Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a333a3a2f34382d3438203d3e20323637353434.roa
File:                     323830343a343330383a333a3a2f34382d3438203d3e20323637353434.roa (raw, json)
Hash identifier:          rKGirdGBmSeWO4RWtBrznJXvcLcQ/kiFXUwmgZ2R2ws=
Subject key identifier:   0D:DF:12:88:EB:99:1A:FC:5D:F9:80:CC:21:6D:35:F1:E9:EE:FA:8E
Certificate issuer:       /CN=AE65C1064954B88FFF832DCC11EDAA389432A623
Certificate serial:       450C86BC4762CBBBC74753828117091A7EDD506B
Authority key identifier: AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a333a3a2f34382d3438203d3e20323637353434.roa
Signing time:             Thu 22 Sep 2022 20:00:00 +0000
ROA not before:           Thu 22 Sep 2022 19:55:00 +0000
ROA not after:            Thu 21 Sep 2023 20:00:00 +0000
asID:                     267544
IP address blocks:        2804:4308:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0c:86:bc:47:62:cb:bb:c7:47:53:82:81:17:09:1a:7e:dd:50:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE65C1064954B88FFF832DCC11EDAA389432A623
        Validity
            Not Before: Sep 22 19:55:00 2022 GMT
            Not After : Sep 21 20:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:37:a5:a1:ea:65:b5:ed:9c:e8:e9:5f:d4:e0:
                    da:95:55:90:63:72:11:ed:c2:78:f9:39:ca:10:99:
                    51:29:07:3f:d6:0a:4f:e6:25:fc:48:e7:d8:d0:0e:
                    da:a2:89:08:8e:c2:cf:57:52:6d:cf:80:f5:ea:51:
                    72:e9:6a:3e:e5:ec:01:72:c1:73:fd:88:bb:8c:6b:
                    0f:ff:82:d3:8d:c4:fb:3b:c0:3a:d9:89:bd:dc:5b:
                    c3:53:1f:6a:1b:da:e0:9f:1e:88:cd:3e:48:c0:50:
                    de:35:5f:c1:d8:b4:5d:93:47:6e:2b:03:36:e6:e9:
                    e9:a5:78:4d:77:ca:d7:c3:54:06:c7:6d:ba:ff:96:
                    52:ac:5b:26:dc:7e:77:ae:2e:a3:79:af:d0:bb:0f:
                    6b:2a:68:fe:b5:c6:55:0a:7d:ee:8a:0c:78:f8:e4:
                    aa:9b:55:2c:5f:e0:b7:96:73:32:d2:de:13:fd:df:
                    a2:05:61:b4:94:7f:4e:f0:68:6e:80:7c:f3:f9:31:
                    d3:c4:df:83:90:fb:ac:4f:e5:bc:00:f6:6f:68:5b:
                    31:5e:dc:84:f9:cc:b0:0c:52:4c:60:f3:dd:9d:d0:
                    88:d4:03:a5:60:95:d3:1c:3a:fd:46:99:df:79:d9:
                    ff:fa:94:0c:e9:2a:80:ae:b9:68:27:4b:58:f1:3f:
                    d0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DF:12:88:EB:99:1A:FC:5D:F9:80:CC:21:6D:35:F1:E9:EE:FA:8E
            X509v3 Authority Key Identifier:
                keyid:AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a333a3a2f34382d3438203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4308:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:87:fd:61:29:ee:bd:54:c2:8e:27:11:49:67:c2:9f:84:29:
         33:ff:f1:ac:b2:f2:4b:38:4a:bb:4c:44:01:e2:c4:da:8f:0f:
         c4:66:0e:9e:ad:16:84:37:e5:9b:ec:dd:76:92:c4:ed:2d:94:
         b6:a8:dc:14:37:1f:40:03:5f:22:5d:4a:a9:29:fa:ba:79:8b:
         16:34:6f:ee:f7:6d:89:e8:77:55:84:8e:30:9e:73:9c:f4:fc:
         c5:10:77:28:79:97:62:fa:f2:91:a8:e0:b4:b4:34:bd:65:d5:
         2a:06:43:47:7e:18:fb:9b:25:94:a0:5c:d1:13:e4:7c:1f:b2:
         e7:74:ee:52:be:9f:2a:30:d3:0c:df:97:97:a4:0b:34:ee:af:
         a5:bb:49:51:36:75:9a:c6:b9:00:44:ce:66:44:a3:24:c6:20:
         84:31:9c:6e:bc:bb:a7:7f:d0:d9:98:29:04:a4:c3:c5:b2:70:
         c3:05:0e:f7:24:e2:16:58:3e:c8:03:86:c3:7d:ae:e9:52:19:
         64:a4:6f:ec:95:69:24:78:c2:75:60:4e:e1:75:fb:19:45:25:
         6b:96:b3:98:c9:c4:1b:7b:a8:b9:cd:9c:60:6e:58:5f:f5:7e:
         a4:e8:7f:13:83:9a:c6:5c:93:fc:bf:05:ec:ce:38:a3:dc:a0:
         0c:38:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org