Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a623230303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a623230303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          Cfp5SDl5bDpp5EIh4T43b1JsqpcyjUWFSAN7vmCH98s=
Subject key identifier:   FB:AC:67:58:E2:45:B1:B0:B4:A2:E7:36:1C:A6:17:B0:7C:DC:01:44
Certificate issuer:       /CN=E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD
Certificate serial:       28FD67258CEA5119E8523D69EE259874C68D27B8
Authority key identifier: E8:81:CE:9B:B1:2E:D9:DA:F6:F0:92:E0:28:1F:D1:92:F9:F3:C6:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a623230303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Fri 17 Mar 2023 21:23:29 +0000
ROA not before:           Fri 17 Mar 2023 21:18:29 +0000
ROA not after:            Fri 15 Mar 2024 21:23:29 +0000
asID:                     264344
IP address blocks:        2804:2674:b200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fd:67:25:8c:ea:51:19:e8:52:3d:69:ee:25:98:74:c6:8d:27:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD
        Validity
            Not Before: Mar 17 21:18:29 2023 GMT
            Not After : Mar 15 21:23:29 2024 GMT
        Subject: CN=FBAC6758E245B1B0B4A2E7361CA617B07CDC0144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:a2:20:15:61:e1:dd:00:eb:da:f7:b4:c0:
                    e2:40:58:f5:2d:bf:d2:55:6c:5e:a8:eb:64:53:df:
                    20:a8:16:92:86:dd:77:f4:29:df:9d:b2:b4:47:d0:
                    80:50:cd:9d:b1:2d:44:2c:af:ab:5f:ec:27:09:ca:
                    05:0a:1e:ef:a9:27:8b:23:ff:fb:90:92:88:65:3d:
                    f1:52:8b:19:7f:a0:56:41:3a:d5:f9:b4:d3:ee:fc:
                    91:30:95:90:fc:0c:be:b4:3f:34:04:9c:8d:57:e4:
                    a2:4c:bf:01:43:82:e6:2c:88:ff:38:83:d4:76:b2:
                    91:24:87:94:f4:cf:11:a7:48:18:b0:f8:a0:b1:a3:
                    02:64:40:a8:4c:93:33:a6:b6:7a:9b:31:f5:6a:64:
                    22:d6:fc:71:b7:90:7c:3d:1c:3b:4d:e6:cb:b6:db:
                    6d:7e:a5:8b:ae:55:8d:ab:2d:f2:a1:34:d2:99:8c:
                    79:d9:96:77:7d:5b:7c:d1:76:e0:62:c8:06:c3:de:
                    aa:51:3e:1f:33:4b:72:cc:98:c0:44:ef:19:33:15:
                    33:2b:c2:fb:24:c2:7d:25:77:0b:1b:c4:e1:10:f3:
                    2e:dd:46:83:d3:a1:77:7a:ef:41:c5:47:47:d8:50:
                    38:8a:4d:df:b9:ca:86:b4:30:67:55:83:82:cd:fd:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AC:67:58:E2:45:B1:B0:B4:A2:E7:36:1C:A6:17:B0:7C:DC:01:44
            X509v3 Authority Key Identifier:
                keyid:E8:81:CE:9B:B1:2E:D9:DA:F6:F0:92:E0:28:1F:D1:92:F9:F3:C6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a623230303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:b200::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:d9:76:76:c9:9f:dc:70:a4:7f:c9:0b:9d:c2:26:fa:de:
         47:04:d7:ca:87:52:85:0a:7a:03:51:3a:ff:e6:c4:4d:32:c7:
         0f:2b:e2:6c:e6:26:e0:61:f4:bb:03:47:68:59:79:4a:ce:5d:
         cc:96:18:6f:3c:a1:90:8d:31:a0:f0:0f:a0:43:6c:8a:a6:1f:
         00:8d:e0:e4:79:1b:2c:bc:05:af:97:89:2b:31:d9:cc:c9:ed:
         3e:e1:30:02:73:58:13:a7:cc:f5:bc:ff:ee:16:d3:d0:ef:d8:
         11:ab:1d:91:43:6a:a3:e2:4d:12:4d:0a:4f:b5:29:c0:49:48:
         a5:f7:21:10:aa:8d:db:15:11:e5:ef:df:ad:2b:13:b7:5d:14:
         16:5f:4a:a1:dc:fe:a1:97:c1:f5:85:75:71:51:b6:1b:10:8f:
         53:ce:ca:db:3f:c1:70:0c:c7:a7:7d:44:28:66:00:f9:8c:02:
         6c:04:d8:c0:86:33:9c:2d:c2:6c:78:0b:89:27:8e:48:57:c8:
         c3:01:09:46:ff:ea:b3:37:f0:89:f2:b6:40:1f:40:e1:8c:96:
         6a:c9:8c:0c:8a:eb:4e:de:e8:15:f7:75:b0:95:0d:25:ab:38:
         aa:c1:69:58:1a:79:c5:9f:d3:94:44:07:da:c0:33:08:b9:b7:
         13:38:78:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org