Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a633030303a3a2f33342d3334203d3e20323634313935.roa
File:                     323830343a323430303a633030303a3a2f33342d3334203d3e20323634313935.roa (raw, json)
Hash identifier:          kwMYDmEGO6ejg4nf4HkYAOkGCLjKdI+9CLIU+iYXox8=
Subject key identifier:   A4:E6:0F:34:C7:0B:4B:A5:7E:B3:80:77:49:D8:4C:E7:AA:29:0D:32
Certificate issuer:       /CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
Certificate serial:       6F6DFB4C13B30A1D280D3F12234045553443EAAA
Authority key identifier: 4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a633030303a3a2f33342d3334203d3e20323634313935.roa
Signing time:             Thu 13 Jul 2023 18:04:19 +0000
ROA not before:           Thu 13 Jul 2023 17:59:19 +0000
ROA not after:            Thu 11 Jul 2024 18:04:19 +0000
asID:                     264195
IP address blocks:        2804:2400:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6d:fb:4c:13:b3:0a:1d:28:0d:3f:12:23:40:45:55:34:43:ea:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
        Validity
            Not Before: Jul 13 17:59:19 2023 GMT
            Not After : Jul 11 18:04:19 2024 GMT
        Subject: CN=A4E60F34C70B4BA57EB3807749D84CE7AA290D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:b5:1b:e9:03:11:a3:61:b1:1e:ac:45:51:
                    04:b3:6e:7e:4b:11:d8:b3:37:86:22:33:1f:aa:53:
                    3e:d1:5b:59:d1:a1:0a:ab:7d:34:59:5e:b8:b6:33:
                    e7:fb:86:e2:66:c5:92:37:48:34:d8:0c:55:87:bc:
                    50:87:2f:9d:28:f0:46:f5:b1:45:83:91:76:85:81:
                    93:d0:34:8e:8f:45:08:06:eb:19:af:bb:24:76:fc:
                    63:99:5c:0f:b9:3d:36:c4:56:1b:59:ac:18:c8:73:
                    f9:e0:ce:8b:46:a9:f0:94:ee:2a:fe:16:ff:74:6f:
                    e2:47:2e:65:79:94:f4:57:0b:03:29:ba:99:15:fd:
                    f8:33:c5:e3:c8:b7:23:fa:03:4b:7b:ba:da:90:4a:
                    5b:c8:ce:34:26:7a:2a:7c:63:f8:58:74:d5:d1:59:
                    7c:aa:42:ee:83:30:c7:fe:b3:23:d1:15:1d:74:18:
                    d6:03:c0:8a:00:cf:e9:e9:00:8a:cd:32:f5:de:7c:
                    2a:d4:63:82:72:cb:d8:b4:d3:c2:a5:23:64:90:21:
                    9b:7a:15:8c:dd:47:75:fb:b7:9f:43:43:69:08:9d:
                    6d:f3:48:c9:d9:5c:24:03:5c:52:25:54:ec:68:02:
                    72:3c:81:a5:54:f7:37:76:0f:3e:59:7b:ea:59:5a:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E6:0F:34:C7:0B:4B:A5:7E:B3:80:77:49:D8:4C:E7:AA:29:0D:32
            X509v3 Authority Key Identifier:
                keyid:4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a633030303a3a2f33342d3334203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2400:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:30:6b:f1:94:41:1f:9a:bf:1a:5a:67:7a:e4:66:ea:4b:80:
         bf:31:da:65:1d:5e:dc:8c:af:73:93:fb:9d:71:b0:fb:ac:6f:
         4f:96:c1:93:e7:e0:f3:35:59:42:a4:6d:a3:d4:8a:c9:ce:42:
         9e:0b:0c:bd:2a:a4:79:d1:0b:90:28:39:1d:6f:b9:99:a0:30:
         a7:4b:3a:bd:6c:24:ba:26:a9:bd:ce:cb:6c:29:08:c5:08:1a:
         08:2c:33:c1:f7:40:fc:26:6a:f5:8e:0a:a0:de:62:5f:72:7a:
         e8:62:36:c8:79:30:66:8e:45:5f:20:97:9e:0b:02:51:fc:2d:
         6d:c0:12:3e:8c:33:56:c2:5a:14:37:23:35:a5:57:f2:f8:de:
         37:69:b6:12:ed:6a:17:7d:0f:c6:59:e9:f4:3e:4f:5b:39:3e:
         21:f9:0d:1b:4f:95:5a:fb:bb:58:ec:0f:6b:a4:f3:b9:e7:e3:
         c3:fe:fb:42:72:04:44:d9:cc:ec:20:06:f0:0d:96:2e:08:5f:
         6e:76:9b:16:be:fc:a8:f7:e1:f6:88:1f:fd:bb:e8:de:f8:8a:
         f9:8e:99:1c:1f:d3:b4:85:76:bd:a4:b8:6e:45:5b:db:15:1d:
         f0:66:99:d3:e9:4f:bd:22:11:ae:2e:81:b3:8e:4a:18:46:75:
         ca:2b:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org