Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a3a2f33322d3438203d3e20323637353434.roa
File:                     323830343a343330383a3a2f33322d3438203d3e20323637353434.roa (raw, json)
Hash identifier:          fyjBlm6ggAh/PdwpTZILBbfBsMNJ/u+hwfFoYh0Q+tI=
Subject key identifier:   D5:DD:5F:62:95:CB:A4:5C:CF:55:2C:02:5B:61:C4:91:00:3A:A4:DA
Certificate issuer:       /CN=AE65C1064954B88FFF832DCC11EDAA389432A623
Certificate serial:       5FF1914C13D80E807FA6B36C9C7C51E9E098DE86
Authority key identifier: AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a3a2f33322d3438203d3e20323637353434.roa
Signing time:             Mon 26 Jun 2023 14:36:16 +0000
ROA not before:           Mon 26 Jun 2023 14:31:16 +0000
ROA not after:            Mon 24 Jun 2024 14:36:16 +0000
asID:                     267544
IP address blocks:        2804:4308::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f1:91:4c:13:d8:0e:80:7f:a6:b3:6c:9c:7c:51:e9:e0:98:de:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE65C1064954B88FFF832DCC11EDAA389432A623
        Validity
            Not Before: Jun 26 14:31:16 2023 GMT
            Not After : Jun 24 14:36:16 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:88:9b:a2:1a:71:00:4c:ee:a7:89:db:f3:
                    5d:82:71:fc:8a:ba:dc:47:c5:65:14:42:0d:39:26:
                    f8:65:50:1d:ee:0b:4c:00:ff:b3:b5:6b:c9:ec:b0:
                    3a:38:08:c2:76:25:e8:c2:09:e5:f6:99:4e:5b:6b:
                    c3:8a:fe:dd:c2:70:a4:5b:38:56:a0:38:48:cc:c2:
                    b5:a0:71:db:db:55:a0:1e:59:01:6b:d4:1f:66:89:
                    8b:50:bc:76:be:c2:20:3c:4d:b6:10:a2:53:cd:78:
                    ec:3c:45:8e:b7:a3:f9:c2:72:80:da:65:0c:f1:4e:
                    23:30:63:72:bc:54:48:74:83:a0:8e:98:72:9e:86:
                    d6:3c:a6:3e:19:d4:05:c1:08:02:87:82:ca:60:cc:
                    25:39:64:3e:cc:f4:c0:15:4d:2c:d1:ee:3d:87:5e:
                    47:a8:f8:72:1c:52:d1:78:f5:1e:d9:a2:28:ca:03:
                    7d:04:5a:d5:49:4a:19:a2:69:a5:d3:b5:c7:67:a7:
                    03:97:35:55:56:3a:d1:54:22:f9:51:35:0c:48:aa:
                    f3:b3:77:ac:26:f8:01:08:3b:b4:d0:3d:c5:a3:b0:
                    d3:54:cb:c8:6b:77:6d:cd:fc:95:74:91:f2:ab:87:
                    52:d6:e9:ff:76:1b:e3:48:13:5f:64:77:ee:71:59:
                    c2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DD:5F:62:95:CB:A4:5C:CF:55:2C:02:5B:61:C4:91:00:3A:A4:DA
            X509v3 Authority Key Identifier:
                keyid:AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/323830343a343330383a3a2f33322d3438203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4308::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:a8:20:96:43:4d:57:61:c8:c9:d8:1a:a3:f3:6b:31:6f:ba:
         c4:96:ad:64:22:ec:1f:90:e4:50:69:f4:4f:a8:79:6e:92:43:
         d2:25:7a:a8:f4:c4:45:54:c1:9d:d8:a1:d2:eb:b1:6f:10:0d:
         5e:7d:61:5c:52:41:68:05:4a:2a:11:37:73:3f:53:e0:b4:3b:
         66:8a:76:d9:77:b1:21:8d:c1:b2:0b:ed:09:4b:7e:11:83:d9:
         3b:1c:fa:23:1e:e0:00:32:3e:eb:d8:09:9f:d6:2b:6a:0a:2b:
         47:83:21:2e:11:d8:c4:dd:47:b0:96:5d:d9:84:03:f9:57:78:
         28:f3:42:1c:3e:b4:95:bc:dc:7e:2f:34:a9:9f:be:b3:08:57:
         c5:6c:6d:24:4d:9e:e6:c1:06:ae:cf:06:75:74:3d:82:6d:26:
         34:41:8d:6c:a2:46:de:e4:c3:b3:7f:b9:42:9f:65:da:50:28:
         b5:e9:aa:57:62:6c:32:6b:81:f7:23:2f:ad:79:fe:a4:f5:1c:
         34:e7:d8:92:4a:eb:aa:fb:21:13:88:56:c3:e4:10:f3:0c:6d:
         d4:fd:f6:74:04:74:fd:21:2b:55:2a:d1:d5:a1:23:f4:2d:ca:
         26:c8:27:1a:5d:b8:48:13:4f:3a:30:a4:a8:f7:ed:38:58:89:
         ea:cf:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org