Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/323830343a343136343a3a2f33322d3438203d3e20323637343330.roa
File:                     323830343a343136343a3a2f33322d3438203d3e20323637343330.roa (raw, json)
Hash identifier:          UEm1s7+p4w87X9nOIQWg6zuxzNWdF4xtAEaj+K+3mLk=
Subject key identifier:   45:4E:82:55:62:D2:C3:97:6E:AF:C1:4C:67:A0:2F:81:01:95:4F:FE
Certificate issuer:       /CN=8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5
Certificate serial:       78B93AC14802CB4A5E12228EA1F5B2FEC1DD7D20
Authority key identifier: 8C:24:7F:FD:F1:3A:92:33:B3:CB:03:E7:F0:68:98:5E:0A:A4:F4:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/323830343a343136343a3a2f33322d3438203d3e20323637343330.roa
Signing time:             Wed 28 Jun 2023 15:00:00 +0000
ROA not before:           Wed 28 Jun 2023 14:55:00 +0000
ROA not after:            Fri 28 Jun 2024 15:00:00 +0000
asID:                     267430
IP address blocks:        2804:4164::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b9:3a:c1:48:02:cb:4a:5e:12:22:8e:a1:f5:b2:fe:c1:dd:7d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5
        Validity
            Not Before: Jun 28 14:55:00 2023 GMT
            Not After : Jun 28 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:60:b4:19:36:a4:f6:7d:02:e7:d3:14:60:f1:
                    66:47:cc:78:74:b1:92:30:80:42:dd:70:5f:38:41:
                    5f:0f:f7:54:ac:14:b7:ca:b7:04:d6:6d:c4:c3:a8:
                    3f:33:bb:3e:d9:d1:9d:33:49:aa:1d:00:e1:a7:57:
                    21:61:b2:e9:17:f0:50:71:e1:d0:a0:ff:7e:43:f6:
                    73:c0:72:9a:4a:db:25:33:2d:32:fe:aa:3f:b6:9c:
                    3c:b2:0c:7d:54:69:83:36:e3:59:44:cb:4d:74:9a:
                    77:0f:53:f6:0c:d0:08:6f:a1:55:df:63:da:ac:4d:
                    7d:40:d2:4e:95:82:d0:67:52:21:65:59:42:63:30:
                    f6:37:4a:dd:f0:f4:4e:7c:95:de:1b:5f:51:a7:6f:
                    12:e6:62:f0:4b:15:46:47:0a:2b:ef:18:38:4c:a8:
                    b1:30:4e:35:39:a4:d4:e9:7c:7b:39:df:1d:1d:74:
                    d0:61:3c:4a:96:3c:80:60:de:fe:da:e5:86:ce:8c:
                    39:0c:8c:6c:6a:14:00:f8:b6:0f:8a:3d:2e:08:5a:
                    e1:b6:ed:24:b1:9e:f9:53:14:a1:4b:35:32:66:ed:
                    b2:50:d2:39:61:dc:09:ba:bc:9d:92:de:5a:86:8d:
                    df:5b:9b:7c:07:5b:71:9d:58:3b:ef:98:87:eb:a2:
                    3c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4E:82:55:62:D2:C3:97:6E:AF:C1:4C:67:A0:2F:81:01:95:4F:FE
            X509v3 Authority Key Identifier:
                keyid:8C:24:7F:FD:F1:3A:92:33:B3:CB:03:E7:F0:68:98:5E:0A:A4:F4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/323830343a343136343a3a2f33322d3438203d3e20323637343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4164::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:07:d8:a3:1c:cc:6b:2d:48:9c:b7:d8:78:43:d6:bc:bf:4d:
         ba:82:ad:10:a4:23:b4:f0:01:f9:3a:58:23:20:25:a7:ca:57:
         b8:86:7c:9a:e7:11:23:d7:e4:57:82:4e:c2:c1:4e:e2:cb:1e:
         a3:26:fa:61:2b:e5:59:47:7a:ab:ce:26:ce:32:72:bb:f2:8b:
         cf:34:d1:83:10:67:1b:d5:7c:13:3c:41:f4:93:1f:d8:9f:13:
         a5:26:aa:51:75:48:f2:ea:dc:6d:4b:a1:c4:8a:f4:d8:cb:10:
         68:6b:47:26:6d:be:c0:47:45:72:b6:6d:cf:94:57:f4:65:5a:
         16:31:bb:ff:9c:a5:a8:a5:5a:65:18:2b:47:30:b9:51:ad:94:
         d0:ad:71:e9:ef:22:dd:66:47:96:ac:8e:b4:fd:18:d4:18:5c:
         f7:2f:77:a2:d3:6d:37:4d:e4:4d:88:72:ed:bd:31:96:a3:5c:
         d3:a2:48:fb:33:0e:8b:70:37:a3:30:5f:0a:b5:3b:be:49:3b:
         e9:da:23:7e:97:0f:de:35:80:6a:11:f3:72:8d:59:9c:08:28:
         0a:a6:b8:d2:ea:3b:58:21:0f:f3:b7:4b:25:9f:2f:b8:34:d8:
         8d:7a:00:f7:87:b2:a6:0a:34:31:b1:e4:9d:9b:cd:86:24:11:
         29:8f:37:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:53 2024 by rpki-client on console-ams.rpki-client.org