Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33332d3333203d3e20323636303636.roa
File:                     323830343a336130383a3a2f33332d3333203d3e20323636303636.roa (raw, json)
Hash identifier:          dyXjmg0j/AbxoZFTNowOndxbboSzXYk2TujEBZzQuHs=
Subject key identifier:   77:3D:3F:26:85:DE:0A:D0:43:39:C3:C5:7E:4F:02:4A:2E:B9:4E:AB
Certificate issuer:       /CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
Certificate serial:       386A5733E987115CB16D521D05A1DAB7F264E892
Authority key identifier: D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33332d3333203d3e20323636303636.roa
Signing time:             Fri 20 Oct 2023 23:32:07 +0000
ROA not before:           Fri 20 Oct 2023 23:27:07 +0000
ROA not after:            Fri 18 Oct 2024 23:32:07 +0000
asID:                     266066
IP address blocks:        2804:3a08::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6a:57:33:e9:87:11:5c:b1:6d:52:1d:05:a1:da:b7:f2:64:e8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
        Validity
            Not Before: Oct 20 23:27:07 2023 GMT
            Not After : Oct 18 23:32:07 2024 GMT
        Subject: CN=773D3F2685DE0AD04339C3C57E4F024A2EB94EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:18:7d:94:09:ab:b6:48:e6:31:d5:c7:e9:1d:
                    f9:35:cc:0b:aa:34:de:40:a0:43:0a:a5:49:e7:08:
                    48:fa:d0:60:7c:53:6a:26:09:1d:d4:9d:f0:39:13:
                    b7:de:7d:c1:fa:55:b3:bc:dc:1f:d8:d2:a4:24:85:
                    8b:00:fe:1e:2c:27:f7:e1:f4:7b:61:87:f9:ff:75:
                    2b:11:5f:45:2e:4c:19:d4:ed:08:c1:f2:85:ad:af:
                    51:52:7f:6c:7c:d4:bc:ec:ff:4e:ac:ef:da:52:cd:
                    62:95:51:2f:9d:8f:52:a1:09:92:8c:80:78:c4:ba:
                    ff:4a:0e:a1:52:d9:3d:7f:d1:9b:41:8a:43:0a:01:
                    11:ac:2a:07:dd:19:10:ac:85:a9:f9:80:21:f7:8e:
                    8a:8f:1f:80:dd:52:2c:f1:f6:21:bc:49:5b:5e:91:
                    50:22:e6:b0:99:8f:81:f7:ca:bc:09:bc:05:76:76:
                    cd:10:5a:e5:df:1a:dd:ae:70:5a:60:d6:62:02:71:
                    50:9a:01:90:90:1c:ed:9d:db:9f:62:2e:9a:39:a4:
                    8f:04:ae:80:7f:b1:6f:5a:65:0b:86:44:c5:bb:e7:
                    b8:be:71:52:4c:c4:d7:52:e7:4d:e8:cb:7e:8c:82:
                    61:9b:7a:63:be:f5:0c:d6:5c:c5:d7:03:19:4e:67:
                    e3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3D:3F:26:85:DE:0A:D0:43:39:C3:C5:7E:4F:02:4A:2E:B9:4E:AB
            X509v3 Authority Key Identifier:
                keyid:D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33332d3333203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a08::/33

    Signature Algorithm: sha256WithRSAEncryption
         65:16:28:bf:fe:0a:86:e4:de:82:3d:54:7c:b5:7f:bd:56:d2:
         2d:09:e0:52:a2:2f:34:9e:c5:0b:35:3f:0b:d4:89:a4:15:2f:
         2f:ec:97:53:2c:05:57:c8:73:a4:c0:ab:5c:92:31:ae:04:26:
         c2:e6:e8:a2:de:43:e9:64:ea:85:ef:59:60:d0:ee:b1:02:3f:
         4e:88:eb:87:3c:19:b6:7e:2e:cb:a8:98:c0:17:a2:f3:8a:49:
         a1:6d:43:b0:0c:e5:05:fb:32:34:d5:6d:9a:23:2f:c4:d9:df:
         c5:97:a1:e7:a1:8e:0b:a5:a0:5f:5e:21:13:11:59:16:8c:fa:
         57:1f:01:dc:3e:0a:f5:8f:8a:6b:62:6c:1a:90:96:bb:4a:ce:
         b6:45:70:b1:cb:0c:3e:90:b9:75:37:2a:86:eb:e3:3c:d6:0a:
         c4:11:92:6c:a9:fc:6f:fe:9c:06:96:2b:5d:42:1f:a0:c6:e4:
         3a:df:d2:de:d9:1e:93:bb:85:9a:f9:cf:20:0c:54:76:52:84:
         c6:e5:ff:51:de:5c:86:5e:ea:32:69:94:4c:e0:8b:74:3d:29:
         e9:7a:10:cd:19:5b:53:57:1e:17:29:75:6a:91:6d:1a:9e:82:
         55:81:e1:ea:ec:bd:a0:e4:bc:50:1a:3f:cd:e2:a9:5f:9e:2e:
         27:11:03:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org