Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33322d3333203d3e20323636303636.roa
File:                     323830343a336130383a3a2f33322d3333203d3e20323636303636.roa (raw, json)
Hash identifier:          1gBXLy9T9PmNjqGB/Fhtzrnxk4cUUlqWxlnHhN474Nk=
Subject key identifier:   17:E5:E6:BD:4F:AB:55:C1:07:63:46:3D:6D:70:94:CC:E5:85:E1:8E
Certificate issuer:       /CN=0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F
Certificate serial:       5D27688311E2BA0DB0528EA6ACC0A3EA892F51D6
Authority key identifier: 02:32:A5:24:64:A2:5A:FD:8F:00:BF:BF:1F:AB:0A:A8:6A:82:1F:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33322d3333203d3e20323636303636.roa
Signing time:             Sun 28 May 2023 02:22:04 +0000
ROA not before:           Sun 28 May 2023 02:17:04 +0000
ROA not after:            Sun 26 May 2024 02:22:04 +0000
asID:                     266066
IP address blocks:        2804:3a08::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:27:68:83:11:e2:ba:0d:b0:52:8e:a6:ac:c0:a3:ea:89:2f:51:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F
        Validity
            Not Before: May 28 02:17:04 2023 GMT
            Not After : May 26 02:22:04 2024 GMT
        Subject: CN=17E5E6BD4FAB55C10763463D6D7094CCE585E18E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:94:be:c4:b5:ec:38:bf:4b:87:c6:47:bb:
                    bb:d1:e2:f9:b1:d0:2a:25:b4:27:a4:c8:49:10:d5:
                    a0:5e:fb:84:76:7b:e6:e9:9a:0c:c2:c6:a5:18:1e:
                    92:32:f8:bc:5c:d3:14:3e:2a:f4:b5:10:36:9d:09:
                    f2:22:d9:1e:c3:1e:67:23:e8:40:b4:fb:0a:a8:be:
                    b2:53:1f:50:cb:8e:b3:e5:60:33:92:e6:e1:8b:4a:
                    9f:0d:07:f0:93:45:fe:6d:e3:5a:e7:ad:bf:b7:3b:
                    c4:25:50:1c:eb:e0:06:0d:c0:50:01:33:7c:dd:d8:
                    0d:2f:02:b7:f8:88:7a:b0:5c:2a:0a:e2:45:64:99:
                    42:7d:db:90:d6:98:59:e1:d2:8e:7c:d1:fd:be:6e:
                    45:6d:54:2e:e0:c8:2b:1e:98:bf:6e:e2:4e:e2:47:
                    46:53:66:6c:8b:80:53:ab:5e:a1:9b:e3:62:47:36:
                    6e:22:0c:45:9b:38:08:bd:d9:a8:7c:f4:ab:85:6d:
                    08:9f:f5:3a:25:37:08:23:c6:3c:14:70:69:82:79:
                    db:64:3a:a0:f2:32:14:af:11:3d:0c:f7:58:46:69:
                    42:74:89:b6:b4:50:29:8e:99:09:a0:eb:53:bb:d5:
                    a8:a7:94:3f:7a:1a:7f:78:78:35:7b:10:a6:e4:b4:
                    e5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E5:E6:BD:4F:AB:55:C1:07:63:46:3D:6D:70:94:CC:E5:85:E1:8E
            X509v3 Authority Key Identifier:
                keyid:02:32:A5:24:64:A2:5A:FD:8F:00:BF:BF:1F:AB:0A:A8:6A:82:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33322d3333203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a08::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:7b:35:fd:3d:52:29:c8:bc:60:00:12:04:c0:93:db:24:d4:
         39:c1:5d:cd:ff:22:05:1e:cb:c5:f8:08:1b:78:f6:43:72:8b:
         33:13:f6:1d:87:cd:b8:1b:2b:de:e8:59:cc:a7:d1:62:74:dc:
         37:d2:27:ab:23:87:a3:b9:66:e7:31:c3:d6:0e:c9:21:bf:0a:
         98:b2:ee:a4:24:09:bb:b2:35:3b:d8:aa:18:5c:86:c7:ba:f5:
         bd:53:db:59:fa:04:05:52:51:51:46:07:6e:e2:88:7a:80:1d:
         3f:2f:45:3d:2b:d8:61:0f:0f:2e:0e:e8:17:fc:d5:51:d4:1f:
         64:a2:4f:4e:4a:34:05:41:3e:fd:0d:a3:1c:5e:76:42:95:78:
         dd:6a:cc:d9:25:6b:43:4e:e1:e5:1f:58:2a:e3:52:f3:b2:64:
         b6:71:1d:51:47:06:63:3f:1e:24:ab:28:b6:b7:7d:97:68:b5:
         42:ef:22:78:61:88:35:8f:c7:78:f1:12:9f:de:5d:a5:24:6c:
         1f:7e:a0:e4:36:28:46:7e:48:51:c2:17:8e:9c:be:1b:fb:80:
         74:df:59:6f:cb:ce:19:01:85:dd:01:6d:f3:5c:8f:93:93:0f:
         42:fd:06:7c:be:20:99:55:53:16:5a:a0:0b:0c:eb:33:43:d7:
         89:29:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org