Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/323830343a363866343a633030303a3a2f33342d3334203d3e20323730323339.roa
File:                     323830343a363866343a633030303a3a2f33342d3334203d3e20323730323339.roa (raw, json)
Hash identifier:          Dk+EprC7TYe+kJl6z0gDFDktLrsr9Wy5bRTAHTr65iU=
Subject key identifier:   89:A3:A4:55:DC:9C:4D:3F:D0:FC:D9:9F:A1:C7:11:F3:90:4F:B7:D8
Certificate issuer:       /CN=A54C5623938E2D203BB659007A6EB9AD482A4AE0
Certificate serial:       35B82914F28C8CB466A1E8BED397D5418675B2E6
Authority key identifier: A5:4C:56:23:93:8E:2D:20:3B:B6:59:00:7A:6E:B9:AD:48:2A:4A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/323830343a363866343a633030303a3a2f33342d3334203d3e20323730323339.roa
Signing time:             Thu 30 Nov 2023 01:18:42 +0000
ROA not before:           Thu 30 Nov 2023 01:13:42 +0000
ROA not after:            Thu 28 Nov 2024 01:18:42 +0000
asID:                     270239
IP address blocks:        2804:68f4:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b8:29:14:f2:8c:8c:b4:66:a1:e8:be:d3:97:d5:41:86:75:b2:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A54C5623938E2D203BB659007A6EB9AD482A4AE0
        Validity
            Not Before: Nov 30 01:13:42 2023 GMT
            Not After : Nov 28 01:18:42 2024 GMT
        Subject: CN=89A3A455DC9C4D3FD0FCD99FA1C711F3904FB7D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:40:38:a6:8a:92:07:47:77:5d:58:ea:6a:a5:
                    97:25:52:cc:18:d0:21:3b:23:63:3c:19:b6:b0:2a:
                    a1:f8:43:98:0c:aa:9b:a5:f0:5c:37:82:74:f2:e9:
                    70:8b:5a:5f:4e:b2:3d:d1:e2:be:9d:54:89:89:e4:
                    44:9e:5f:d2:b6:19:9c:61:82:f2:ee:c4:4b:e3:aa:
                    ae:c5:de:bc:40:9a:54:28:f2:65:42:bb:ff:7d:bb:
                    0f:51:d7:be:14:3e:16:b8:c1:97:8e:f8:18:9c:ab:
                    1b:e7:b6:41:ba:94:1d:a5:0f:f7:e6:ab:8e:b0:36:
                    2d:88:eb:ff:f6:f9:01:a3:19:1d:b8:2b:27:db:0a:
                    8b:de:e0:b8:3d:3c:37:8a:9a:27:ef:97:85:91:25:
                    ac:b0:8a:88:29:72:f8:44:0f:0e:fa:9c:e0:24:13:
                    fa:1e:2c:28:46:0e:2e:a4:24:6d:05:3d:34:c3:aa:
                    05:58:ed:51:bd:33:eb:0f:02:15:33:3a:9d:1a:b6:
                    7c:e2:09:f9:03:56:3a:cf:ed:a7:1f:07:06:9d:82:
                    ba:fb:a5:60:7c:cd:94:06:aa:62:90:62:52:d5:b7:
                    a9:57:86:da:51:b9:c7:24:dd:e8:89:1f:72:3e:f8:
                    75:5b:5d:a4:ec:33:e4:fd:14:a6:5c:8c:0c:f1:bf:
                    fe:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A3:A4:55:DC:9C:4D:3F:D0:FC:D9:9F:A1:C7:11:F3:90:4F:B7:D8
            X509v3 Authority Key Identifier:
                keyid:A5:4C:56:23:93:8E:2D:20:3B:B6:59:00:7A:6E:B9:AD:48:2A:4A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/323830343a363866343a633030303a3a2f33342d3334203d3e20323730323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68f4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:59:5b:c1:af:82:75:7d:d0:f9:72:b7:df:28:b1:16:57:
         bc:6d:01:43:c3:84:54:65:ec:77:1a:78:b9:20:c8:dd:1d:51:
         81:7a:70:79:c8:da:5a:20:f2:d8:c6:c5:c9:1a:af:75:ca:e7:
         c9:36:40:8a:66:17:4a:a4:7e:6a:54:a5:00:53:83:c2:07:1a:
         d9:31:9c:d3:8e:4f:8e:a1:80:db:f3:34:ea:79:39:b8:c0:ff:
         ad:4f:c1:dd:99:60:e6:05:e2:ca:63:83:55:b0:36:62:25:ad:
         df:04:ba:dc:72:f9:3d:02:f1:05:fb:53:a6:40:d4:5f:22:15:
         9d:13:9f:30:d2:4f:4a:48:6c:14:49:f7:e4:53:a7:fa:7d:4f:
         74:39:3a:d7:b9:ee:31:11:2a:cc:96:ca:02:82:5a:0c:4a:94:
         bb:aa:39:95:cd:10:be:e7:3d:a1:10:4a:e8:91:b8:a5:f7:ef:
         aa:87:46:1f:9a:c0:cb:dc:42:5a:d0:ac:d1:f4:de:10:ea:76:
         50:86:16:b0:20:80:8e:17:3f:d8:be:c7:a3:5a:39:7b:4e:51:
         09:dc:bc:be:46:43:c4:0f:e4:62:27:3e:7a:73:e9:b0:b7:0a:
         fb:78:ef:59:77:16:87:f7:98:1c:05:bb:a8:c9:52:58:47:cb:
         70:bc:8a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org