Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a343030303a3a2f33342d3334203d3e20323730393436.roa
File:                     323830343a373365633a343030303a3a2f33342d3334203d3e20323730393436.roa (raw, json)
Hash identifier:          FtKt2ScyndMQ4iQqZ7/GaYRJR0bAhrFUySmAgC1UYhU=
Subject key identifier:   08:21:45:6D:69:11:FD:B3:FD:AE:48:8F:A6:69:A0:5F:68:6B:4D:19
Certificate issuer:       /CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Certificate serial:       02BDEED97A94B7B0C75665A3966FD0247237B04B
Authority key identifier: 87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a343030303a3a2f33342d3334203d3e20323730393436.roa
Signing time:             Sat 17 Feb 2024 05:23:53 +0000
ROA not before:           Sat 17 Feb 2024 05:18:53 +0000
ROA not after:            Sat 15 Feb 2025 05:23:53 +0000
asID:                     270946
IP address blocks:        2804:73ec:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bd:ee:d9:7a:94:b7:b0:c7:56:65:a3:96:6f:d0:24:72:37:b0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
        Validity
            Not Before: Feb 17 05:18:53 2024 GMT
            Not After : Feb 15 05:23:53 2025 GMT
        Subject: CN=0821456D6911FDB3FDAE488FA669A05F686B4D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:73:b3:98:fd:e1:2e:a4:11:29:25:46:11:
                    0e:66:05:b1:4a:cd:0f:85:b6:3a:49:e8:5a:8b:8f:
                    5a:e7:2f:61:48:34:ca:1c:0b:04:de:bd:12:02:9e:
                    51:e9:29:75:b5:d4:85:8b:28:fd:7e:ab:66:ae:05:
                    9f:9a:eb:2a:e7:8d:aa:a0:da:12:5f:9b:f1:5a:e8:
                    03:2b:ab:9e:00:25:56:b7:1a:75:cf:81:34:9c:a5:
                    91:41:30:1b:73:2d:3f:83:a7:a7:64:f1:57:8c:cb:
                    93:b0:56:51:35:5b:71:ba:ba:a0:3d:27:fb:3d:8d:
                    f7:8b:5d:22:4a:4f:3b:b2:32:7a:d0:cf:a7:d6:39:
                    1e:cc:4c:f5:dd:4e:76:0e:53:6b:dc:24:bd:84:3f:
                    9c:93:9e:44:6e:03:92:39:b5:06:08:95:8e:93:be:
                    53:a7:e4:e2:fb:d3:b1:50:57:89:78:6c:94:6f:92:
                    36:17:eb:fa:20:88:69:5e:1b:6e:dc:19:c2:bd:7e:
                    2c:19:96:9b:1b:0b:40:5a:3b:d6:0a:32:50:42:6d:
                    07:6e:c8:2c:d5:ba:ea:0c:9d:f6:55:44:1b:b1:54:
                    47:d8:f6:9c:72:24:c1:a2:11:15:03:ec:05:a8:1d:
                    8f:91:2c:43:23:24:bd:bd:f5:29:88:06:98:8a:c8:
                    68:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:21:45:6D:69:11:FD:B3:FD:AE:48:8F:A6:69:A0:5F:68:6B:4D:19
            X509v3 Authority Key Identifier:
                keyid:87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a343030303a3a2f33342d3334203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ec:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:b8:d9:5d:fe:1b:af:6d:af:ff:d5:cb:05:aa:58:89:a4:b2:
         fd:4d:3c:f6:4b:a1:de:d0:a5:e2:54:18:e3:8a:49:8c:42:f9:
         fb:2d:75:49:1e:c9:86:a9:17:01:7e:46:d8:7b:3f:a0:64:41:
         75:94:89:2e:9b:69:ee:81:a2:0d:7a:4c:6e:cb:f5:83:01:f5:
         31:04:08:8f:66:f9:d7:62:79:52:b2:93:e1:e6:37:7f:9a:48:
         96:f4:30:f9:d5:66:8a:52:31:bf:b1:3a:93:e9:14:85:d2:74:
         d6:4f:5c:f4:52:64:3a:78:80:3d:9b:04:c7:60:1a:ed:0c:25:
         9b:91:0c:47:ff:b8:53:80:06:de:d0:6a:37:58:ba:33:8a:ee:
         dd:c5:16:8c:21:3f:e0:ec:49:0c:51:0e:e6:f6:87:9c:83:c5:
         7e:85:53:ea:04:91:f2:63:e2:87:6f:b1:d4:33:a6:57:0c:ce:
         f1:0d:bf:76:8e:c2:aa:c7:87:df:78:31:75:39:16:19:e3:cd:
         c8:43:7e:e9:d8:f8:32:7f:d7:6d:b0:35:37:00:fd:66:9b:e3:
         d9:68:02:25:18:01:5c:6f:bf:ab:31:87:f7:31:55:91:60:b7:
         77:49:fd:3c:2a:cc:d1:2c:15:df:54:47:27:c6:65:83:e2:45:
         3f:ff:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org