Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a38303a3a2f34322d3432203d3e20323637353434.roa
File:                     323830343a343330383a38303a3a2f34322d3432203d3e20323637353434.roa (raw, json)
Hash identifier:          OUCuAeK0CL6nwSh57SFSTP1gBekoBzqKpbZgyD88EXE=
Subject key identifier:   B1:F6:A5:D3:FC:02:3D:1B:95:DE:34:6A:26:E3:59:8B:D8:EB:22:51
Certificate issuer:       /CN=AE65C1064954B88FFF832DCC11EDAA389432A623
Certificate serial:       03B1206792726BE28E57FF49CA96B535F9B08AD3
Authority key identifier: AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a38303a3a2f34322d3432203d3e20323637353434.roa
Signing time:             Mon 26 Jun 2023 14:38:33 +0000
ROA not before:           Mon 26 Jun 2023 14:33:33 +0000
ROA not after:            Mon 24 Jun 2024 14:38:33 +0000
asID:                     267544
IP address blocks:        2804:4308:80::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b1:20:67:92:72:6b:e2:8e:57:ff:49:ca:96:b5:35:f9:b0:8a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE65C1064954B88FFF832DCC11EDAA389432A623
        Validity
            Not Before: Jun 26 14:33:33 2023 GMT
            Not After : Jun 24 14:38:33 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:e4:f6:80:f3:45:97:af:14:48:2d:69:c5:
                    74:36:57:05:db:81:e7:dd:bf:b5:b5:00:ed:da:47:
                    c1:e2:83:2e:7b:8f:76:f4:4a:65:9d:72:7d:51:5e:
                    7a:87:4b:40:fe:f2:4d:a9:03:23:97:e6:c8:2c:f4:
                    7c:9b:d2:e1:90:31:8b:c6:41:88:8a:31:17:8b:e2:
                    07:11:0e:e4:4a:06:60:15:11:0f:2c:8d:4a:4a:a0:
                    66:15:c3:e0:0c:e1:74:bc:f9:6d:6a:42:62:57:b6:
                    b7:e4:db:c7:92:d8:02:78:03:89:52:0b:29:5c:ed:
                    63:39:3e:58:65:f6:88:b6:c9:c2:26:ca:10:fd:48:
                    7e:fb:85:bb:43:b3:ee:e4:c9:ac:b7:f7:9b:56:4b:
                    ed:8b:bf:dc:cb:3b:ef:06:bf:d1:46:39:3c:75:09:
                    14:1f:93:c1:fb:a1:b2:06:7f:44:c0:c4:c2:70:eb:
                    58:59:82:a8:aa:a5:d2:f9:9a:1a:31:88:1d:42:e4:
                    b9:d4:60:35:65:93:eb:88:46:a8:08:4e:bf:87:7c:
                    d4:9e:be:7e:3e:41:d1:bb:4c:c7:a7:b4:43:25:44:
                    c6:74:94:66:72:0e:7e:f0:45:95:b6:ac:04:3b:08:
                    78:04:9b:60:a2:a6:51:df:ea:9a:6a:a6:b8:52:ec:
                    7c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F6:A5:D3:FC:02:3D:1B:95:DE:34:6A:26:E3:59:8B:D8:EB:22:51
            X509v3 Authority Key Identifier:
                keyid:AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a38303a3a2f34322d3432203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4308:80::/42

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:63:f7:9e:d4:e9:33:34:aa:a8:01:a5:7d:b1:3d:cd:29:
         48:6f:9f:ee:36:d1:b3:33:64:55:cb:9d:d7:c6:c4:ab:72:21:
         7d:f9:2c:ba:51:97:1d:e8:70:b4:92:cd:fc:f2:cb:1f:6a:ac:
         3e:23:60:90:e4:e2:d0:c2:bb:04:f2:df:d1:d7:38:f5:96:97:
         5a:78:f0:d1:26:92:3c:38:4f:bc:1e:4e:63:42:32:c3:14:7d:
         73:be:d3:00:4f:49:c9:5e:26:1c:23:d7:44:1f:b3:31:a2:84:
         00:dc:ab:f6:f7:39:f0:6b:08:17:7d:83:21:40:f1:2f:98:41:
         1f:ee:88:3e:e0:74:df:1a:59:04:62:84:37:4b:d2:81:d2:2b:
         76:fd:1e:76:62:cb:e7:75:97:f3:2b:41:35:2c:ec:d3:fc:25:
         52:b6:7b:37:e7:63:1c:8c:83:16:00:6c:1f:07:c3:71:42:ee:
         1a:1a:ff:0f:ad:af:67:c6:5c:79:9f:f5:71:1b:09:a8:13:40:
         7b:40:fe:eb:ba:da:fe:4b:ba:f9:92:0d:50:a0:73:af:49:15:
         00:d6:9c:ed:a8:10:6a:2f:47:7b:8e:0f:8b:43:27:41:ce:66:
         40:1f:39:33:af:88:f3:85:8d:46:ea:2d:d5:e6:76:7e:de:50:
         d3:2c:d6:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org