Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/323830343a363062633a3a2f33322d3332203d3e20323639313837.roa
File:                     323830343a363062633a3a2f33322d3332203d3e20323639313837.roa (raw, json)
Hash identifier:          grGBW1xWBIo6eqR4NuYLf63RTUh5K4QOATcHAX+kfZ8=
Subject key identifier:   6F:14:C8:D6:A3:0F:DB:F6:12:86:C7:A7:74:D1:C6:4D:7F:94:9D:13
Certificate issuer:       /CN=0FDB72B67FE4DF33626D853A654F9E3393BEEF54
Certificate serial:       3104A7A09FEE9624BF907D41A9558D2CD48EA4A3
Authority key identifier: 0F:DB:72:B6:7F:E4:DF:33:62:6D:85:3A:65:4F:9E:33:93:BE:EF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/323830343a363062633a3a2f33322d3332203d3e20323639313837.roa
Signing time:             Wed 10 Jan 2024 15:08:58 +0000
ROA not before:           Wed 10 Jan 2024 15:03:58 +0000
ROA not after:            Wed 08 Jan 2025 15:08:58 +0000
asID:                     269187
IP address blocks:        2804:60bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:04:a7:a0:9f:ee:96:24:bf:90:7d:41:a9:55:8d:2c:d4:8e:a4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FDB72B67FE4DF33626D853A654F9E3393BEEF54
        Validity
            Not Before: Jan 10 15:03:58 2024 GMT
            Not After : Jan  8 15:08:58 2025 GMT
        Subject: CN=6F14C8D6A30FDBF61286C7A774D1C64D7F949D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e6:97:62:81:58:a7:a1:61:ec:f8:59:73:6b:
                    c7:c4:10:75:aa:86:d2:bc:61:ee:f4:b0:79:2f:f4:
                    22:18:01:86:a2:e6:ee:11:05:4c:b4:e8:2a:f1:ff:
                    59:35:38:00:a1:54:36:80:ce:74:e7:56:5b:c3:71:
                    b7:76:a6:7f:cb:16:7c:3d:b6:2a:86:f9:4c:2e:4a:
                    2f:9a:aa:0e:d3:bc:d9:7e:81:e2:c4:c6:1d:c4:74:
                    c3:88:b2:d4:cd:bf:ae:29:8b:9e:3f:98:5e:ea:2c:
                    e0:c2:c7:90:71:ad:e2:b6:9b:68:2e:c7:39:a1:8f:
                    a4:d1:d5:21:6a:cb:f7:6b:80:9c:68:94:d5:44:87:
                    57:70:56:b3:c9:45:43:98:54:bd:5a:63:72:ae:b7:
                    53:25:07:3a:6f:d4:e4:b8:8e:9d:a8:3d:a7:d3:92:
                    55:74:08:5e:be:99:b8:95:b1:b1:aa:18:a6:41:e2:
                    39:a0:7f:a0:6e:30:62:e7:38:52:ff:f6:67:79:b1:
                    e6:89:db:e5:3a:3c:a6:ab:d0:ff:2e:b6:c8:53:61:
                    91:e9:5c:ad:56:d5:f6:e1:d8:01:3b:66:45:eb:09:
                    b8:e8:83:c2:2b:4b:e9:f8:ba:a7:81:75:ac:9a:9d:
                    13:b6:e0:ea:81:8b:4c:8c:2c:2d:e3:6c:15:ff:15:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:14:C8:D6:A3:0F:DB:F6:12:86:C7:A7:74:D1:C6:4D:7F:94:9D:13
            X509v3 Authority Key Identifier:
                keyid:0F:DB:72:B6:7F:E4:DF:33:62:6D:85:3A:65:4F:9E:33:93:BE:EF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/323830343a363062633a3a2f33322d3332203d3e20323639313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:59:ab:13:8e:d2:1c:45:a8:16:f9:90:16:d5:1d:4c:00:
         30:05:6c:6a:db:ca:e3:6e:97:47:b5:89:df:7f:f5:09:b2:c8:
         97:f4:65:2a:b8:99:d6:c9:7f:f4:52:2d:f9:58:e7:3b:19:03:
         e8:a3:d8:ca:d2:aa:35:23:0d:1b:83:01:89:f3:f9:31:ed:15:
         72:97:58:f6:fd:77:27:72:61:e0:4c:9e:13:c8:11:f4:17:f0:
         0c:56:0c:35:d2:6e:be:9b:c6:4e:8b:51:0b:12:37:35:60:7c:
         ea:bb:9c:b2:dc:2f:d5:9f:51:08:fc:1d:57:b6:fc:1b:05:dc:
         d4:47:d7:69:cb:78:91:1e:c2:a6:f0:c7:67:57:0f:bb:6b:bf:
         9d:04:1d:f8:60:9d:83:29:3a:41:85:20:5a:33:0d:f3:84:05:
         06:88:29:c2:c4:ae:3f:c7:e5:9b:9f:db:76:de:b0:5a:ea:31:
         3a:c8:a2:86:58:5e:4d:d7:0c:38:75:b1:f5:af:c1:74:0e:42:
         3b:9c:89:c4:fa:10:8e:0e:54:0d:ed:ee:3e:79:60:bc:cd:8c:
         e2:17:61:ad:b3:bf:37:ba:ff:ca:d7:f3:80:2e:99:70:ad:8f:
         e3:79:4a:57:82:a6:2d:75:cc:10:e4:07:57:51:60:54:a0:ca:
         db:20:8b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org