Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/323830343a313264383a3a2f33322d3332203d3e20323633353030.roa
File:                     323830343a313264383a3a2f33322d3332203d3e20323633353030.roa (raw, json)
Hash identifier:          SWhib+aHIRvV/xP5p9Zdh0OosIB9PVkvfCR0xdyHl48=
Subject key identifier:   5D:B9:30:64:C0:81:E7:6F:A5:74:F4:B2:73:4D:A2:7B:D2:97:17:CE
Certificate issuer:       /CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
Certificate serial:       71376B520A14BB32640F1659EAF78F89F9B48DDC
Authority key identifier: 26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/323830343a313264383a3a2f33322d3332203d3e20323633353030.roa
Signing time:             Wed 20 Mar 2024 01:44:51 +0000
ROA not before:           Wed 20 Mar 2024 01:39:51 +0000
ROA not after:            Wed 19 Mar 2025 01:44:51 +0000
asID:                     263500
IP address blocks:        2804:12d8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:37:6b:52:0a:14:bb:32:64:0f:16:59:ea:f7:8f:89:f9:b4:8d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
        Validity
            Not Before: Mar 20 01:39:51 2024 GMT
            Not After : Mar 19 01:44:51 2025 GMT
        Subject: CN=5DB93064C081E76FA574F4B2734DA27BD29717CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:b0:09:9b:8b:bc:28:38:02:8a:41:18:db:
                    51:0c:b9:3e:bb:23:a8:39:56:f3:c7:df:5d:33:48:
                    3d:7c:fa:59:2f:a7:ca:3c:c5:e3:83:93:89:74:1c:
                    3f:5d:ca:dd:ee:df:2a:b3:be:bf:9e:e8:ec:94:04:
                    ae:4a:c8:cc:74:1c:0a:26:c4:7d:4e:e9:e0:91:a3:
                    82:64:b5:b8:e7:53:63:8f:71:ae:f5:3c:72:ce:34:
                    b5:5e:b1:25:16:fc:73:da:a5:91:a4:ca:48:d5:92:
                    99:30:84:f9:7b:45:90:22:63:ac:0d:a1:ca:77:ac:
                    28:5c:64:b0:9e:0f:61:80:10:e3:2a:29:c8:b0:cc:
                    90:19:5e:92:7c:3a:b3:09:d9:c2:1f:7b:c0:11:48:
                    35:7b:c1:03:22:e3:0a:47:e1:7e:65:8a:ac:d7:d2:
                    f8:8a:6a:5c:eb:3c:78:51:9b:74:6c:a5:89:18:44:
                    2e:b9:76:69:5a:08:f6:a9:96:6a:79:36:c1:a2:f4:
                    d8:2e:30:1b:3e:c7:6f:b9:e8:69:b5:7f:72:e1:c6:
                    c0:05:f2:be:0f:45:c3:77:61:80:d8:5f:ba:3d:3b:
                    af:cd:0d:00:ba:fd:81:e5:e4:a3:17:f6:bc:2a:cf:
                    de:55:01:8e:36:8e:0f:8a:9e:e4:7b:4e:ff:2b:67:
                    1f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B9:30:64:C0:81:E7:6F:A5:74:F4:B2:73:4D:A2:7B:D2:97:17:CE
            X509v3 Authority Key Identifier:
                keyid:26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/323830343a313264383a3a2f33322d3332203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:a6:8d:6e:70:a3:eb:a7:26:3d:ed:d9:6c:e2:9d:16:cd:22:
         b4:a7:e1:9c:70:16:e6:7d:05:13:08:d1:7f:d2:44:ad:3a:56:
         f2:71:f1:06:e9:db:c9:ba:8d:d1:44:12:65:af:1b:d3:44:ca:
         28:71:e4:07:38:d0:60:56:d4:ae:3d:1d:5c:8c:5b:55:b1:55:
         c9:e5:86:d0:ce:65:93:b6:5c:cd:d2:57:64:90:7d:33:ab:9a:
         c0:11:1b:a2:bc:67:fd:c5:63:0b:28:33:ba:5b:87:f8:8f:1e:
         99:b8:7d:ff:ab:66:d9:f9:7b:ec:ae:10:0f:33:60:f9:6d:47:
         f8:54:9f:f0:9d:08:fb:33:36:7d:b7:35:0d:2d:f0:48:ac:9a:
         e8:db:36:4f:c8:b5:d8:69:e2:fb:86:d8:5f:54:f7:cd:72:df:
         c0:07:74:da:cd:0b:33:5d:f2:01:e8:ca:14:28:0d:f4:ff:53:
         76:41:9a:62:73:44:d3:d1:3d:74:4b:4c:b8:c0:37:7a:58:97:
         5a:a2:7a:7d:6f:92:3b:4f:a0:b1:80:8f:54:66:12:e7:c2:31:
         9d:09:7a:15:7e:e9:8b:e0:3c:6a:0a:91:2c:df:9c:f7:a6:9f:
         05:c7:74:ff:19:36:5e:ec:29:5e:4b:09:2b:90:f7:d2:28:59:
         2e:3c:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org