Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a343030303a3a2f33372d3337203d3e20323633343231.roa
File:                     323830343a313630303a343030303a3a2f33372d3337203d3e20323633343231.roa (raw, json)
Hash identifier:          xIxdErUKtTzrHFGSTCcYzPAEMGGQkSJsq9uj2uZwjXg=
Subject key identifier:   C5:10:29:CE:F1:5E:E9:2C:9E:1D:F6:49:3E:88:51:84:39:BF:D2:DD
Certificate issuer:       /CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
Certificate serial:       38598E926C2569F02AE5AD7465142EE539B6B075
Authority key identifier: B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a343030303a3a2f33372d3337203d3e20323633343231.roa
Signing time:             Mon 04 Dec 2023 18:55:19 +0000
ROA not before:           Mon 04 Dec 2023 18:50:19 +0000
ROA not after:            Mon 02 Dec 2024 18:55:19 +0000
asID:                     263421
IP address blocks:        2804:1600:4000::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:59:8e:92:6c:25:69:f0:2a:e5:ad:74:65:14:2e:e5:39:b6:b0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
        Validity
            Not Before: Dec  4 18:50:19 2023 GMT
            Not After : Dec  2 18:55:19 2024 GMT
        Subject: CN=C51029CEF15EE92C9E1DF6493E88518439BFD2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3a:92:57:75:56:90:59:18:91:b2:b9:23:91:
                    f1:44:d8:01:f5:48:98:76:08:c5:b2:00:af:4a:34:
                    a9:b5:b9:58:b6:c4:a7:49:4f:ab:40:f7:e5:34:e9:
                    83:c3:fc:bb:be:60:37:43:88:c3:07:34:65:72:8c:
                    c2:7b:a9:f3:db:b8:f8:1f:f3:f8:86:88:1c:ec:cf:
                    13:50:2b:4f:4c:47:29:1f:ec:2f:df:86:0d:46:89:
                    12:22:e9:c9:b6:c9:10:ee:b4:25:e9:12:46:96:d0:
                    9b:cd:a7:58:fe:8a:3f:87:6b:f3:7d:05:b9:e8:1f:
                    4e:42:f8:68:9b:67:38:0b:49:bf:d1:d9:ff:91:31:
                    d3:c5:7b:04:ec:e3:c2:e0:3f:4c:0f:69:c8:b8:f4:
                    4b:7b:02:ff:68:37:af:df:67:5a:a9:6d:0d:a6:db:
                    57:03:81:f1:10:74:25:09:f6:75:e6:41:fc:11:4e:
                    24:cf:e1:92:f8:89:b9:29:99:7f:c9:85:72:da:b9:
                    3f:4d:53:e9:30:fc:48:28:b3:02:20:14:28:6e:33:
                    07:0b:dd:37:90:4e:00:e2:81:af:ad:d0:ab:c1:6a:
                    81:c8:48:82:ba:3c:1e:16:b9:c0:f7:15:ba:90:34:
                    68:ef:77:99:09:44:30:31:73:e1:35:09:da:63:d9:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:10:29:CE:F1:5E:E9:2C:9E:1D:F6:49:3E:88:51:84:39:BF:D2:DD
            X509v3 Authority Key Identifier:
                keyid:B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a343030303a3a2f33372d3337203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         85:82:79:a3:cf:22:b1:95:65:1e:e9:9e:db:ea:52:c7:ae:0d:
         45:7f:58:e9:cf:9b:89:3a:d8:b2:ba:4d:45:77:04:52:19:8f:
         23:be:28:d4:57:ba:6e:fe:af:1f:01:fc:d4:3c:25:29:cb:e8:
         e9:fb:c6:5d:ae:37:69:cf:8a:66:11:82:22:8e:7e:06:35:89:
         d8:0d:8c:15:67:f2:86:05:c6:8a:ad:7d:70:dc:ef:b7:f7:05:
         8b:f8:f5:c7:e0:ed:e4:c5:b2:c0:c7:5e:86:42:77:de:56:ef:
         3d:28:9d:4a:ce:bb:bc:39:90:a8:6f:21:26:6e:39:47:2e:95:
         ef:af:e6:c5:ef:d1:f1:63:4a:b4:da:aa:f2:48:06:66:8b:2e:
         f6:d1:78:22:93:7f:70:95:24:05:b6:ba:5c:fa:29:1c:67:54:
         d6:c2:aa:bb:22:93:55:f9:7b:43:d9:20:26:5d:c4:79:a1:f4:
         a1:ea:79:9b:67:73:fb:ef:16:73:0e:03:4b:bb:fe:ed:27:7d:
         6b:11:29:36:03:96:d9:58:c7:3a:1d:83:9b:21:61:b2:fe:a2:
         8c:77:a0:de:85:91:42:43:ca:97:c0:ee:02:ec:13:0b:44:66:
         f4:42:0e:3e:e8:cc:36:ca:21:ba:bc:2c:a2:d8:67:67:31:9b:
         3e:52:00:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org