Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/323830343a313264383a333330303a3a2f34302d3430203d3e20323633353030.roa
File:                     323830343a313264383a333330303a3a2f34302d3430203d3e20323633353030.roa (raw, json)
Hash identifier:          h+w+rmChVbMhqTJgeBlsr8WFidpto6eofiRtEwBmzRA=
Subject key identifier:   CE:A6:E3:11:68:44:DE:2E:3A:04:62:96:43:4C:CB:57:FB:16:53:0B
Certificate issuer:       /CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
Certificate serial:       3890BF0638FD1BA335FB2D5E86DF341D55D0F9DA
Authority key identifier: 26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/323830343a313264383a333330303a3a2f34302d3430203d3e20323633353030.roa
Signing time:             Wed 20 Mar 2024 01:44:51 +0000
ROA not before:           Wed 20 Mar 2024 01:39:51 +0000
ROA not after:            Wed 19 Mar 2025 01:44:51 +0000
asID:                     263500
IP address blocks:        2804:12d8:3300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:90:bf:06:38:fd:1b:a3:35:fb:2d:5e:86:df:34:1d:55:d0:f9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
        Validity
            Not Before: Mar 20 01:39:51 2024 GMT
            Not After : Mar 19 01:44:51 2025 GMT
        Subject: CN=CEA6E3116844DE2E3A046296434CCB57FB16530B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a6:1a:e7:97:85:ad:59:14:b3:47:50:08:e3:
                    74:4f:a6:8f:c8:69:c5:fc:cc:1a:3a:22:3b:1e:4f:
                    07:05:4a:31:ae:9d:1e:fd:e3:6b:3a:6a:df:99:e9:
                    14:bf:bb:58:79:3b:85:33:34:c0:84:93:83:25:e0:
                    a8:df:88:59:e2:5c:64:c7:88:0f:f3:7c:ff:a9:32:
                    01:a2:98:7b:c2:3c:de:a3:8f:dd:36:bf:c1:f0:f3:
                    3e:7f:61:64:a5:84:c0:0f:9e:68:3e:2a:0c:62:22:
                    2d:59:34:5f:77:83:84:dd:a1:cb:5c:30:e2:47:75:
                    8b:c3:ab:c0:41:75:fa:d1:d2:c9:32:8c:8d:76:aa:
                    9f:02:d7:67:a1:87:8e:eb:fb:d1:24:6d:8d:ee:3a:
                    d0:ec:7f:90:e5:49:d4:39:01:72:23:b4:e9:20:42:
                    b8:86:1c:61:f2:80:4f:12:f0:61:21:be:1a:88:76:
                    17:04:07:2c:84:33:59:42:d2:be:a1:57:f2:b6:3a:
                    8b:0e:e9:cc:b2:76:2d:06:f1:62:96:9c:68:2f:14:
                    91:32:bf:c8:64:bc:38:56:0b:89:b8:27:d1:78:a0:
                    81:76:a2:01:b4:6b:57:a7:25:09:cf:60:9a:78:ea:
                    e4:c1:62:f5:f2:0b:6f:4b:e3:bc:0f:67:a8:06:63:
                    bd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A6:E3:11:68:44:DE:2E:3A:04:62:96:43:4C:CB:57:FB:16:53:0B
            X509v3 Authority Key Identifier:
                keyid:26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/323830343a313264383a333330303a3a2f34302d3430203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12d8:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:31:83:4f:43:41:19:46:a4:53:a4:2b:aa:67:02:72:a0:0e:
         e2:d3:3e:53:c4:a1:d8:d4:4e:be:a5:3f:44:1f:74:82:86:6a:
         04:40:bc:43:7f:91:c6:a7:1b:aa:8f:23:01:86:1c:cc:0c:2b:
         19:8a:18:60:b8:29:70:e2:be:79:e8:be:a2:61:65:4c:c0:9c:
         60:45:da:95:3d:fe:93:ec:0b:02:ce:42:96:68:dc:c6:97:5b:
         41:3a:c8:9d:9c:7a:05:b2:3f:fa:ea:e0:43:66:46:1c:75:10:
         09:78:5c:e2:ce:ac:78:a7:9f:16:a9:91:85:10:d8:6a:e7:f6:
         41:10:0d:4c:4f:d8:61:81:c6:6d:b6:b6:c8:49:ab:4c:c1:22:
         0c:5a:6c:9d:5b:8a:99:51:6d:39:2c:0b:db:52:f6:9c:59:9e:
         bc:d4:35:03:d9:49:e8:12:b5:5d:6b:7b:a2:2a:da:ae:1d:59:
         96:15:36:8b:06:01:20:dc:da:ae:b2:51:c8:d1:22:35:01:11:
         78:73:6d:bf:6b:5d:e3:80:24:98:da:ed:84:40:51:c8:9f:f3:
         06:3d:a0:4e:7b:3f:ec:6d:43:13:8f:dc:37:6f:6b:8c:74:ae:
         2d:b3:ec:82:dd:8c:ce:ce:0b:75:4c:10:3a:43:0a:fb:4d:64:
         85:8b:8f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org