Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a36303a3a2f34332d3433203d3e20323637353434.roa
File:                     323830343a343330383a36303a3a2f34332d3433203d3e20323637353434.roa (raw, json)
Hash identifier:          69aEb4BqnLOuq+du9MQR6KoiLZ2TKv10posZHLx6iL4=
Subject key identifier:   A3:66:F4:4D:D8:EF:12:BB:93:B0:41:78:6B:E0:2C:99:B6:81:F2:15
Certificate issuer:       /CN=AE65C1064954B88FFF832DCC11EDAA389432A623
Certificate serial:       42970FCEAC633FF88BB4010D8E2FD00AF6DC99E0
Authority key identifier: AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a36303a3a2f34332d3433203d3e20323637353434.roa
Signing time:             Mon 26 Jun 2023 14:37:51 +0000
ROA not before:           Mon 26 Jun 2023 14:32:51 +0000
ROA not after:            Mon 24 Jun 2024 14:37:51 +0000
asID:                     267544
IP address blocks:        2804:4308:60::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:97:0f:ce:ac:63:3f:f8:8b:b4:01:0d:8e:2f:d0:0a:f6:dc:99:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE65C1064954B88FFF832DCC11EDAA389432A623
        Validity
            Not Before: Jun 26 14:32:51 2023 GMT
            Not After : Jun 24 14:37:51 2024 GMT
        Subject: CN=3082010A0282010100CAD6A92C072D6D60F0234E7865575147FB5A8F10ED900DC8C932204AC21FF17A154D676AC90E9D0BE9B1B6BC3AB04FD1530C5B81046D132227E0B1D18FEF5C9A6DF1C10411CEF2E3E860E4EFEE2B372ECB167FFDC9FB10F3369B2F270FB02A5CDCCA4BF317640378E81F18912A5628691A506CD14F67F31B1DEB4FEAE32FD9F108B56AEB4A2F4CB4A99BE16EC76B7427FE6557CE8FB12550AB897380BF5C39F837393E74F78EB74C9C95395498A33EB045082504F3D5FE75426FAE8C93AD0258D63507D9621BFFCA7A974FE1424AD88AC80C9400924D52F34C865E3DE2EC68C7806D31B5804E7A32B652F56577CC2886CA8066CEDD8BADC3C2695BF9C6E4F7410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:a9:2c:07:2d:6d:60:f0:23:4e:78:65:57:
                    51:47:fb:5a:8f:10:ed:90:0d:c8:c9:32:20:4a:c2:
                    1f:f1:7a:15:4d:67:6a:c9:0e:9d:0b:e9:b1:b6:bc:
                    3a:b0:4f:d1:53:0c:5b:81:04:6d:13:22:27:e0:b1:
                    d1:8f:ef:5c:9a:6d:f1:c1:04:11:ce:f2:e3:e8:60:
                    e4:ef:ee:2b:37:2e:cb:16:7f:fd:c9:fb:10:f3:36:
                    9b:2f:27:0f:b0:2a:5c:dc:ca:4b:f3:17:64:03:78:
                    e8:1f:18:91:2a:56:28:69:1a:50:6c:d1:4f:67:f3:
                    1b:1d:eb:4f:ea:e3:2f:d9:f1:08:b5:6a:eb:4a:2f:
                    4c:b4:a9:9b:e1:6e:c7:6b:74:27:fe:65:57:ce:8f:
                    b1:25:50:ab:89:73:80:bf:5c:39:f8:37:39:3e:74:
                    f7:8e:b7:4c:9c:95:39:54:98:a3:3e:b0:45:08:25:
                    04:f3:d5:fe:75:42:6f:ae:8c:93:ad:02:58:d6:35:
                    07:d9:62:1b:ff:ca:7a:97:4f:e1:42:4a:d8:8a:c8:
                    0c:94:00:92:4d:52:f3:4c:86:5e:3d:e2:ec:68:c7:
                    80:6d:31:b5:80:4e:7a:32:b6:52:f5:65:77:cc:28:
                    86:ca:80:66:ce:dd:8b:ad:c3:c2:69:5b:f9:c6:e4:
                    f7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:66:F4:4D:D8:EF:12:BB:93:B0:41:78:6B:E0:2C:99:B6:81:F2:15
            X509v3 Authority Key Identifier:
                keyid:AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a36303a3a2f34332d3433203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4308:60::/43

    Signature Algorithm: sha256WithRSAEncryption
         66:a8:ca:70:ea:2d:5d:65:74:2e:6b:df:d4:82:64:ec:be:39:
         cc:55:ec:a4:c3:a7:5a:44:4a:c2:b3:4c:8e:dd:7e:a3:43:d4:
         74:5f:17:f7:4d:31:c8:cd:41:5b:87:a1:64:0f:90:1f:d6:d9:
         45:4b:fd:32:f2:ef:40:57:5e:7d:c1:4d:39:2e:9c:22:85:61:
         81:c3:fe:ac:9c:01:f6:6f:14:96:65:1a:b9:de:73:8c:7e:eb:
         df:b9:b0:67:10:29:29:54:d0:4c:11:b0:b1:43:1c:8d:12:b3:
         30:54:22:8a:32:94:24:03:bb:38:2b:61:0a:6e:50:93:20:20:
         46:32:cf:0b:cc:d5:0c:ee:17:f3:03:23:79:46:21:09:ea:9a:
         7f:58:d3:c3:c4:b9:d9:fd:c5:72:f3:ea:bf:ac:21:79:1a:c1:
         6b:65:d7:a8:fa:35:81:b2:5b:a4:4a:06:7a:6f:07:5a:d0:87:
         f1:2d:c9:1b:ba:25:8c:d2:7a:da:01:89:dd:f9:a1:9f:f8:7a:
         1a:90:97:70:f1:32:d1:20:98:26:ea:17:77:87:99:1e:c7:ba:
         4a:c9:7a:79:6f:b1:00:a9:d2:da:13:7b:b7:34:b8:88:71:d8:
         db:67:c0:08:18:9b:b3:c7:87:8d:20:c1:ed:56:cf:3c:26:50:
         83:2b:62:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org