Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a3130303a3a2f34332d3433203d3e20323637353434.roa
File:                     323830343a343330383a3130303a3a2f34332d3433203d3e20323637353434.roa (raw, json)
Hash identifier:          1+mAD5dt2n/6MHH6uzp7OG0V2iPX2UYxNc/226rHIgM=
Subject key identifier:   05:A7:22:D0:DC:8C:2F:6A:1A:25:21:97:7A:FA:C0:23:B3:7A:DB:2A
Certificate issuer:       /CN=AE65C1064954B88FFF832DCC11EDAA389432A623
Certificate serial:       49F9D41C63B3D660828ED8DF5E4077EBCE24E7C0
Authority key identifier: AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a3130303a3a2f34332d3433203d3e20323637353434.roa
Signing time:             Mon 26 Jun 2023 14:38:17 +0000
ROA not before:           Mon 26 Jun 2023 14:33:17 +0000
ROA not after:            Mon 24 Jun 2024 14:38:17 +0000
asID:                     267544
IP address blocks:        2804:4308:100::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f9:d4:1c:63:b3:d6:60:82:8e:d8:df:5e:40:77:eb:ce:24:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE65C1064954B88FFF832DCC11EDAA389432A623
        Validity
            Not Before: Jun 26 14:33:17 2023 GMT
            Not After : Jun 24 14:38:17 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c2:74:15:df:d9:db:e0:83:84:c9:fb:28:f1:
                    84:71:22:89:fe:2b:dd:3c:d1:61:66:c3:1b:e6:da:
                    37:bf:8f:93:3e:9e:f0:20:5c:97:8e:ed:64:ae:cf:
                    03:5a:aa:23:d7:a8:6d:31:2c:84:db:33:c1:51:1d:
                    03:90:5d:68:31:69:bb:a8:81:5c:9d:d4:cc:a7:de:
                    3f:b0:7d:21:1f:a1:6f:28:ba:ad:dd:b1:9e:23:0d:
                    97:83:76:e7:d2:26:00:0f:eb:03:9b:eb:f8:f7:f4:
                    40:c2:c9:44:42:dd:c3:0a:28:28:c2:a5:bd:78:29:
                    63:2e:6e:1b:12:c0:4f:a1:92:09:80:47:25:39:1a:
                    13:bd:39:0c:de:18:a7:3f:6a:c4:e7:13:5e:a3:72:
                    33:67:ed:53:fb:a0:63:e5:0e:10:a3:74:cf:0c:aa:
                    2e:55:c0:b7:ff:bd:a8:12:23:ca:03:52:b8:31:a4:
                    31:13:01:18:1a:d7:95:aa:40:06:bd:14:cb:f0:9b:
                    16:d1:2e:94:6c:a0:ef:a1:c7:0c:7a:a5:e8:f4:b9:
                    ac:a2:82:19:2e:0f:3a:56:03:6f:71:b4:e2:51:d4:
                    91:72:b7:4a:69:5f:03:70:4e:9c:19:18:54:8b:70:
                    d7:bd:4b:75:7a:33:1c:ee:c3:bf:87:85:ef:7c:55:
                    4c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A7:22:D0:DC:8C:2F:6A:1A:25:21:97:7A:FA:C0:23:B3:7A:DB:2A
            X509v3 Authority Key Identifier:
                keyid:AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a3130303a3a2f34332d3433203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4308:100::/43

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:4b:4b:eb:fc:ab:37:89:06:e7:9e:11:c3:a1:92:09:09:
         e7:53:2f:5d:fd:30:2a:95:ce:02:0c:5e:b1:c7:c8:13:e8:60:
         d8:94:3b:b9:d4:a9:11:c9:1e:22:53:7c:55:9a:1b:1f:c9:84:
         e6:56:be:d8:5f:e8:a8:b5:fe:cd:c2:5c:ef:50:0c:79:5c:1e:
         d5:b7:f1:14:ee:39:19:fd:e1:db:e7:c3:6f:9d:42:40:67:ab:
         08:0f:dd:05:63:4c:6e:7e:24:ef:5a:23:f6:1c:9d:5c:85:a5:
         c2:e1:72:cc:7f:a9:b1:71:10:b3:78:8f:7d:06:52:51:a6:9f:
         db:ca:4d:c6:54:d1:aa:d1:e0:07:42:ea:fa:9f:0f:f2:10:18:
         34:e1:fa:e6:e4:22:83:5b:ba:88:b8:5f:49:4f:b9:90:57:5b:
         96:04:87:40:2d:fb:b5:7e:d2:3c:cd:7b:5c:01:48:f2:08:ea:
         bd:0e:92:5c:83:92:22:24:1f:1c:27:b8:47:12:a2:3d:18:34:
         f3:53:66:12:ac:33:f6:c8:7d:85:3e:5e:4c:b3:de:ab:47:35:
         4b:a4:bc:1d:b7:73:e9:a0:05:66:bc:63:34:e3:12:ef:a8:12:
         92:7c:5b:c8:5d:9c:52:c7:a4:c5:84:89:98:3e:95:5d:6c:89:
         b4:42:a8:6b
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUSfnUHGOz1mCCjtjfXkB3684k58AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU2NUMxMDY0OTU0Qjg4RkZGODMyRENDMTFFREFBMzg5
NDMyQTYyMzAeFw0yMzA2MjYxNDMzMTdaFw0yNDA2MjQxNDM4MTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjJDMjc0MTVERkQ5REJFMDgz
ODRDOUZCMjhGMTg0NzEyMjg5RkUyQkREM0NEMTYxNjZDMzFCRTZEQTM3QkY4Rjkz
M0U5RUYwMjA1Qzk3OEVFRDY0QUVDRjAzNUFBQTIzRDdBODZEMzEyQzg0REIzM0Mx
NTExRDAzOTA1RDY4MzE2OUJCQTg4MTVDOURENENDQTdERTNGQjA3RDIxMUZBMTZG
MjhCQUFERERCMTlFMjMwRDk3ODM3NkU3RDIyNjAwMEZFQjAzOUJFQkY4RjdGNDQw
QzJDOTQ0NDJEREMzMEEyODI4QzJBNUJENzgyOTYzMkU2RTFCMTJDMDRGQTE5MjA5
ODA0NzI1MzkxQTEzQkQzOTBDREUxOEE3M0Y2QUM0RTcxMzVFQTM3MjMzNjdFRDUz
RkJBMDYzRTUwRTEwQTM3NENGMENBQTJFNTVDMEI3RkZCREE4MTIyM0NBMDM1MkI4
MzFBNDMxMTMwMTE4MUFENzk1QUE0MDA2QkQxNENCRjA5QjE2RDEyRTk0NkNBMEVG
QTFDNzBDN0FBNUU4RjRCOUFDQTI4MjE5MkUwRjNBNTYwMzZGNzFCNEUyNTFENDkx
NzJCNzRBNjk1RjAzNzA0RTlDMTkxODU0OEI3MEQ3QkQ0Qjc1N0EzMzFDRUVDM0JG
ODc4NUVGN0M1NTRDMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAssJ0Fd/Z2+CDhMn7KPGEcSKJ/ivdPNFhZsMb5to3v4+TPp7wIFyX
ju1krs8DWqoj16htMSyE2zPBUR0DkF1oMWm7qIFcndTMp94/sH0hH6FvKLqt3bGe
Iw2Xg3bn0iYAD+sDm+v49/RAwslEQt3DCigowqW9eCljLm4bEsBPoZIJgEclORoT
vTkM3hinP2rE5xNeo3IzZ+1T+6Bj5Q4Qo3TPDKouVcC3/72oEiPKA1K4MaQxEwEY
GteVqkAGvRTL8JsW0S6UbKDvoccMeqXo9LmsooIZLg86VgNvcbTiUdSRcrdKaV8D
cE6cGRhUi3DXvUt1ejMc7sO/h4XvfFVMJwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FAWnItDcjC9qGiUhl3r6wCOzetsqMB8GA1UdIwQYMBaAFK5lwQZJVLiP/4MtzBHt
qjiUMqYjMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jia3FMY041OXJHQ1dE
bXJLTlR2NEY1Z0FnMmJqR0ttNmJyNkgxQkc0WllZLzAvQUU2NUMxMDY0OTU0Qjg4
RkZGODMyRENDMTFFREFBMzg5NDMyQTYyMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BRTY1QzEwNjQ5NTRCODhGRkY4MzJEQ0MxMUVEQUEzODk0MzJB
NjIzLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CYmtxTGNONTlyR0NXRG1yS05U
djRGNWdBZzJiakdLbTZicjZIMUJHNFpZWS8wLzMyMzgzMDM0M2EzNDMzMzAzODNh
MzEzMDMwM2EzYTJmMzQzMzJkMzQzMzIwM2QzZTIwMzIzNjM3MzUzNDM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcFKARDCAEAMA0GCSqGSIb3DQEBCwUAA4IBAQBPYUtL6/yrN4kG554Rw6GS
CQnnUy9d/TAqlc4CDF6xx8gT6GDYlDu51KkRyR4iU3xVmhsfyYTmVr7YX+iotf7N
wlzvUAx5XB7Vt/EU7jkZ/eHb58NvnUJAZ6sID90FY0xufiTvWiP2HJ1chaXC4XLM
f6mxcRCzeI99BlJRpp/byk3GVNGq0eAHQur6nw/yEBg04frm5CKDW7qIuF9JT7mQ
V1uWBIdALfu1ftI8zXtcAUjyCOq9DpJcg5IiJB8cJ7hHEqI9GDTzU2YSrDP2yH2F
Pl5Ms96rRzVLpLwdt3PpoAVmvGM04xLvqBKSfFvIXZxSx6TFhImYPpVdbIm0Qqhr
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org