Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/323830343a323433343a3a2f33322d3332203d3e20323634323038.roa
File:                     323830343a323433343a3a2f33322d3332203d3e20323634323038.roa (raw, json)
Hash identifier:          hzNXfnbYtet6dNiwvPDUQFXYNXBzfbjff50yNcLXc9Q=
Subject key identifier:   26:D0:B6:51:C1:68:93:CB:07:FA:08:90:51:F7:8B:F5:ED:47:6E:25
Certificate issuer:       /CN=AFABB070256F52FADD82E9169A2968629C59D091
Certificate serial:       7F545E59EF11B371243B460664BD5DA2E174749A
Authority key identifier: AF:AB:B0:70:25:6F:52:FA:DD:82:E9:16:9A:29:68:62:9C:59:D0:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFABB070256F52FADD82E9169A2968629C59D091.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/323830343a323433343a3a2f33322d3332203d3e20323634323038.roa
Signing time:             Wed 25 Oct 2023 14:49:49 +0000
ROA not before:           Wed 25 Oct 2023 14:44:49 +0000
ROA not after:            Wed 23 Oct 2024 14:49:49 +0000
asID:                     264208
IP address blocks:        2804:2434::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:54:5e:59:ef:11:b3:71:24:3b:46:06:64:bd:5d:a2:e1:74:74:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFABB070256F52FADD82E9169A2968629C59D091
        Validity
            Not Before: Oct 25 14:44:49 2023 GMT
            Not After : Oct 23 14:49:49 2024 GMT
        Subject: CN=26D0B651C16893CB07FA089051F78BF5ED476E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:e9:7a:79:e0:6d:84:ce:ed:3c:22:8f:ba:
                    af:c2:29:78:10:6c:5c:a7:cb:8e:7d:51:1b:88:d4:
                    ed:14:7a:a2:6d:8b:4a:04:a2:13:b6:7a:69:ea:55:
                    e4:80:77:73:6b:8b:aa:63:6f:f2:4a:d9:82:25:3a:
                    80:c0:4d:fe:ad:6c:5c:ee:5e:e6:d4:de:c1:12:72:
                    55:08:95:49:7e:f1:76:90:01:1f:8c:a4:71:48:d9:
                    1a:95:b2:3b:d2:98:a3:cd:24:53:5e:97:95:7b:21:
                    a5:7c:d9:69:7f:28:5c:5f:cd:2e:17:0b:ee:e9:f4:
                    08:a9:cb:af:7d:cf:36:8d:6f:a6:31:b7:da:dc:6b:
                    19:7f:6c:49:ae:52:63:c9:10:1c:a0:40:a9:66:ac:
                    cb:fa:df:a3:a1:0e:5e:5a:d9:19:cb:ec:ea:03:77:
                    99:df:13:f9:62:56:1e:bd:9c:82:65:21:17:8b:70:
                    a8:09:bf:32:62:1b:fb:ce:f0:a6:f5:fe:22:de:0c:
                    5b:65:2d:78:32:79:92:f1:11:56:e3:84:f6:40:9a:
                    1b:3a:c0:48:72:db:81:cf:01:76:ba:4f:cc:f1:0b:
                    a7:42:34:6b:34:a2:2b:2e:69:b7:f3:03:d9:e2:5d:
                    48:c3:6c:ae:c7:70:43:a0:73:d2:1f:2a:15:80:8b:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D0:B6:51:C1:68:93:CB:07:FA:08:90:51:F7:8B:F5:ED:47:6E:25
            X509v3 Authority Key Identifier:
                keyid:AF:AB:B0:70:25:6F:52:FA:DD:82:E9:16:9A:29:68:62:9C:59:D0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/AFABB070256F52FADD82E9169A2968629C59D091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFABB070256F52FADD82E9169A2968629C59D091.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/323830343a323433343a3a2f33322d3332203d3e20323634323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2434::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:19:91:aa:dd:74:16:9a:25:a8:c1:9f:6c:c4:ea:20:5f:fd:
         53:fb:90:d3:57:95:7c:a8:1f:f6:11:f1:f6:b2:7b:80:a5:40:
         79:f9:7e:f2:30:3c:4c:56:ec:9b:9c:69:89:f2:00:93:ee:56:
         00:ab:56:4a:52:d1:e8:e3:b5:19:ea:99:4c:6a:ee:f6:2f:6f:
         b0:3b:33:c1:d8:b0:4d:01:74:d8:bf:34:28:1e:2e:56:30:d3:
         13:ad:d8:1c:71:eb:7a:4f:92:72:ba:e8:f2:a7:fc:12:3b:fc:
         d1:6b:96:99:40:66:b4:37:14:d1:6a:4a:6f:54:c2:0d:98:54:
         06:19:6b:12:38:1a:5c:1b:ea:7e:c5:3e:79:52:a5:74:3a:83:
         ad:0a:12:e0:84:6d:cf:4c:e9:d3:50:e9:67:51:c4:ee:41:7f:
         84:89:7e:68:0a:c6:f7:2f:fa:bd:74:a9:db:ce:be:cf:cb:de:
         33:71:79:49:ad:24:55:aa:79:d0:bc:ce:7f:60:a3:e7:5f:0f:
         24:8f:a5:d6:9a:75:cb:d4:45:26:c3:e8:08:eb:b1:4c:27:5d:
         7f:7c:8d:c6:53:d2:b5:72:6c:49:40:fa:47:94:83:8e:08:12:
         ee:a3:bf:41:83:56:20:2b:d2:39:6c:33:b9:9e:4b:42:fa:d4:
         72:73:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org