Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/323830343a313264383a323030303a3a2f34382d3438203d3e20323633353030.roa
File:                     323830343a313264383a323030303a3a2f34382d3438203d3e20323633353030.roa (raw, json)
Hash identifier:          9hbFDqKcqdOf51l5echIQAg7uGaXMphuq4Y/2l/q450=
Subject key identifier:   D5:B6:1D:25:A5:3D:AB:56:38:A0:B2:B2:E1:F0:25:D5:FB:BE:D5:DA
Certificate issuer:       /CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
Certificate serial:       03A8CA36448759117916BA7C8F790F9F741F2ED8
Authority key identifier: 26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/323830343a313264383a323030303a3a2f34382d3438203d3e20323633353030.roa
Signing time:             Wed 20 Mar 2024 01:44:52 +0000
ROA not before:           Wed 20 Mar 2024 01:39:52 +0000
ROA not after:            Wed 19 Mar 2025 01:44:52 +0000
asID:                     263500
IP address blocks:        2804:12d8:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a8:ca:36:44:87:59:11:79:16:ba:7c:8f:79:0f:9f:74:1f:2e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
        Validity
            Not Before: Mar 20 01:39:52 2024 GMT
            Not After : Mar 19 01:44:52 2025 GMT
        Subject: CN=D5B61D25A53DAB5638A0B2B2E1F025D5FBBED5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:66:92:96:f4:bf:98:fc:27:8a:aa:a8:e6:
                    f5:49:2f:f9:58:28:6f:05:c2:21:c3:a5:cd:d7:8e:
                    bd:71:14:08:7f:cc:c9:33:30:61:f7:cb:f4:e6:fb:
                    9d:8d:5a:44:a1:bc:b2:be:c2:3b:37:8f:2d:f9:4a:
                    d3:b8:0b:a6:e4:c4:1f:cd:33:16:8d:4e:7c:4c:95:
                    47:60:f2:e9:3b:b2:e3:77:21:8e:07:ba:a2:fd:52:
                    03:22:1c:04:71:4e:65:03:f8:8e:93:f5:ca:34:d6:
                    f1:57:0c:b4:44:60:bf:bf:0c:00:1d:56:2a:36:27:
                    dc:98:72:da:06:71:d6:61:0f:ca:11:cc:ad:3f:0d:
                    6e:34:13:73:5b:b4:b5:6e:fd:10:be:aa:21:d7:59:
                    ea:b5:cc:51:12:33:a8:64:5f:ce:12:ee:cb:e6:da:
                    2b:70:f2:60:82:fd:56:a6:68:e8:e2:4b:40:4f:66:
                    eb:a5:86:f8:74:8e:48:c3:c5:39:e4:c3:97:75:76:
                    87:68:41:83:be:27:20:01:a8:87:91:cc:ba:44:b1:
                    5c:52:3f:39:21:32:83:50:4c:ed:23:fa:9d:a8:c2:
                    8a:37:2e:46:c4:d2:b0:75:19:6d:52:d8:3d:49:fc:
                    03:ce:07:44:c4:36:9d:9a:1c:88:18:a6:cf:b3:f5:
                    6f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B6:1D:25:A5:3D:AB:56:38:A0:B2:B2:E1:F0:25:D5:FB:BE:D5:DA
            X509v3 Authority Key Identifier:
                keyid:26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/323830343a313264383a323030303a3a2f34382d3438203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12d8:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:46:e7:d5:c3:e2:fd:40:c3:5e:aa:8f:a9:2a:39:cc:52:89:
         5d:dd:cf:c5:f0:24:8f:33:b7:5e:f5:22:71:54:6d:eb:48:12:
         4c:d4:22:6d:ba:9d:4a:7a:37:2e:3d:50:3b:ae:38:45:b7:4a:
         cf:81:e2:b1:66:b1:c7:96:06:02:81:34:0a:f1:36:32:ac:10:
         4d:ce:b6:68:86:95:8d:73:aa:ac:67:48:8c:cf:06:ee:f2:61:
         75:05:02:1f:8b:6c:02:fd:8b:8e:d0:6d:c2:48:b2:05:de:91:
         84:99:2b:e8:d5:0d:19:5c:81:36:20:e5:c3:a1:04:6f:76:17:
         20:73:e3:2b:07:14:bc:e7:c7:af:0e:02:96:85:12:c1:58:03:
         7d:69:89:2b:b6:11:80:46:ca:5e:f5:69:65:be:c8:6c:c8:6f:
         c6:a8:e8:87:60:4a:a6:21:1f:0f:a5:eb:8e:3b:38:e6:f0:83:
         d6:5d:f0:5c:11:63:c5:a9:28:9e:00:1e:f2:43:25:78:22:92:
         9c:f0:8c:8d:82:aa:47:64:43:bb:19:e5:e6:05:a1:d6:4c:3e:
         1e:ee:03:a4:99:b3:8d:83:97:b6:1a:ff:d0:2b:f4:9b:28:51:
         2d:8f:d0:17:94:81:3b:af:6e:26:ed:60:b4:f9:9f:12:9c:4f:
         b3:33:35:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org