Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/323830313a38303a336537303a3a2f34382d3438203d3e20323731353431.roa
File:                     323830313a38303a336537303a3a2f34382d3438203d3e20323731353431.roa (raw, json)
Hash identifier:          7UHvT5ijDw0xOKp7PxDpM9Y2N8WuUmEYKnyEKBO1i6E=
Subject key identifier:   6C:71:4C:E6:0D:9D:7B:C8:D6:0F:5C:44:16:0A:B3:43:5A:D9:90:C7
Certificate issuer:       /CN=85661D4BB5D0C9DD35FA91F11679E902EB66AF4D
Certificate serial:       FCE43DD46345EC61DB5545404790208EFD968E
Authority key identifier: 85:66:1D:4B:B5:D0:C9:DD:35:FA:91:F1:16:79:E9:02:EB:66:AF:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/323830313a38303a336537303a3a2f34382d3438203d3e20323731353431.roa
Signing time:             Tue 24 Oct 2023 19:20:31 +0000
ROA not before:           Tue 24 Oct 2023 19:15:31 +0000
ROA not after:            Tue 22 Oct 2024 19:20:31 +0000
asID:                     271541
IP address blocks:        2801:80:3e70::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fc:e4:3d:d4:63:45:ec:61:db:55:45:40:47:90:20:8e:fd:96:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85661D4BB5D0C9DD35FA91F11679E902EB66AF4D
        Validity
            Not Before: Oct 24 19:15:31 2023 GMT
            Not After : Oct 22 19:20:31 2024 GMT
        Subject: CN=6C714CE60D9D7BC8D60F5C44160AB3435AD990C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:ff:cb:02:17:32:93:4e:29:c9:4d:34:cf:
                    c9:9e:07:59:19:d6:12:16:c2:25:a5:e8:1b:42:23:
                    a9:07:c1:e3:2e:fe:0e:3b:0e:6f:4d:a5:f0:9f:70:
                    2e:8b:08:cf:ef:f6:3e:21:fd:57:bf:35:5c:5c:7e:
                    9d:94:19:d0:53:7b:05:d5:93:fa:af:bf:cc:fc:e2:
                    f6:7d:2b:62:07:b2:a2:fd:95:db:87:82:35:80:04:
                    8a:48:0e:b6:27:83:b5:57:84:9a:17:d7:25:00:a3:
                    43:ba:57:a2:6f:6e:1a:a7:03:b7:47:0d:69:3b:03:
                    a5:ba:1f:14:b5:d0:04:b6:af:42:7e:c4:6e:ac:8d:
                    ea:a2:87:f1:bf:b7:f8:fb:75:47:10:83:17:14:47:
                    15:68:3a:5f:cb:7c:1b:ea:8f:d5:8f:f0:8b:38:40:
                    1b:78:5b:80:43:e8:0c:e2:80:f2:e6:a8:72:07:76:
                    97:08:d0:5a:70:0a:9c:2e:dd:3b:0d:1c:c9:98:f5:
                    46:11:08:f5:8d:0a:26:dd:56:4e:44:38:85:59:b1:
                    12:38:0c:aa:f2:c9:3c:05:d1:95:c5:db:2f:60:db:
                    e2:0e:df:c6:d7:ee:45:75:32:26:1a:bc:a1:11:72:
                    d9:34:64:7f:bb:ba:ca:80:a9:4e:36:14:64:ac:1f:
                    1a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:71:4C:E6:0D:9D:7B:C8:D6:0F:5C:44:16:0A:B3:43:5A:D9:90:C7
            X509v3 Authority Key Identifier:
                keyid:85:66:1D:4B:B5:D0:C9:DD:35:FA:91:F1:16:79:E9:02:EB:66:AF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/323830313a38303a336537303a3a2f34382d3438203d3e20323731353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3e70::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:36:f6:fa:91:da:24:fb:5e:9d:a1:b5:34:83:bd:ab:81:05:
         d2:16:59:b6:84:f0:31:dd:a2:b5:53:b9:40:d9:db:c9:88:b7:
         31:c9:95:4e:4c:7f:69:df:55:66:fa:e5:8f:81:e7:13:84:82:
         52:c6:e7:72:1a:55:02:b7:c0:25:68:5c:fe:8f:be:82:ec:0a:
         4a:78:29:e9:39:32:6f:83:cc:74:af:60:2a:07:52:7f:45:2a:
         28:f4:b9:fb:c0:05:d5:bd:66:d1:25:45:30:d1:df:3b:cb:80:
         6c:a7:01:46:1d:d6:83:e1:c8:b7:46:4e:a5:57:b4:ae:bf:a5:
         e4:4c:56:d9:11:e3:8f:9d:6c:62:29:10:40:0b:03:60:dd:75:
         28:cb:a9:b0:b5:e0:b2:50:14:05:18:24:7f:77:28:6a:4a:b5:
         fd:26:07:cb:05:bb:52:e5:e8:ff:ab:14:7f:7c:0c:23:f5:6e:
         25:62:f0:1c:19:3d:a3:41:fb:63:aa:56:a4:f5:a0:2a:fc:76:
         95:30:02:be:44:e3:5d:96:b9:31:8d:8b:ae:47:1d:66:69:e7:
         b3:d4:4a:b7:32:bd:5f:ed:b7:48:79:de:9e:fe:3b:1d:f6:99:
         67:90:15:51:ad:98:b9:78:5d:c6:20:53:73:a9:f2:e2:48:7b:
         90:83:bf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org