Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/0/323830343a323834343a3a2f33322d3334203d3e20323633393531.roa
File:                     323830343a323834343a3a2f33322d3334203d3e20323633393531.roa (raw, json)
Hash identifier:          GoUbSrowpCnwvVd5aTrlqmvo+8k5R1OKN9HLDuvkyfc=
Subject key identifier:   10:7C:FD:39:DC:72:31:FD:05:A2:DB:7C:2B:EA:1B:2D:F6:F5:AD:2A
Certificate issuer:       /CN=6412782E54CC80849912277A375A0261FBBD2F8D
Certificate serial:       729982149EA8AC17C984F5183F78AE63C2E51B76
Authority key identifier: 64:12:78:2E:54:CC:80:84:99:12:27:7A:37:5A:02:61:FB:BD:2F:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6412782E54CC80849912277A375A0261FBBD2F8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/0/323830343a323834343a3a2f33322d3334203d3e20323633393531.roa
Signing time:             Fri 15 Dec 2023 22:28:00 +0000
ROA not before:           Fri 15 Dec 2023 22:23:00 +0000
ROA not after:            Fri 13 Dec 2024 22:28:00 +0000
asID:                     263951
IP address blocks:        2804:2844::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:99:82:14:9e:a8:ac:17:c9:84:f5:18:3f:78:ae:63:c2:e5:1b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6412782E54CC80849912277A375A0261FBBD2F8D
        Validity
            Not Before: Dec 15 22:23:00 2023 GMT
            Not After : Dec 13 22:28:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:20:0c:10:f0:cd:b7:81:7a:96:b6:9a:06:
                    7b:5f:86:64:98:b1:75:b3:17:d2:d3:f4:87:14:fc:
                    c6:dd:b2:46:29:c9:95:aa:76:f0:86:4d:25:2d:d9:
                    fb:cb:a1:c8:b6:3a:25:33:33:32:fa:e8:a2:60:cf:
                    b1:a4:51:cd:db:8c:29:95:86:7a:ea:90:c7:c7:ea:
                    26:62:5a:02:ca:5e:73:7b:e1:75:f8:fa:0b:da:a5:
                    97:18:dc:62:17:ba:10:c8:cd:c6:a6:23:2d:6e:89:
                    24:98:a9:8a:97:d3:aa:ea:f3:1c:0a:06:e6:4e:65:
                    43:61:05:60:ed:b7:92:49:8d:e3:14:0e:47:b1:3e:
                    b1:b3:dc:2b:d6:ff:fe:54:05:7a:84:97:ad:15:ee:
                    b7:e1:d6:66:91:d4:b6:0f:71:de:99:b6:fe:f2:18:
                    9a:1c:e8:b7:68:30:05:56:d7:c2:c8:02:40:27:fc:
                    a6:6c:5e:27:cb:54:4e:9c:6c:cd:cc:b4:08:90:fc:
                    13:59:8a:52:aa:79:43:3e:c0:52:3b:32:c5:13:28:
                    de:8c:99:e7:67:a2:5f:8a:61:5b:61:68:d0:76:5e:
                    f1:88:5a:25:6b:8c:c2:14:72:2a:75:f1:64:15:cb:
                    6c:2c:50:40:2a:1c:4f:fe:e3:c6:be:81:8f:d3:a6:
                    4c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7C:FD:39:DC:72:31:FD:05:A2:DB:7C:2B:EA:1B:2D:F6:F5:AD:2A
            X509v3 Authority Key Identifier:
                keyid:64:12:78:2E:54:CC:80:84:99:12:27:7A:37:5A:02:61:FB:BD:2F:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/0/6412782E54CC80849912277A375A0261FBBD2F8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6412782E54CC80849912277A375A0261FBBD2F8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/0/323830343a323834343a3a2f33322d3334203d3e20323633393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2844::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:63:b3:a4:5c:64:be:12:52:35:da:89:1b:e3:0a:80:4a:81:
         d6:a4:12:67:b6:2c:2e:e8:e9:11:61:44:26:40:e5:21:82:91:
         2c:5d:40:6d:3a:98:b2:ff:af:ec:e1:0d:4b:c3:7c:16:ae:2a:
         d6:60:6c:78:b3:08:68:c8:52:d0:00:95:e0:ff:68:dd:1e:8f:
         86:77:b6:30:9e:33:90:8e:df:45:9f:a5:ea:82:7e:8c:f7:e1:
         8c:2b:53:5b:9e:1e:1c:e9:84:dc:3e:e9:c6:5d:de:4d:0f:26:
         5e:c5:78:7e:d9:df:60:ab:fa:bb:9c:24:1e:44:53:88:b6:ee:
         b2:b4:4e:94:6c:d7:cf:81:e8:2a:1a:ea:24:88:9d:2b:a6:ce:
         92:b1:f2:0b:91:46:68:8b:33:de:5e:22:f9:08:93:c2:9b:03:
         c3:ca:ff:f7:ee:73:1f:e7:59:59:d2:da:ad:2a:37:f2:3b:8b:
         b8:5f:28:4f:63:1c:09:14:fa:42:ab:f3:18:91:14:7a:23:6d:
         88:2e:90:f5:36:c0:0f:5c:0c:15:9c:06:75:9a:94:7c:15:77:
         07:0d:4a:3b:08:8a:08:a2:8e:8d:bc:09:f4:3e:dc:9f:96:5d:
         53:40:a4:ac:f1:6d:28:f0:42:1c:dd:82:de:5c:44:0d:41:53:
         f0:cd:78:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org