Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/323830343a363062633a3a2f33332d3333203d3e20323639313837.roa
File:                     323830343a363062633a3a2f33332d3333203d3e20323639313837.roa (raw, json)
Hash identifier:          S2D29w3/9wiGBHQDNJ8Y4cVX7xERx+d5Kj2cwZsLMsg=
Subject key identifier:   8E:46:59:5E:E1:8D:4B:5B:D3:33:AC:1A:25:A9:C6:28:19:71:AD:E4
Certificate issuer:       /CN=0FDB72B67FE4DF33626D853A654F9E3393BEEF54
Certificate serial:       7A94E79F9B65A45628B3F32251B5969B8EC8DF80
Authority key identifier: 0F:DB:72:B6:7F:E4:DF:33:62:6D:85:3A:65:4F:9E:33:93:BE:EF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/323830343a363062633a3a2f33332d3333203d3e20323639313837.roa
Signing time:             Wed 10 Jan 2024 15:08:58 +0000
ROA not before:           Wed 10 Jan 2024 15:03:58 +0000
ROA not after:            Wed 08 Jan 2025 15:08:58 +0000
asID:                     269187
IP address blocks:        2804:60bc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:94:e7:9f:9b:65:a4:56:28:b3:f3:22:51:b5:96:9b:8e:c8:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FDB72B67FE4DF33626D853A654F9E3393BEEF54
        Validity
            Not Before: Jan 10 15:03:58 2024 GMT
            Not After : Jan  8 15:08:58 2025 GMT
        Subject: CN=8E46595EE18D4B5BD333AC1A25A9C6281971ADE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:17:ca:35:f7:ad:19:fb:53:84:b5:30:03:
                    a6:bf:db:fe:7c:21:26:7c:c1:6c:38:20:eb:17:76:
                    b8:fc:b9:5b:c1:e5:79:86:ad:52:05:16:5a:42:36:
                    09:cb:65:1d:79:eb:cd:3e:77:4b:88:69:23:d6:53:
                    1d:be:3b:a4:ca:50:5a:16:74:27:c9:be:09:0a:fb:
                    77:41:76:52:4f:46:21:7c:66:50:5e:27:28:b8:dc:
                    ad:f0:63:1d:55:e1:a3:6e:cc:16:96:cb:b8:e6:3a:
                    83:ae:2f:4d:2b:33:c9:05:a6:ae:fe:07:eb:7d:b1:
                    28:6d:7a:15:92:35:9b:1a:0c:e5:86:16:04:92:a9:
                    c4:27:a2:79:2e:bd:db:83:6c:50:bb:1f:c1:b6:61:
                    51:72:a5:88:ae:bb:bf:11:f8:15:9c:96:1c:b3:67:
                    e3:6e:51:53:e1:88:c3:73:2c:aa:22:6e:04:93:5f:
                    a3:6d:66:35:e0:c5:b8:6f:9f:b6:27:49:77:bb:73:
                    6f:ee:31:f0:72:bd:64:bc:b0:58:21:a2:7d:a9:93:
                    24:15:e2:eb:a1:b5:4a:c4:16:a0:53:4c:83:70:3a:
                    8a:74:ee:32:e3:0c:5a:2e:ae:04:a1:84:f5:c9:49:
                    86:5c:d7:96:84:56:a9:3c:5c:9a:b3:56:a8:e0:44:
                    22:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:46:59:5E:E1:8D:4B:5B:D3:33:AC:1A:25:A9:C6:28:19:71:AD:E4
            X509v3 Authority Key Identifier:
                keyid:0F:DB:72:B6:7F:E4:DF:33:62:6D:85:3A:65:4F:9E:33:93:BE:EF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/323830343a363062633a3a2f33332d3333203d3e20323639313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60bc::/33

    Signature Algorithm: sha256WithRSAEncryption
         27:cb:ad:84:ae:ec:3e:9c:d7:66:47:37:45:84:df:b3:6f:78:
         7b:9e:7c:5b:85:35:a9:f7:27:0f:84:2c:1e:7c:75:36:3e:4b:
         76:98:50:32:0e:2a:a1:cc:df:aa:2e:a0:59:d0:0e:c9:ac:91:
         03:a4:24:30:58:6a:47:dc:2f:bf:92:cb:94:b3:27:ec:2b:d8:
         ac:22:da:a9:fd:52:59:13:de:04:a3:4f:e2:fa:0a:26:b5:9f:
         5b:55:74:f4:03:42:b2:5c:7c:4a:c4:f9:6c:df:c4:6e:cc:a1:
         b8:04:65:7f:a4:10:01:f5:57:27:84:f1:fc:99:ec:9a:ed:1b:
         17:56:dd:99:77:85:be:27:3e:9c:a0:ce:74:25:bc:0c:ca:f3:
         02:e9:e1:2a:3d:d2:df:94:84:39:6b:22:7c:c3:65:85:16:2e:
         11:75:6f:4e:0c:8e:42:1d:96:78:78:b4:a3:e4:09:51:87:0f:
         38:43:2c:73:55:36:79:26:e0:8a:cf:9a:2a:d7:9c:46:ce:12:
         eb:1a:64:7a:b1:fa:43:1a:a0:b2:5a:44:12:08:fa:d3:0e:51:
         36:60:83:d9:aa:c0:3a:05:53:ef:a8:ff:9c:3c:5b:50:fb:98:
         83:ff:86:93:89:26:d5:20:a1:7f:e8:03:43:64:df:08:8a:1c:
         d3:69:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org