Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa
File:                     323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa (raw, json)
Hash identifier:          YOntY49kg1+GXt7AgD0ROy7n4OUh0eH4KzQlIFe/pe0=
Subject key identifier:   71:4A:67:AF:99:21:F7:E0:02:45:48:D8:E9:C2:42:0E:0E:25:35:1B
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       1CD8B9D334649460AAD46D420C0F963CBEF4E917
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa
Signing time:             Wed 06 Sep 2023 17:32:07 +0000
ROA not before:           Wed 06 Sep 2023 17:27:07 +0000
ROA not after:            Wed 04 Sep 2024 17:32:07 +0000
asID:                     262578
IP address blocks:        2804:658:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d8:b9:d3:34:64:94:60:aa:d4:6d:42:0c:0f:96:3c:be:f4:e9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Sep  6 17:27:07 2023 GMT
            Not After : Sep  4 17:32:07 2024 GMT
        Subject: CN=714A67AF9921F7E0024548D8E9C2420E0E25351B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:37:4b:c2:9c:aa:d6:08:9f:d1:8a:19:fe:
                    ba:23:39:42:14:ad:6c:d6:49:02:ff:fb:63:49:4d:
                    a2:6e:b1:03:1d:ec:26:b4:58:67:46:8f:cd:16:d6:
                    f7:03:30:b3:c1:56:99:d2:10:9f:63:94:63:2c:9d:
                    9e:71:43:15:db:db:8f:90:19:f9:35:49:b6:26:5f:
                    85:94:25:e3:48:d9:e0:80:c7:c6:24:53:14:a3:5e:
                    df:4d:c7:78:80:52:29:f9:6d:62:8f:d9:4b:93:71:
                    de:fc:70:ac:7e:7f:6d:fa:96:ff:29:8e:b4:8c:9f:
                    31:34:15:9c:f2:4b:64:cb:9f:6f:0b:03:c2:55:c1:
                    53:62:9e:66:61:d8:8b:88:b0:62:9f:11:79:1a:63:
                    85:1d:36:d1:c4:67:96:81:41:96:8d:17:d3:00:fd:
                    e2:5d:81:3e:de:aa:a9:09:81:8d:56:57:07:34:ee:
                    4a:16:c7:35:37:f8:72:ae:22:d0:fe:72:f4:21:a1:
                    13:cb:cf:2e:9b:c8:07:02:b3:2f:76:4f:e7:44:db:
                    4b:6e:97:a1:19:c5:e8:70:af:ec:8a:c5:ba:5a:a7:
                    ba:6a:f5:1c:ea:3d:73:09:48:fe:e9:cd:8d:ee:39:
                    a5:23:0f:a8:04:c3:0e:c6:bf:68:a9:17:05:f5:d7:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4A:67:AF:99:21:F7:E0:02:45:48:D8:E9:C2:42:0E:0E:25:35:1B
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         09:ef:65:d6:d2:7d:c7:79:ab:b9:9f:04:ce:95:35:d3:50:d9:
         91:d3:d3:5f:43:5c:65:94:aa:25:74:3f:3f:25:dd:f7:a6:a1:
         39:e7:95:fd:8e:d4:02:a0:4b:49:80:2c:be:71:6f:43:b4:74:
         f6:55:e9:29:b6:7a:50:c9:98:1e:c9:15:5d:df:2d:d7:79:8f:
         02:fe:81:48:1b:e9:57:ca:18:90:90:80:16:3b:48:52:0e:2c:
         a9:16:87:0c:b4:ed:34:01:bc:c9:b5:fe:3f:7b:ea:9a:1d:fb:
         8f:ad:37:a3:c4:67:67:5d:e7:38:af:e1:6f:f9:2c:65:f0:fe:
         7e:6c:5c:8a:71:72:cd:83:79:2f:80:04:23:cb:04:aa:b0:91:
         26:cd:2d:be:51:26:eb:95:4a:ae:1e:42:32:25:87:7e:c0:27:
         3b:bd:6b:79:c0:85:c1:aa:4d:7f:7b:0c:bc:62:28:41:c2:6a:
         08:2e:38:9e:6e:66:8f:4e:07:f9:a3:82:d1:f8:8d:0c:d1:96:
         9b:f6:e4:e4:df:40:89:8a:b8:c2:f8:72:a6:de:80:7e:5f:96:
         65:78:cb:f0:f1:fe:c7:54:55:3c:f1:76:35:7a:e3:12:f3:c2:
         1a:97:2a:91:57:c5:40:1c:49:5c:6a:4c:9f:0d:a3:86:1f:07:
         f8:b0:ab:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org