Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a383030303a3a2f33332d3333203d3e20323636303636.roa
File:                     323830343a336130383a383030303a3a2f33332d3333203d3e20323636303636.roa (raw, json)
Hash identifier:          uIW341aVUGWI/8IGPM//6MzkOwg+2UojBAPCnf18htQ=
Subject key identifier:   8C:C4:28:E1:C6:23:01:17:46:81:07:CE:B9:66:76:BA:B2:DC:1C:66
Certificate issuer:       /CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
Certificate serial:       6E922552B55F2B23B268D0D338A51316D6B271C8
Authority key identifier: D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a383030303a3a2f33332d3333203d3e20323636303636.roa
Signing time:             Fri 20 Oct 2023 23:32:08 +0000
ROA not before:           Fri 20 Oct 2023 23:27:08 +0000
ROA not after:            Fri 18 Oct 2024 23:32:08 +0000
asID:                     266066
IP address blocks:        2804:3a08:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:92:25:52:b5:5f:2b:23:b2:68:d0:d3:38:a5:13:16:d6:b2:71:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
        Validity
            Not Before: Oct 20 23:27:08 2023 GMT
            Not After : Oct 18 23:32:08 2024 GMT
        Subject: CN=8CC428E1C6230117468107CEB96676BAB2DC1C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:a0:5a:23:98:97:fe:b7:3f:0f:6e:e5:1e:
                    41:a6:03:2e:47:bb:eb:df:eb:16:4e:3b:b0:d2:56:
                    af:28:11:09:ec:39:7b:92:0e:15:b7:19:5d:97:fa:
                    3c:8a:63:2c:45:a3:2c:0a:56:4f:97:f0:a7:a5:88:
                    35:ca:66:50:39:46:8e:fe:b7:d8:0a:a1:09:74:e4:
                    a7:87:c2:23:b3:3e:ef:83:c3:50:8d:3c:c8:0a:43:
                    4a:6b:ae:07:dc:f1:bf:f3:aa:22:3c:f4:15:d5:f0:
                    2a:b6:98:b4:e6:c3:b0:03:9f:e5:70:b1:2f:3b:da:
                    1f:de:d4:4f:93:75:8f:c9:3e:8c:37:11:fe:c0:e9:
                    4b:3e:10:9c:39:48:b0:a5:6d:24:ab:dd:f2:31:57:
                    23:45:00:4a:03:94:2b:2d:65:3b:77:43:4b:ae:27:
                    c5:dd:8d:23:b9:d9:cd:fc:da:2e:12:87:b1:60:4d:
                    52:c4:63:b0:a0:e7:aa:26:a3:f6:01:82:42:d7:f2:
                    2b:85:53:25:ec:53:87:0c:da:b1:a7:5b:d1:3b:a6:
                    38:d2:64:57:fd:88:1d:66:1a:d2:02:16:b6:07:10:
                    fd:47:e5:8f:af:37:9e:1c:26:14:8c:c5:e1:af:f9:
                    8d:08:94:ea:bc:5d:5f:62:a5:e6:b8:b7:96:c1:06:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C4:28:E1:C6:23:01:17:46:81:07:CE:B9:66:76:BA:B2:DC:1C:66
            X509v3 Authority Key Identifier:
                keyid:D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a383030303a3a2f33332d3333203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a08:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:d1:2c:fa:c7:06:19:17:82:6d:fe:e6:8c:74:d8:f3:80:64:
         b0:f0:67:98:57:24:8f:34:69:a9:a3:7a:05:5d:87:3a:f1:4d:
         a9:45:9b:96:f5:4b:2c:c6:65:60:87:f6:41:38:5b:06:0b:31:
         a8:9b:2b:a6:93:25:3b:c5:75:11:02:71:ae:5e:b9:86:ff:f4:
         f3:aa:96:f5:18:06:b5:9b:cb:ed:09:b1:39:57:10:8b:fb:69:
         a5:5a:01:21:47:bb:bd:3e:00:44:8f:3a:d8:d9:7f:b0:a9:a1:
         02:de:21:3c:78:fb:11:e7:bf:01:15:35:84:2a:70:e0:81:17:
         6e:36:85:4d:44:29:1b:a2:4b:f6:12:ba:5e:cb:37:40:85:bf:
         4e:98:3c:b6:00:8d:f1:c1:84:85:f4:3c:f2:0e:66:ac:77:e3:
         d5:fb:ea:b5:cd:8a:3f:b6:b6:03:f7:f6:6a:04:45:e5:77:74:
         6f:c0:69:e0:10:63:a0:cd:25:ab:58:ed:83:58:85:8a:d6:37:
         7d:7b:15:d4:d5:de:23:9c:33:ea:f5:03:40:05:e8:26:16:48:
         9f:12:0c:f1:92:7e:49:c5:1d:9b:9a:34:0d:73:93:0e:b6:95:
         64:ab:39:11:70:50:35:29:bb:26:cf:77:e8:39:da:70:1c:85:
         de:90:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org