Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/323830343a363866343a343030303a3a2f33342d3334203d3e20323730323339.roa
File:                     323830343a363866343a343030303a3a2f33342d3334203d3e20323730323339.roa (raw, json)
Hash identifier:          /2anzTfiIql7pWqwAGE5yBTGTbrFT5TAz9ld7xHMp3s=
Subject key identifier:   DB:03:D5:97:1D:AC:1F:20:C9:9E:85:75:61:04:95:39:FC:AF:54:07
Certificate issuer:       /CN=A54C5623938E2D203BB659007A6EB9AD482A4AE0
Certificate serial:       39546D736D01D57CE7D05AC73A77A4F40F6B95CE
Authority key identifier: A5:4C:56:23:93:8E:2D:20:3B:B6:59:00:7A:6E:B9:AD:48:2A:4A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/323830343a363866343a343030303a3a2f33342d3334203d3e20323730323339.roa
Signing time:             Thu 30 Nov 2023 01:18:42 +0000
ROA not before:           Thu 30 Nov 2023 01:13:42 +0000
ROA not after:            Thu 28 Nov 2024 01:18:42 +0000
asID:                     270239
IP address blocks:        2804:68f4:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:54:6d:73:6d:01:d5:7c:e7:d0:5a:c7:3a:77:a4:f4:0f:6b:95:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A54C5623938E2D203BB659007A6EB9AD482A4AE0
        Validity
            Not Before: Nov 30 01:13:42 2023 GMT
            Not After : Nov 28 01:18:42 2024 GMT
        Subject: CN=DB03D5971DAC1F20C99E857561049539FCAF5407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:61:8e:c7:8e:35:f4:c8:5f:37:89:53:6f:
                    99:85:5b:0a:e6:47:c8:92:e7:86:d0:ef:fb:a8:83:
                    cc:3a:14:4c:ca:00:54:a4:b5:46:c6:87:a4:06:8e:
                    1a:90:a0:f4:2a:4c:63:25:57:1a:5e:df:9a:c9:22:
                    ff:e4:96:f8:cf:d7:97:30:38:c8:82:ff:30:20:b0:
                    28:96:fb:5b:f0:8d:84:56:b5:3e:5d:70:d0:e3:7a:
                    61:4d:6a:a5:f0:ae:de:d5:4d:a9:b4:44:45:48:8e:
                    71:bb:d3:be:28:23:bf:d9:e8:b3:b1:f7:87:db:40:
                    7e:d3:28:ba:a8:8e:3a:1a:19:e6:27:e8:f0:2d:47:
                    a0:65:89:ec:45:6c:d3:20:1a:30:55:48:f3:00:58:
                    d8:70:9a:a9:8f:63:4b:98:fb:59:b7:44:79:36:da:
                    5d:2d:df:7d:f9:6c:24:79:34:81:4c:48:6a:20:d7:
                    2e:6a:bc:b8:57:90:02:3a:f0:d7:0e:d6:0d:a8:0f:
                    58:99:c0:10:db:c2:c4:74:26:5c:f3:cd:b2:75:0e:
                    d5:6d:e0:cc:5b:0d:0f:3f:7c:d5:a4:f9:59:be:bf:
                    b6:14:15:61:ed:fb:8e:b6:1a:b8:f8:ad:9a:d1:bd:
                    27:22:82:69:fd:35:6a:86:1e:b7:a5:fb:7f:a3:01:
                    53:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:03:D5:97:1D:AC:1F:20:C9:9E:85:75:61:04:95:39:FC:AF:54:07
            X509v3 Authority Key Identifier:
                keyid:A5:4C:56:23:93:8E:2D:20:3B:B6:59:00:7A:6E:B9:AD:48:2A:4A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/323830343a363866343a343030303a3a2f33342d3334203d3e20323730323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68f4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:e6:1d:a5:fe:ef:2d:04:c2:28:57:d8:97:82:dd:9b:97:
         8f:6e:68:b0:b8:2f:26:e5:30:da:56:e6:6b:ad:d2:d7:cb:e3:
         63:1b:8d:76:77:0d:91:44:57:3e:7d:39:b8:44:4f:c5:cc:93:
         c5:ac:5f:46:79:9e:7a:cd:4c:40:1e:2a:e1:25:80:11:0f:0a:
         07:65:e8:9e:2a:60:a3:7f:9c:65:95:98:e0:8c:52:ad:43:56:
         7d:76:5b:ab:27:e3:12:67:3d:a4:0f:2c:ba:33:f5:69:28:cb:
         25:89:47:5c:db:b1:3e:80:ec:67:08:a5:32:9c:7d:ba:f2:c7:
         63:55:8f:ce:2b:f2:7a:c8:c9:60:de:33:0a:b8:bc:d3:68:e8:
         ba:d2:94:7e:e3:aa:25:1e:62:11:7d:8d:ec:57:23:36:ff:19:
         dc:4b:7b:ca:5d:ec:b2:88:df:43:43:6d:f8:b2:2f:1a:16:82:
         61:22:1a:35:d0:41:f6:7e:26:81:c0:84:9e:87:53:c3:8d:73:
         1a:5c:fd:21:cd:24:e4:02:c6:96:3e:73:39:71:49:00:74:6f:
         72:6e:a0:6f:8a:80:cb:20:df:28:21:1f:8d:6f:3f:29:e9:90:
         15:c1:1d:ba:65:51:e8:df:73:e6:2c:07:57:0b:8f:5b:e5:88:
         1d:9e:77:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org