8:7d:d3:fc:30:84:ca:f0:
         9f:ec:e9:cc:f9:bb:45:64:13:7e:a2:a6:d4:73:de:e7:10:64:
         d7:fd:5d:a7:f9:6c:cf:15:6f:c1:66:00:f9:5b:d7:0c:20:92:
         c1:d6:b0:cf:fe:24:9c:60:c8:a4:19:85:c3:2b:69:2c:5a:c6:
         00:ff:94:b1:29:d6:3c:f2:cb:6c:ab:13:10:8b:1f:be:17:98:
         59:cc:71:bc:9a:f8:89:a1:a6:ad:ee:c1:fb:43:9f:29:94:99:
         0b:5d:a3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org