Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a3a2f33322d3438203d3e20323632373235.roa
File:                     323830343a363436343a3a2f33322d3438203d3e20323632373235.roa (raw, json)
Hash identifier:          LLdC3Yh1D/0xTCXnvkV9XtomcB58KgtJUqLfsUwngB8=
Subject key identifier:   B0:6D:BB:4A:7F:7B:57:63:E3:CB:4C:6E:38:26:93:E3:61:10:B0:D7
Certificate issuer:       /CN=9689C17DD6A40C061C6DBFB1538BBF7ECECDB848
Certificate serial:       29969495612589642DBC7F5D03B291566D462CC8
Authority key identifier: 96:89:C1:7D:D6:A4:0C:06:1C:6D:BF:B1:53:8B:BF:7E:CE:CD:B8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a3a2f33322d3438203d3e20323632373235.roa
Signing time:             Mon 22 Nov 2021 15:24:57 +0000
ROA not before:           Mon 22 Nov 2021 15:19:57 +0000
ROA not after:            Mon 21 Nov 2022 15:24:57 +0000
asID:                     262725
IP address blocks:        2804:6464::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:96:94:95:61:25:89:64:2d:bc:7f:5d:03:b2:91:56:6d:46:2c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9689C17DD6A40C061C6DBFB1538BBF7ECECDB848
        Validity
            Not Before: Nov 22 15:19:57 2021 GMT
            Not After : Nov 21 15:24:57 2022 GMT
        Subject: CN=3082010A0282010100C8A030CD0E4676E21B07E032390EFC75C1AA0B5178ECDCD2366E0B81143B91D18A28EEE02F80694D4BE600BBE18E75841FBE16614F395E874179DCB55B7CE30A4BE3ED55BF9006ECB086FC04FD9689A6ABD880D9DBE95999F3187E180749C5614044243E3A21F85C2B160826E44DF1CF8A11F9D3E540606F40D8FA8427ACFC23C1918C369E49048B8FDD07288DC8DA2CD721D0147AF8740235F69AD3E198504D901DFB0DD958F85A452CBA16D4DF0628409D48FE278BE835C9A55B102B032FD0FF0F2ED4B53694032A3BE3ABE8F3A2BAE0142D68C591C745B3224F7023CF2CDE5DF67DE3FF729CF18B775E3635450F0D94AC3A1782FD056DBEE032277E46498D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:30:cd:0e:46:76:e2:1b:07:e0:32:39:0e:
                    fc:75:c1:aa:0b:51:78:ec:dc:d2:36:6e:0b:81:14:
                    3b:91:d1:8a:28:ee:e0:2f:80:69:4d:4b:e6:00:bb:
                    e1:8e:75:84:1f:be:16:61:4f:39:5e:87:41:79:dc:
                    b5:5b:7c:e3:0a:4b:e3:ed:55:bf:90:06:ec:b0:86:
                    fc:04:fd:96:89:a6:ab:d8:80:d9:db:e9:59:99:f3:
                    18:7e:18:07:49:c5:61:40:44:24:3e:3a:21:f8:5c:
                    2b:16:08:26:e4:4d:f1:cf:8a:11:f9:d3:e5:40:60:
                    6f:40:d8:fa:84:27:ac:fc:23:c1:91:8c:36:9e:49:
                    04:8b:8f:dd:07:28:8d:c8:da:2c:d7:21:d0:14:7a:
                    f8:74:02:35:f6:9a:d3:e1:98:50:4d:90:1d:fb:0d:
                    d9:58:f8:5a:45:2c:ba:16:d4:df:06:28:40:9d:48:
                    fe:27:8b:e8:35:c9:a5:5b:10:2b:03:2f:d0:ff:0f:
                    2e:d4:b5:36:94:03:2a:3b:e3:ab:e8:f3:a2:ba:e0:
                    14:2d:68:c5:91:c7:45:b3:22:4f:70:23:cf:2c:de:
                    5d:f6:7d:e3:ff:72:9c:f1:8b:77:5e:36:35:45:0f:
                    0d:94:ac:3a:17:82:fd:05:6d:be:e0:32:27:7e:46:
                    49:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6D:BB:4A:7F:7B:57:63:E3:CB:4C:6E:38:26:93:E3:61:10:B0:D7
            X509v3 Authority Key Identifier:
                keyid:96:89:C1:7D:D6:A4:0C:06:1C:6D:BF:B1:53:8B:BF:7E:CE:CD:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a3a2f33322d3438203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6464::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:f2:d7:eb:99:0b:5f:29:02:50:d0:9c:55:f5:fd:b5:c0:2e:
         31:83:fe:6a:e9:2c:ea:e7:16:dc:99:52:5f:79:b5:23:7e:d3:
         51:44:84:7b:61:a1:e0:d0:85:15:a2:6b:d6:4b:c3:fc:04:6b:
         de:52:cc:b5:d1:cc:10:69:24:0c:ac:54:86:9f:17:ab:90:d5:
         71:b8:13:88:87:4c:55:8f:91:bc:0e:11:c3:3e:60:20:05:20:
         d9:b2:1d:4a:4c:bc:da:6d:de:92:d2:fb:e9:5b:54:a5:a9:b7:
         69:48:15:cf:98:a8:0a:47:67:90:0b:d3:1c:ac:11:ea:3a:e2:
         ec:b6:a3:58:4d:13:d2:91:90:c6:94:a5:ae:07:b6:92:ae:1e:
         10:cf:41:71:61:87:12:4b:d8:7a:a7:14:dc:b9:89:79:1a:fe:
         d1:8b:64:8f:83:08:ec:b6:56:f1:6b:e2:a4:be:38:92:e9:32:
         ba:6d:f3:d9:78:ff:c5:23:f3:d6:5f:46:58:88:61:e1:25:73:
         1c:c8:48:9b:65:ef:09:15:64:aa:f8:36:fa:09:4d:88:08:eb:
         d6:08:8b:93:59:61:59:3c:3a:68:3f:11:35:5e:60:a3:2b:53:
         cc:d8:fd:68:31:81:f1:03:05:4c:66:f1:67:54:e0:12:cf:e7:
         21:05:b2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org