Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a34303a3a2f34332d3433203d3e20323637353434.roa
File:                     323830343a343330383a34303a3a2f34332d3433203d3e20323637353434.roa (raw, json)
Hash identifier:          Q9X8NDx0vojxwDV6hl16y0WXo0IIrqu4mniIDihcurM=
Subject key identifier:   B6:9B:18:24:C7:3D:E5:AB:7D:F7:D9:32:2E:22:B3:CF:40:B6:1D:AF
Certificate issuer:       /CN=AE65C1064954B88FFF832DCC11EDAA389432A623
Certificate serial:       0CAE445C7F3CF9DADF8731A8A7019E0D9EC98313
Authority key identifier: AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a34303a3a2f34332d3433203d3e20323637353434.roa
Signing time:             Mon 26 Jun 2023 14:37:24 +0000
ROA not before:           Mon 26 Jun 2023 14:32:24 +0000
ROA not after:            Mon 24 Jun 2024 14:37:24 +0000
asID:                     267544
IP address blocks:        2804:4308:40::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ae:44:5c:7f:3c:f9:da:df:87:31:a8:a7:01:9e:0d:9e:c9:83:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE65C1064954B88FFF832DCC11EDAA389432A623
        Validity
            Not Before: Jun 26 14:32:24 2023 GMT
            Not After : Jun 24 14:37:24 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:8b:f4:9a:a1:06:5f:8c:77:0d:92:7b:39:
                    cc:53:b1:8e:b5:e8:a1:31:70:4b:f4:70:5f:e4:89:
                    d7:99:7f:7d:3e:d5:59:a8:c1:87:19:b2:b9:1d:62:
                    ee:68:aa:14:8d:d4:57:5c:3c:89:5c:ce:9b:5b:52:
                    69:a6:72:ff:2d:ee:1b:95:a6:68:f4:f4:10:c8:e7:
                    20:c8:15:f6:1f:7f:d8:79:a8:6f:ce:1a:0c:d0:29:
                    af:ae:bc:18:09:d4:4e:85:c9:85:25:66:dd:50:6e:
                    ee:51:39:25:31:7f:81:81:1b:95:37:8b:21:8d:50:
                    60:f7:8b:0b:58:e4:a9:f8:20:d2:60:bf:45:d2:83:
                    81:96:12:56:7d:02:5a:b6:b8:ab:42:34:e3:78:9e:
                    bc:2b:44:ca:bc:5b:68:df:cf:06:6c:82:13:5f:33:
                    c9:1e:a4:bf:69:ab:0b:15:e9:c7:e5:ad:c3:22:00:
                    18:d6:9b:61:19:59:74:92:e4:35:92:88:f2:c6:68:
                    0e:67:f6:ec:5d:50:6d:c3:84:28:df:63:0d:41:a7:
                    2f:4b:e4:36:c4:91:31:cc:fd:26:74:10:30:8b:af:
                    00:e6:5e:5b:ac:e5:42:a0:37:9f:3f:b2:eb:56:48:
                    7e:55:26:f3:63:9b:77:a3:f4:46:d5:42:b3:fb:4a:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9B:18:24:C7:3D:E5:AB:7D:F7:D9:32:2E:22:B3:CF:40:B6:1D:AF
            X509v3 Authority Key Identifier:
                keyid:AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a34303a3a2f34332d3433203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4308:40::/43

    Signature Algorithm: sha256WithRSAEncryption
         72:f4:eb:fe:26:68:96:3a:11:de:4a:c9:07:5d:27:b5:fb:7a:
         c9:67:0c:62:5c:90:41:1f:c7:d0:55:00:13:2d:33:62:f8:9d:
         70:e7:23:22:c0:87:8c:ea:ff:d5:40:eb:ce:5e:03:44:2c:0d:
         4c:f4:05:17:eb:c3:98:ba:19:78:77:6a:9d:49:47:05:07:e5:
         66:97:0d:61:e0:ad:6e:bc:f1:e3:72:8c:32:38:d5:e7:3f:8f:
         f5:c0:d2:80:11:6f:c9:c2:80:df:55:a3:6f:5c:67:3a:a8:e5:
         84:d5:3e:73:1e:52:2f:6f:ac:41:4a:68:44:0d:26:3d:c5:71:
         bf:27:f0:4b:7f:da:59:38:ff:bd:1e:d4:f1:d1:8f:ea:28:3a:
         da:43:79:51:17:8e:a5:62:25:b3:9b:6f:90:1b:fb:ee:bc:9a:
         f8:d1:3b:44:32:ab:49:55:07:6f:d4:7f:78:f8:7a:42:ab:60:
         00:33:16:c8:64:ed:5b:3f:0c:5c:83:4d:98:d3:a9:6e:af:bc:
         36:6c:fd:13:cc:09:1e:90:a5:50:e2:64:5b:4a:f4:16:a5:6f:
         c7:54:12:30:15:d2:4d:5b:a3:81:03:f1:98:42:3d:cd:93:ed:
         7c:5c:af:d7:c9:a9:b7:ff:48:e6:21:e3:0e:40:bf:02:43:fe:
         d3:c0:d3:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org