Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/1/323830343a356666343a3a2f33322d3438203d3e20323639313336.roa
File:                     323830343a356666343a3a2f33322d3438203d3e20323639313336.roa (raw, json)
Hash identifier:          A4AJHbkaEBLq+p5pU+KMZuTCG6SV1vkM35woBbUXp2U=
Subject key identifier:   A2:AB:69:A4:A6:D7:D6:89:EC:78:BD:E5:E7:EC:D8:72:25:0C:A1:70
Certificate issuer:       /CN=679A1A74FD52C509FA787D3C276F759F064A02F1
Certificate serial:       0309F2DCCB281F5217C15EAE71EED5FB4826379B
Authority key identifier: 67:9A:1A:74:FD:52:C5:09:FA:78:7D:3C:27:6F:75:9F:06:4A:02:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/679A1A74FD52C509FA787D3C276F759F064A02F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/1/323830343a356666343a3a2f33322d3438203d3e20323639313336.roa
Signing time:             Thu 04 Apr 2024 00:44:32 +0000
ROA not before:           Thu 04 Apr 2024 00:39:32 +0000
ROA not after:            Thu 03 Apr 2025 00:44:32 +0000
asID:                     269136
IP address blocks:        2804:5ff4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:09:f2:dc:cb:28:1f:52:17:c1:5e:ae:71:ee:d5:fb:48:26:37:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679A1A74FD52C509FA787D3C276F759F064A02F1
        Validity
            Not Before: Apr  4 00:39:32 2024 GMT
            Not After : Apr  3 00:44:32 2025 GMT
        Subject: CN=A2AB69A4A6D7D689EC78BDE5E7ECD872250CA170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:09:c0:17:6e:07:45:6c:25:46:59:11:d2:
                    cd:96:71:79:f9:48:e8:21:e2:d1:34:5e:19:64:ed:
                    e8:82:fa:79:87:e6:1d:41:23:b2:ac:ef:0c:a9:06:
                    dc:31:ec:19:89:f4:ec:36:c8:f0:0e:ba:e1:e7:ec:
                    8e:32:d5:47:4c:51:b9:ed:25:26:9c:bc:1a:ea:fb:
                    bb:fe:f5:d1:c7:65:ab:b4:99:11:14:12:47:8a:3a:
                    5c:d5:dc:f5:a8:51:fa:88:44:63:0d:62:0f:0e:3c:
                    57:02:2e:dc:f6:ea:e6:89:04:63:8d:3e:5d:65:5f:
                    b6:67:46:1e:8b:8e:cf:27:5f:81:6d:49:d7:68:0c:
                    fe:4e:cb:07:b5:9c:86:83:60:8b:a5:8c:5f:47:58:
                    76:c3:6e:48:00:ba:47:22:48:f7:9c:1a:71:cb:c3:
                    a5:6e:a5:f3:ea:1f:85:0d:5e:53:84:fc:2a:8c:93:
                    66:be:ec:e2:08:83:3b:64:35:39:13:b5:f2:92:f2:
                    4d:ba:34:7a:46:3c:f1:f5:b0:b1:ae:89:c3:ed:29:
                    c0:cc:0c:72:e4:db:2d:3e:34:5d:90:96:4a:12:7e:
                    36:97:db:5d:19:99:73:35:d1:90:49:e3:d0:c4:84:
                    b8:c9:86:4c:56:67:83:a0:8d:cc:2c:fb:46:59:4c:
                    85:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AB:69:A4:A6:D7:D6:89:EC:78:BD:E5:E7:EC:D8:72:25:0C:A1:70
            X509v3 Authority Key Identifier:
                keyid:67:9A:1A:74:FD:52:C5:09:FA:78:7D:3C:27:6F:75:9F:06:4A:02:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/1/679A1A74FD52C509FA787D3C276F759F064A02F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/679A1A74FD52C509FA787D3C276F759F064A02F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/1/323830343a356666343a3a2f33322d3438203d3e20323639313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ff4::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:4c:46:69:65:68:07:b5:8e:1d:7c:56:17:b5:da:ff:70:
         25:8a:26:db:c3:f9:2c:8d:41:ca:14:35:14:63:f2:2b:db:fa:
         9d:08:f7:43:2d:ae:6b:79:f7:75:c3:a6:ae:97:6e:fb:a1:8c:
         d6:fe:e4:26:e8:a8:50:57:ad:82:8a:aa:60:a8:9f:45:0a:2e:
         5c:b6:72:50:ec:cf:41:15:ec:56:32:48:9a:49:13:24:73:c7:
         12:63:7e:7a:68:82:bc:e6:76:37:f3:5d:35:9d:e9:06:42:56:
         cd:da:cf:d8:6c:99:b5:0b:cd:5d:e7:27:31:44:89:86:26:21:
         67:58:77:d0:4d:28:65:34:7a:25:8b:15:e5:b4:92:f6:00:b7:
         c4:c1:e7:68:03:f6:71:f1:70:81:8b:14:cc:48:69:6c:2f:2e:
         1f:1e:ed:31:9e:97:ec:17:2f:77:c1:47:83:61:3d:a7:d5:76:
         89:e2:77:5d:55:54:93:9a:d5:e1:75:28:a7:64:b2:0a:df:d1:
         d3:77:e1:67:72:16:95:5f:6a:70:d6:f3:ed:91:ec:e3:9b:2f:
         68:fc:3d:cd:8b:aa:b7:d1:0e:c6:68:ce:53:f6:9f:f7:e1:b9:
         5d:51:c9:60:7e:d5:e8:2d:58:95:2e:82:e1:81:e9:80:63:1d:
         e1:2b:ca:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org