Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a3a2f33352d3335203d3e20323632353738.roa
File:                     323830343a3635383a3a2f33352d3335203d3e20323632353738.roa (raw, json)
Hash identifier:          IbbJQH59QibhuiKLkf7Gv5JiqYlofT5TryRnWCh7vyI=
Subject key identifier:   BB:B4:5B:D5:6A:61:2E:D8:15:CD:CA:2C:74:4E:49:C9:43:53:4A:46
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       3AD8D5BD962D21703FEA14AAE4032481546F5DDC
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a3a2f33352d3335203d3e20323632353738.roa
Signing time:             Wed 06 Sep 2023 17:30:27 +0000
ROA not before:           Wed 06 Sep 2023 17:25:27 +0000
ROA not after:            Wed 04 Sep 2024 17:30:27 +0000
asID:                     262578
IP address blocks:        2804:658::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d8:d5:bd:96:2d:21:70:3f:ea:14:aa:e4:03:24:81:54:6f:5d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Sep  6 17:25:27 2023 GMT
            Not After : Sep  4 17:30:27 2024 GMT
        Subject: CN=BBB45BD56A612ED815CDCA2C744E49C943534A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:7c:7d:0f:ca:9a:bf:24:9a:60:2d:b2:57:
                    f5:4e:47:6f:0f:1c:19:34:65:cb:3a:1c:2c:bc:c5:
                    96:cf:c9:e9:0e:b3:95:84:12:7c:6d:dd:a6:17:55:
                    3e:65:cb:69:48:24:93:63:49:0f:52:1b:df:d0:e8:
                    8b:78:82:24:e5:f1:e6:72:46:55:81:29:e8:a8:0c:
                    ea:68:16:17:17:73:a9:ef:8c:17:35:f7:1c:82:38:
                    b3:4b:1b:1c:ce:61:56:75:55:83:02:28:94:72:f6:
                    35:02:a7:85:b3:c9:cf:9c:fe:bf:f4:36:97:8d:e3:
                    77:9f:3f:cd:0e:98:9a:0e:2c:e2:7d:85:aa:50:57:
                    13:c2:39:0f:7e:00:22:43:cb:62:69:2e:3d:63:f1:
                    18:bb:10:12:60:b6:8c:c6:6d:ec:95:81:8c:10:75:
                    7b:f0:4e:ce:98:c6:e5:1e:bf:ab:b7:04:d6:bd:09:
                    7d:65:85:10:43:f9:eb:d9:5e:98:52:e9:c4:84:7e:
                    b3:44:6f:37:b7:e9:a4:60:19:38:d7:79:d1:92:78:
                    9f:be:53:0b:c3:9b:95:4d:b9:5b:34:8e:ac:35:04:
                    47:c6:43:66:7f:6c:d1:22:ed:19:b3:86:6d:d3:88:
                    ab:18:3a:3c:00:00:1a:9f:b2:c2:9f:69:a3:92:21:
                    de:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B4:5B:D5:6A:61:2E:D8:15:CD:CA:2C:74:4E:49:C9:43:53:4A:46
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a3a2f33352d3335203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658::/35

    Signature Algorithm: sha256WithRSAEncryption
         0d:60:ac:3b:5d:57:2c:03:e2:f8:1f:8b:49:d4:54:7b:8d:73:
         ce:f8:6a:0b:d4:ce:43:de:e6:e6:33:38:77:67:10:68:83:af:
         a9:8f:fc:e1:1e:63:a0:b8:ea:9c:fe:3e:75:a2:ba:36:2d:f0:
         06:13:a7:95:01:21:6b:69:19:8a:c3:86:54:e0:86:ff:ff:d3:
         e0:27:32:70:f0:91:c2:cb:35:2c:96:89:56:e2:d6:90:5b:f4:
         da:1d:7e:d9:55:92:5d:85:67:30:75:a6:a6:8d:d4:6e:43:e9:
         96:e6:7d:15:07:8e:42:56:96:b7:ea:49:9b:af:ec:dd:f5:d1:
         d3:ff:e9:e1:91:39:9b:0e:50:82:9e:b0:89:f0:67:c9:c8:18:
         51:f6:4b:4f:72:f9:40:14:04:cb:a7:2d:37:0e:1c:9d:1f:15:
         ea:90:ae:e5:a3:ef:34:1b:52:5e:89:ec:4d:b0:f0:9f:e0:f0:
         e6:ae:68:e4:1a:53:3a:eb:f8:d1:5e:e7:7c:29:8c:f8:5f:e6:
         2d:f9:ea:76:66:8a:44:81:6a:07:a8:40:57:f2:43:ad:89:6e:
         d7:7c:03:96:41:56:64:67:88:3c:81:c4:6a:dd:2e:9d:ac:10:
         94:4c:41:39:8c:8d:87:7e:89:7a:69:9b:91:02:7e:5d:ea:d5:
         85:75:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org