Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d3437203d3e20323634313935.roa
File:                     323830343a323430303a3a2f33322d3437203d3e20323634313935.roa (raw, json)
Hash identifier:          aI+gYQJpzdZmqeHYZ7LFhtWXZLLzDijPrLrOPruzPOE=
Subject key identifier:   BF:7B:9C:93:F1:14:65:EA:03:61:BF:C1:81:13:75:49:6D:2A:19:AF
Certificate issuer:       /CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
Certificate serial:       6F5C56A5BF99516096D1C613AD707DA50B5702D4
Authority key identifier: 4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d3437203d3e20323634313935.roa
Signing time:             Mon 10 Jul 2023 23:53:50 +0000
ROA not before:           Mon 10 Jul 2023 23:48:50 +0000
ROA not after:            Mon 08 Jul 2024 23:53:50 +0000
asID:                     264195
IP address blocks:        2804:2400::/32 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5c:56:a5:bf:99:51:60:96:d1:c6:13:ad:70:7d:a5:0b:57:02:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
        Validity
            Not Before: Jul 10 23:48:50 2023 GMT
            Not After : Jul  8 23:53:50 2024 GMT
        Subject: CN=BF7B9C93F11465EA0361BFC1811375496D2A19AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:2a:81:8d:77:66:ec:fe:01:9a:5a:34:57:
                    e9:5a:a0:6f:3c:3f:bc:3c:5b:33:34:ec:4b:a6:7e:
                    47:71:59:5c:23:41:e7:07:ab:25:d1:5f:39:df:0a:
                    ca:c5:d3:1c:ef:13:e2:8b:f2:a6:82:5e:b3:7b:f1:
                    74:b2:bc:39:ed:5e:75:92:0f:a1:01:25:b0:17:6d:
                    6d:a3:13:f3:e0:bc:84:7f:7b:03:bf:c2:ad:93:0f:
                    d3:c5:52:22:f3:35:28:66:ef:f5:6d:91:0f:88:9e:
                    a4:44:ac:49:d0:7c:6a:55:13:25:29:00:6a:1d:82:
                    b8:be:19:fd:5c:68:7b:39:cd:4c:40:a5:0d:61:23:
                    60:94:1c:a4:22:da:98:17:59:40:e3:22:38:1d:51:
                    ce:a8:55:4c:59:92:39:c1:ee:51:1c:5e:38:da:32:
                    df:e7:77:65:2a:47:37:1f:be:b1:75:08:73:2b:61:
                    1b:11:a3:c9:b9:85:d6:15:ce:aa:80:f7:e8:00:85:
                    ec:0a:e8:66:45:5a:bd:40:05:97:bf:16:aa:f7:dd:
                    d2:79:c8:05:3f:54:e1:2c:64:e0:d5:15:0f:1a:c1:
                    ee:32:b4:c5:dd:d1:5d:c2:5c:4f:bb:8f:8d:a8:06:
                    aa:d5:d1:43:fb:47:f1:ec:90:b9:15:16:21:27:f6:
                    76:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7B:9C:93:F1:14:65:EA:03:61:BF:C1:81:13:75:49:6D:2A:19:AF
            X509v3 Authority Key Identifier:
                keyid:4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d3437203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2400::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:0c:8c:8f:23:22:5e:91:b8:aa:68:f5:49:96:91:6b:9a:4f:
         3d:25:b9:bd:c4:58:b7:2d:ca:8e:b2:4e:75:1a:3b:fd:d7:fc:
         93:35:e2:d9:69:b0:af:1d:5e:d3:1e:6d:31:b3:5c:df:75:71:
         ba:f6:86:8f:d1:29:19:fc:df:23:15:67:ca:bc:64:a9:1e:29:
         9b:8d:ab:4a:af:46:7b:2f:66:27:54:62:45:97:3f:3c:99:92:
         bb:e7:89:f2:60:9a:5b:fc:00:8f:d9:4f:37:01:d3:f5:eb:30:
         77:06:7d:d5:7b:5f:d7:e7:3f:bc:b7:2e:f0:4c:af:06:f4:1a:
         2f:47:87:c7:8e:87:82:70:ac:e3:4c:ba:79:d5:60:bf:73:c6:
         63:05:ce:3c:bb:bf:1d:0a:d4:b9:bc:ab:68:fa:88:4f:fe:4b:
         ef:97:02:6d:58:c3:43:3c:74:cf:4f:23:e5:f6:df:72:57:6f:
         ed:71:da:c3:8c:e2:9c:20:48:20:c7:a2:5e:62:49:37:fd:95:
         56:e6:23:a8:41:26:84:0e:f1:e0:a6:61:99:ef:a8:97:4e:cf:
         9f:ec:66:db:12:a4:ce:a3:32:bb:9b:dd:fb:b5:46:e4:ed:1c:
         fb:ca:33:df:f2:e4:ca:3b:11:47:fd:18:ad:69:d1:e8:27:2b:
         b7:c6:6a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org