Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a3a2f33322d3333203d3e20323637353434.roa
File:                     323830343a343330383a3a2f33322d3333203d3e20323637353434.roa (raw, json)
Hash identifier:          KVeirdUImacjxPOAalBKCxfZVkP17TdErWfZvey4Srk=
Subject key identifier:   AB:6D:F6:E9:EB:7C:89:B7:2B:7A:C6:DD:05:95:8F:77:AC:0D:BA:01
Certificate issuer:       /CN=AE65C1064954B88FFF832DCC11EDAA389432A623
Certificate serial:       650B58EBEA5A46C5D0696A560C38E3EAAE587AFB
Authority key identifier: AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a3a2f33322d3333203d3e20323637353434.roa
Signing time:             Wed 21 Sep 2022 19:00:00 +0000
ROA not before:           Wed 21 Sep 2022 18:55:00 +0000
ROA not after:            Wed 20 Sep 2023 19:00:00 +0000
asID:                     267544
IP address blocks:        2804:4308::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0b:58:eb:ea:5a:46:c5:d0:69:6a:56:0c:38:e3:ea:ae:58:7a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE65C1064954B88FFF832DCC11EDAA389432A623
        Validity
            Not Before: Sep 21 18:55:00 2022 GMT
            Not After : Sep 20 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:7a:30:2a:e1:65:a1:38:19:24:7d:39:b4:
                    7b:40:f8:6a:07:c6:40:c5:2b:e2:45:e1:69:ba:b2:
                    41:3e:fd:63:85:8a:42:83:e1:52:c2:f5:b2:ca:70:
                    97:bf:b8:0a:20:93:9f:f5:48:c5:57:38:19:ad:d6:
                    c1:e2:1f:cd:eb:0d:68:71:c1:bb:01:76:7d:8f:66:
                    6c:7f:04:5b:cf:f7:0f:e8:46:80:ca:ed:51:6e:cb:
                    75:d4:43:56:ee:36:a7:a9:08:98:dd:65:55:5a:4c:
                    81:e2:f4:37:43:bf:9c:b7:8e:c9:3b:ab:21:83:64:
                    3f:7e:74:3b:c4:ad:16:e9:7e:cf:91:2a:bf:db:ba:
                    dc:b4:79:ac:6d:00:0e:86:aa:db:5d:02:81:24:64:
                    07:47:0d:fb:53:36:4b:30:f5:09:e6:a4:96:66:3d:
                    6e:d9:fa:97:8d:e7:86:68:d2:33:8e:ea:64:00:7b:
                    59:5e:40:10:e1:06:d4:70:69:d9:d4:2f:cc:82:f6:
                    3a:db:06:8e:69:05:77:d1:03:26:bf:f0:81:67:5e:
                    8d:3a:30:df:62:f8:21:ad:ff:b0:5b:3e:a2:dd:cd:
                    37:94:0a:3d:88:fb:a0:8f:9b:ee:df:0e:07:c6:d0:
                    8e:4f:e3:fd:6c:2a:ed:2c:70:69:d6:d1:38:c7:32:
                    ce:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6D:F6:E9:EB:7C:89:B7:2B:7A:C6:DD:05:95:8F:77:AC:0D:BA:01
            X509v3 Authority Key Identifier:
                keyid:AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a3a2f33322d3333203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4308::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:cd:39:b5:03:c1:a1:27:42:7c:75:a3:d2:b3:44:22:31:73:
         35:55:3b:42:f4:8e:88:e4:1c:fe:99:c8:ef:ec:e1:7f:16:a7:
         6a:f8:a8:ec:3e:cb:3c:a5:12:35:97:71:1d:10:fa:fd:65:e1:
         9a:74:22:09:c6:24:61:35:fc:5d:f0:8f:9d:5e:25:14:f3:08:
         4b:10:74:ea:8e:02:1b:a4:1d:d3:05:5d:64:81:bc:06:52:59:
         af:e3:80:ee:ce:81:9d:4c:cb:ff:11:d3:32:04:b7:66:bc:9b:
         ca:2a:fa:d4:9d:05:6a:0a:4d:eb:81:e6:a4:c9:78:98:7c:71:
         0d:e2:38:09:e0:ba:6a:79:b2:d3:97:80:80:0d:9d:63:2a:fa:
         0f:70:da:54:68:16:e8:42:16:31:8f:76:91:7b:5f:70:f4:04:
         8a:eb:d8:db:18:13:5b:24:4e:08:31:cd:da:7a:17:e0:44:2d:
         c0:18:ba:6c:a5:80:85:79:d2:79:e8:68:1d:4f:4b:05:15:17:
         68:41:52:34:f6:e1:8e:94:4e:60:14:ab:15:79:1b:68:a5:8e:
         94:86:57:c5:1a:f7:5c:12:ef:72:87:bb:e8:e3:bd:3b:b0:4d:
         75:5d:7f:dc:bf:66:cf:fa:09:7b:47:17:0d:57:e2:aa:b0:f7:
         3e:f9:ae:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org