Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/323830343a6132303a3a2f33322d3336203d3e20323633303234.roa
File:                     323830343a6132303a3a2f33322d3336203d3e20323633303234.roa (raw, json)
Hash identifier:          UMbOd/9nYrEbw4m46G4yimL/bc6hixNhXju6FsCf7/c=
Subject key identifier:   FE:73:1C:A0:88:9C:01:FB:7C:A8:1C:F9:FD:19:00:D4:EA:9A:0B:C3
Certificate issuer:       /CN=A509FA9FFA9F53D84F058F7156C291C01AD37130
Certificate serial:       67DCCFCFE5375034CCA5F61EB2F3D038DD0698E8
Authority key identifier: A5:09:FA:9F:FA:9F:53:D8:4F:05:8F:71:56:C2:91:C0:1A:D3:71:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A509FA9FFA9F53D84F058F7156C291C01AD37130.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/323830343a6132303a3a2f33322d3336203d3e20323633303234.roa
Signing time:             Wed 17 May 2023 14:21:41 +0000
ROA not before:           Wed 17 May 2023 14:16:41 +0000
ROA not after:            Wed 15 May 2024 14:21:41 +0000
asID:                     263024
IP address blocks:        2804:a20::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:dc:cf:cf:e5:37:50:34:cc:a5:f6:1e:b2:f3:d0:38:dd:06:98:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A509FA9FFA9F53D84F058F7156C291C01AD37130
        Validity
            Not Before: May 17 14:16:41 2023 GMT
            Not After : May 15 14:21:41 2024 GMT
        Subject: CN=FE731CA0889C01FB7CA81CF9FD1900D4EA9A0BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:7e:8e:e7:5d:c3:06:bc:31:f9:f6:7d:ab:
                    35:4c:cd:b9:9e:97:a1:c8:f3:bd:65:7e:2b:0a:fd:
                    35:8e:75:28:4f:7f:03:c8:30:3f:17:4f:54:9b:f1:
                    41:78:b0:41:97:4f:c9:b3:7a:71:1f:e1:18:02:14:
                    70:ad:0b:e8:f8:5c:c8:75:17:90:39:25:1b:1d:51:
                    7a:9f:a9:9c:d6:f7:84:e2:e4:2b:8e:19:37:9d:2d:
                    2b:ba:04:e0:f4:e7:ae:2c:f2:63:c2:61:eb:2f:d1:
                    1b:16:22:73:24:40:a1:c0:20:da:98:b8:03:10:63:
                    14:73:11:c0:9d:25:a0:57:2c:dc:ab:56:66:96:6e:
                    6d:ba:eb:1c:f0:fe:d5:36:03:b7:52:26:63:c5:48:
                    2e:e3:be:04:a2:69:d6:0c:09:52:16:b3:c0:f9:21:
                    ea:24:ed:de:1b:6d:17:e3:34:6a:29:ee:80:d3:bd:
                    e1:f1:a5:93:d4:af:fb:22:e1:f7:4f:b7:de:a4:24:
                    82:ce:53:06:11:47:8b:2a:b6:1c:05:b8:f9:46:3a:
                    f9:ef:b1:ca:a0:32:19:6c:5f:e9:90:71:11:31:a0:
                    f3:8e:01:fa:ae:66:83:f2:e6:6c:da:2d:ea:9f:71:
                    60:18:43:b9:c3:25:cd:cf:72:0e:1c:45:13:4a:67:
                    aa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:73:1C:A0:88:9C:01:FB:7C:A8:1C:F9:FD:19:00:D4:EA:9A:0B:C3
            X509v3 Authority Key Identifier:
                keyid:A5:09:FA:9F:FA:9F:53:D8:4F:05:8F:71:56:C2:91:C0:1A:D3:71:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/A509FA9FFA9F53D84F058F7156C291C01AD37130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A509FA9FFA9F53D84F058F7156C291C01AD37130.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/323830343a6132303a3a2f33322d3336203d3e20323633303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:2c:ee:ba:c4:0f:9d:6d:08:f5:f1:6a:81:1f:66:8f:1c:48:
         96:7f:01:2b:46:0e:f7:8f:0a:3b:0c:2a:3f:2e:0d:59:d7:f6:
         dd:b7:63:47:34:80:9d:bd:75:93:50:0a:82:31:e6:7b:45:15:
         43:37:e2:34:48:30:2c:8a:6f:01:8b:7d:cf:97:66:76:f8:89:
         86:80:8e:37:3e:be:d7:b6:6e:01:81:ee:d3:e9:8f:e6:1c:e3:
         ba:0a:7b:62:d2:8e:a1:93:8b:e8:44:94:ca:fc:45:ec:fd:bd:
         14:41:c3:2b:dd:97:a0:80:ba:05:bd:05:3e:b1:67:9e:f1:3c:
         45:da:5e:16:e8:05:60:f2:0b:f6:f9:57:39:58:e6:a3:28:41:
         7c:8a:26:e2:8c:1c:49:ea:9c:f8:74:8c:54:65:f9:6f:ff:5f:
         9f:aa:ad:b2:85:77:db:43:8e:77:90:11:04:d9:78:70:d2:85:
         34:7a:49:c3:a4:35:c3:ff:bd:66:05:9f:71:ad:bf:87:81:f3:
         5f:45:32:be:c0:d3:00:8f:3a:70:ce:e2:bb:ec:7b:27:2e:48:
         76:9d:66:96:eb:34:2c:3b:ca:5b:cb:c9:2f:15:d8:3e:99:c0:
         1f:6e:67:75:8a:5b:b8:05:75:f9:e4:7a:70:89:51:de:59:ee:
         71:65:00:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org