Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/323830343a376235343a376666663a3a2f34382d3438203d3e20323731343235.roa
File:                     323830343a376235343a376666663a3a2f34382d3438203d3e20323731343235.roa (raw, json)
Hash identifier:          bv8IV+0VqLvajUigwUR/3ZLvyvaz6bFeED6v3UPRWsk=
Subject key identifier:   39:04:5A:38:C7:5D:E5:20:93:12:12:AF:16:0B:02:78:4F:E2:58:DB
Certificate issuer:       /CN=3B37C2C485106C1192DC4462E27FBBA779AA590B
Certificate serial:       45BA421018C4856E136FF6AAE434C5E6E039E4D1
Authority key identifier: 3B:37:C2:C4:85:10:6C:11:92:DC:44:62:E2:7F:BB:A7:79:AA:59:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B37C2C485106C1192DC4462E27FBBA779AA590B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/323830343a376235343a376666663a3a2f34382d3438203d3e20323731343235.roa
Signing time:             Sun 27 Aug 2023 14:09:42 +0000
ROA not before:           Sun 27 Aug 2023 14:04:42 +0000
ROA not after:            Sun 25 Aug 2024 14:09:42 +0000
asID:                     271425
IP address blocks:        2804:7b54:7fff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ba:42:10:18:c4:85:6e:13:6f:f6:aa:e4:34:c5:e6:e0:39:e4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B37C2C485106C1192DC4462E27FBBA779AA590B
        Validity
            Not Before: Aug 27 14:04:42 2023 GMT
            Not After : Aug 25 14:09:42 2024 GMT
        Subject: CN=39045A38C75DE520931212AF160B02784FE258DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:39:7e:f6:c1:f1:96:fa:4b:07:96:ac:97:8e:
                    ad:00:e2:38:9f:e8:ce:5b:76:77:20:0a:ad:e2:b8:
                    e8:57:0e:85:72:38:50:8c:02:7a:20:5e:4b:a4:90:
                    7f:e1:0b:df:af:c3:3c:6a:16:30:0e:34:0a:42:47:
                    1d:ce:a2:36:49:44:fd:7b:51:82:c9:7a:75:b9:ba:
                    3c:8c:2f:4f:95:52:6e:ad:99:3d:5a:57:88:0f:92:
                    d8:0f:52:4b:cc:4c:ef:e4:51:a4:35:39:41:34:79:
                    a2:0c:a7:9a:3a:d2:38:d5:50:2b:ca:e1:cf:78:88:
                    00:e9:49:9e:cb:df:f6:8b:54:1b:2c:51:28:93:06:
                    9f:46:3c:f3:67:a5:f1:55:f9:e5:0c:a2:da:89:96:
                    9b:b6:05:3f:fe:07:93:b3:e3:d5:7a:b3:65:f9:d5:
                    94:07:92:9d:2e:82:1b:31:2c:fd:4b:89:9a:66:f3:
                    1c:6f:2a:20:39:69:a3:36:78:e7:76:37:bd:f7:e0:
                    17:65:2e:6c:93:ba:2a:1a:03:2d:64:ac:49:33:63:
                    7f:84:a6:03:85:0d:12:ed:fe:2f:e3:8f:b9:10:02:
                    ec:12:c4:ce:bd:47:b3:19:d7:91:be:89:fe:e2:99:
                    b9:3a:5e:1d:cb:bb:0a:f7:48:48:a3:bd:bd:e2:11:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:04:5A:38:C7:5D:E5:20:93:12:12:AF:16:0B:02:78:4F:E2:58:DB
            X509v3 Authority Key Identifier:
                keyid:3B:37:C2:C4:85:10:6C:11:92:DC:44:62:E2:7F:BB:A7:79:AA:59:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3B37C2C485106C1192DC4462E27FBBA779AA590B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B37C2C485106C1192DC4462E27FBBA779AA590B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/323830343a376235343a376666663a3a2f34382d3438203d3e20323731343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b54:7fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:59:84:9d:77:4f:94:f8:9e:c6:66:1e:01:a1:51:59:69:dc:
         64:12:b0:e5:46:f3:37:94:ee:1d:e9:6d:91:81:c1:03:da:9c:
         29:6f:2b:bc:dd:99:5a:48:99:82:b3:7a:c0:84:4b:48:79:06:
         54:48:56:b2:0a:95:89:06:52:2a:d1:1a:7e:b2:f8:3f:9f:dc:
         c3:e5:f4:05:92:c8:3b:98:c7:73:69:3c:5e:a0:d3:7e:f7:10:
         b0:b6:ea:f9:8e:b2:79:18:d6:3c:d5:d2:23:6b:c7:8b:d1:0f:
         80:da:8e:3f:2c:9a:f7:b4:9b:e3:c7:b4:3e:6f:41:bb:d5:bb:
         c9:5a:07:b2:dd:7a:a0:9c:b8:57:91:87:7a:86:b9:d4:a6:53:
         e8:15:90:38:af:f6:9c:0b:b3:24:ed:ba:4e:b6:e8:ac:2d:e2:
         7b:b8:0a:3e:ba:d4:20:63:3f:de:89:c7:c6:6e:18:68:95:4a:
         e1:67:63:23:ff:64:9e:87:29:e9:fe:a8:1b:a1:4a:37:3f:ed:
         82:d6:2b:c9:9f:7a:b0:b1:d3:14:2e:7e:41:ef:1f:f7:23:6c:
         b6:86:8b:6f:cb:79:25:a6:ab:87:37:c5:73:12:df:4b:ef:4f:
         9e:3a:60:ba:3c:ed:2d:b4:c0:04:67:89:1c:2e:3e:79:cc:6b:
         55:99:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:53 2024 by rpki-client on console-ams.rpki-client.org