Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a633030303a3a2f33342d3334203d3e20323636303636.roa
File:                     323830343a336130383a633030303a3a2f33342d3334203d3e20323636303636.roa (raw, json)
Hash identifier:          iiA8gBU+ksOWTRrG9j67LHkewYSFCVeG98EOgT+IG+A=
Subject key identifier:   85:73:64:27:E2:E7:06:F0:75:D1:6F:D2:99:37:0C:40:9D:88:DD:77
Certificate issuer:       /CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
Certificate serial:       2072FE03E48927032764351DC5C5DD30791A696D
Authority key identifier: D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a633030303a3a2f33342d3334203d3e20323636303636.roa
Signing time:             Sat 18 Nov 2023 00:21:38 +0000
ROA not before:           Sat 18 Nov 2023 00:16:38 +0000
ROA not after:            Sat 16 Nov 2024 00:21:38 +0000
asID:                     266066
IP address blocks:        2804:3a08:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:72:fe:03:e4:89:27:03:27:64:35:1d:c5:c5:dd:30:79:1a:69:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
        Validity
            Not Before: Nov 18 00:16:38 2023 GMT
            Not After : Nov 16 00:21:38 2024 GMT
        Subject: CN=85736427E2E706F075D16FD299370C409D88DD77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:d0:ac:3f:fd:d0:42:c8:46:75:4b:25:44:
                    4b:06:b1:de:68:ed:f3:6d:7c:02:56:6a:5b:35:7c:
                    ee:66:f1:9b:b3:b3:e3:cf:d3:0e:e0:75:af:68:21:
                    df:f8:60:74:4b:f2:f9:db:60:3d:64:ad:a0:d6:c8:
                    f8:41:ec:29:8f:11:91:b7:5f:1d:d9:4a:27:23:15:
                    1c:0c:1f:95:f8:04:4a:d3:e5:5b:de:4b:3a:07:e8:
                    3e:94:26:76:e5:eb:f1:51:e4:19:dc:1a:17:80:09:
                    5e:68:14:0d:3b:4d:10:ae:65:a2:30:53:c9:35:78:
                    db:e0:69:cf:13:9a:22:3c:e0:e7:d0:3e:c3:ae:dd:
                    fc:7d:47:d6:76:78:b8:90:6a:c4:ce:de:2b:8c:ee:
                    a6:e5:d2:3f:0e:97:de:47:90:c9:f1:9f:b1:62:5b:
                    42:d0:00:23:f7:e5:e0:d7:cb:78:c6:b4:90:bc:c7:
                    35:fa:40:d8:9f:c4:e2:ee:76:fa:27:1d:4e:1d:15:
                    cc:84:d1:36:f7:39:3e:99:e6:4c:d5:a7:76:71:dc:
                    c1:ea:98:3d:c6:e5:8a:b0:95:c5:ae:78:c4:27:9c:
                    57:81:3b:11:f7:95:6f:ee:83:c5:bb:ce:8c:d7:56:
                    f5:da:a8:8d:fc:66:d1:59:f7:14:67:ed:14:d6:df:
                    09:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:73:64:27:E2:E7:06:F0:75:D1:6F:D2:99:37:0C:40:9D:88:DD:77
            X509v3 Authority Key Identifier:
                keyid:D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a633030303a3a2f33342d3334203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a08:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:d6:80:af:a1:7e:4a:31:0a:36:06:ae:f1:f5:ad:6f:5f:c2:
         0b:c1:26:76:41:62:e4:11:3a:51:47:c0:41:02:92:4c:35:b8:
         d6:46:d1:02:42:81:ba:eb:33:99:d9:2a:73:d4:f3:d3:a2:c3:
         75:e0:53:bd:a1:bf:f3:8e:3d:5a:1d:1d:58:f9:e8:e3:2f:8d:
         d0:25:3c:64:7c:d9:db:1c:68:7b:f9:bc:36:8b:58:e6:92:cf:
         9b:b9:99:4a:58:d5:66:26:39:f8:25:45:9b:cd:3e:0d:0e:ce:
         29:ca:0f:52:e8:09:df:eb:c3:84:3c:01:eb:58:3c:f7:37:34:
         42:24:1b:a3:80:22:ff:f3:da:47:9d:7e:aa:c7:ed:6a:95:05:
         c8:1d:04:40:f8:e1:d7:a9:ac:5e:2c:19:ad:cc:75:dd:e5:9b:
         01:62:3d:85:9d:b4:09:e0:0b:d3:2f:24:83:65:75:77:be:a9:
         b7:ce:3d:14:66:33:25:6a:2e:83:7e:73:e1:69:b1:6d:7b:3d:
         c8:6a:27:77:7a:c2:8e:8f:26:f0:aa:55:0f:56:db:cb:be:60:
         91:41:00:f9:e6:ba:89:52:60:e4:07:ac:14:7e:32:d4:94:14:
         61:e8:89:a8:10:ef:c3:e9:f7:d8:28:cc:05:5c:ca:4c:a0:52:
         8e:4c:c6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org