Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/323830343a373163343a383030303a3a2f33332d3333203d3e20323730383130.roa
File:                     323830343a373163343a383030303a3a2f33332d3333203d3e20323730383130.roa (raw, json)
Hash identifier:          YM9e5x1rMxryyOvDG6l3lBE7wLUDl+5GKhppaDWvMY8=
Subject key identifier:   0F:86:1C:1C:CB:4C:CE:2D:3D:B1:22:DB:3F:4D:5F:2C:59:6A:A0:E8
Certificate issuer:       /CN=AC5F91766846C4C6154EEF497DA9B6A46584AEB3
Certificate serial:       47E44F510E4406517486B17A87F05DC57FBE5072
Authority key identifier: AC:5F:91:76:68:46:C4:C6:15:4E:EF:49:7D:A9:B6:A4:65:84:AE:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5F91766846C4C6154EEF497DA9B6A46584AEB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/323830343a373163343a383030303a3a2f33332d3333203d3e20323730383130.roa
Signing time:             Tue 19 Mar 2024 17:07:38 +0000
ROA not before:           Tue 19 Mar 2024 17:02:38 +0000
ROA not after:            Tue 18 Mar 2025 17:07:38 +0000
asID:                     270810
IP address blocks:        2804:71c4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e4:4f:51:0e:44:06:51:74:86:b1:7a:87:f0:5d:c5:7f:be:50:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC5F91766846C4C6154EEF497DA9B6A46584AEB3
        Validity
            Not Before: Mar 19 17:02:38 2024 GMT
            Not After : Mar 18 17:07:38 2025 GMT
        Subject: CN=0F861C1CCB4CCE2D3DB122DB3F4D5F2C596AA0E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:52:dd:1f:e5:c8:f1:c1:3e:7e:cc:ce:a2:
                    98:60:2e:d4:26:84:bd:ca:11:a2:df:78:3b:ef:4d:
                    42:51:65:d7:f9:ff:34:d8:45:4d:fe:a4:be:0f:f2:
                    7c:ac:c6:5b:5a:76:6d:6c:61:e5:9a:13:c4:c2:a9:
                    46:33:e6:85:6c:0d:a4:1c:e6:f5:08:69:e9:69:e4:
                    de:b1:df:85:b7:67:90:a3:33:02:6e:5f:18:17:c6:
                    e6:89:b7:bd:5f:ff:c3:e2:f8:5a:2f:50:b3:bd:ff:
                    bb:7e:88:5b:31:3e:c0:f7:eb:67:22:06:95:4e:4d:
                    bb:a9:c6:9f:71:8a:df:a8:72:92:3f:fb:de:8c:c5:
                    7a:33:53:8a:a6:86:e4:17:bb:b3:51:8f:90:9b:b7:
                    7d:62:ce:1d:00:05:5b:da:11:df:0b:0d:61:e1:64:
                    97:1b:fb:86:dd:58:de:49:33:99:7e:3f:06:9b:4c:
                    b5:63:7b:c3:52:2c:b9:e1:1f:a7:e8:81:27:66:f4:
                    68:99:b8:2f:39:a9:e0:58:42:d9:13:3d:f8:0a:fb:
                    cb:ab:e1:d1:22:64:38:4c:1b:73:a4:71:7b:90:69:
                    74:78:1b:95:27:b5:01:c5:5c:e4:8f:27:e8:60:0e:
                    97:28:cf:dd:3f:b9:67:13:a0:83:9d:d9:6e:38:ef:
                    cb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:86:1C:1C:CB:4C:CE:2D:3D:B1:22:DB:3F:4D:5F:2C:59:6A:A0:E8
            X509v3 Authority Key Identifier:
                keyid:AC:5F:91:76:68:46:C4:C6:15:4E:EF:49:7D:A9:B6:A4:65:84:AE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/AC5F91766846C4C6154EEF497DA9B6A46584AEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5F91766846C4C6154EEF497DA9B6A46584AEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/323830343a373163343a383030303a3a2f33332d3333203d3e20323730383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:9c:40:55:45:c3:09:40:b4:61:71:53:0e:f9:1b:01:db:
         c7:6f:29:0a:ec:1c:c2:b6:20:bb:3a:0d:1e:5f:83:a4:9c:10:
         c7:cf:e7:31:6b:10:ef:9c:82:e2:de:7a:ff:75:0c:41:57:07:
         9f:3c:0a:ae:e9:2f:79:f1:9a:8a:47:f6:f1:ba:73:f0:7f:b1:
         ab:3d:0a:7c:6c:50:63:99:90:68:94:45:27:e0:57:ec:11:97:
         aa:d1:4e:32:bf:02:cc:16:d8:c2:94:6a:4f:83:01:8b:17:3e:
         92:9a:8a:12:8c:61:34:ad:60:f1:4f:ed:25:8b:01:ef:4c:c7:
         8d:19:9c:2d:a7:ec:c6:eb:cd:7e:c7:94:22:69:bf:d0:6c:8c:
         d9:ea:78:b0:a8:70:81:26:ef:63:1b:09:54:bd:0b:60:23:73:
         f7:48:01:05:57:25:6d:bb:20:5c:19:96:6d:de:5e:3c:95:0e:
         d5:13:6b:f5:55:02:65:49:45:d9:b1:0f:a5:24:13:0c:1f:8b:
         d8:ed:05:d9:66:04:03:b7:65:73:28:5b:55:88:3a:ce:ac:3e:
         4d:c6:5b:ed:d7:41:42:7b:39:c1:a8:12:ab:ec:ed:2f:c6:28:
         bc:a8:73:ab:a9:41:37:ad:5f:10:8d:8b:f6:07:05:14:d8:6d:
         57:c2:11:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org