Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/1/323830343a323030383a3a2f33322d3438203d3e20323634343631.roa
File:                     323830343a323030383a3a2f33322d3438203d3e20323634343631.roa (raw, json)
Hash identifier:          2mgZEk30uxxdzrQMEexUtx6/kzq0PgZQdAVS2CSlCmM=
Subject key identifier:   CF:20:E1:ED:14:E0:A2:DA:E4:D5:70:D8:5E:1F:68:F7:16:8B:E0:3C
Certificate issuer:       /CN=6DD4F78FE6E91C69A282EBE3CC897CF63884BD56
Certificate serial:       12151D7EC21AC4D5CBB1D4A04D69D7971A19A687
Authority key identifier: 6D:D4:F7:8F:E6:E9:1C:69:A2:82:EB:E3:CC:89:7C:F6:38:84:BD:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD4F78FE6E91C69A282EBE3CC897CF63884BD56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/1/323830343a323030383a3a2f33322d3438203d3e20323634343631.roa
Signing time:             Thu 04 Apr 2024 20:34:34 +0000
ROA not before:           Thu 04 Apr 2024 20:29:34 +0000
ROA not after:            Thu 03 Apr 2025 20:34:34 +0000
asID:                     264461
IP address blocks:        2804:2008::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:15:1d:7e:c2:1a:c4:d5:cb:b1:d4:a0:4d:69:d7:97:1a:19:a6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD4F78FE6E91C69A282EBE3CC897CF63884BD56
        Validity
            Not Before: Apr  4 20:29:34 2024 GMT
            Not After : Apr  3 20:34:34 2025 GMT
        Subject: CN=CF20E1ED14E0A2DAE4D570D85E1F68F7168BE03C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:cc:b8:2c:43:ac:b6:db:c5:1a:47:dd:72:
                    97:bb:8b:f6:96:cb:63:57:1b:f3:3a:5b:e4:69:92:
                    41:ea:c1:d1:f4:1c:41:dd:45:18:e3:61:d0:5c:f9:
                    0d:0d:73:8c:63:01:74:28:8d:90:a4:0b:29:45:0e:
                    a7:4f:2f:54:c3:c6:42:1f:ff:c1:b9:2c:43:28:f3:
                    d2:91:65:fb:ec:a1:3d:7d:0c:84:50:2b:61:9e:db:
                    dd:55:9d:73:61:cc:a5:fe:d4:0a:95:df:4b:aa:fe:
                    94:eb:e6:7a:42:df:ee:a4:a6:12:0e:d3:96:79:c0:
                    5e:34:eb:cc:49:40:5f:74:25:62:df:10:45:37:ad:
                    4c:44:da:f3:cc:c6:fd:fe:0a:50:9f:a7:9b:1c:38:
                    4b:03:e4:fd:35:43:c6:27:cb:1b:db:77:b2:43:14:
                    40:b8:b8:e4:a9:2d:01:e7:d8:64:cf:02:12:43:0b:
                    76:7d:4c:1d:25:c1:f0:c2:ce:f2:05:a8:70:70:6e:
                    eb:13:34:de:c0:15:e7:2c:06:db:8e:3b:e5:36:99:
                    cc:d9:79:08:5c:ec:0e:7e:24:ae:ec:68:12:9c:4f:
                    db:07:a6:d2:d7:00:d8:70:fd:87:74:89:46:c4:11:
                    c7:db:66:97:3a:87:1d:16:88:b1:ca:19:97:95:71:
                    e7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:20:E1:ED:14:E0:A2:DA:E4:D5:70:D8:5E:1F:68:F7:16:8B:E0:3C
            X509v3 Authority Key Identifier:
                keyid:6D:D4:F7:8F:E6:E9:1C:69:A2:82:EB:E3:CC:89:7C:F6:38:84:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/1/6DD4F78FE6E91C69A282EBE3CC897CF63884BD56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD4F78FE6E91C69A282EBE3CC897CF63884BD56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/1/323830343a323030383a3a2f33322d3438203d3e20323634343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2008::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:15:c8:bb:9b:ac:bc:81:0c:11:36:a6:b4:11:f2:fa:04:eb:
         c3:bb:1b:d8:8b:10:e2:17:ed:0a:ec:51:11:43:b4:0a:b4:34:
         8f:cf:be:fb:14:da:c4:e6:76:99:a0:63:18:09:13:95:32:69:
         d7:51:76:bf:ea:59:87:a3:2b:1c:1f:ec:c0:41:cf:e0:de:9b:
         55:7a:90:a5:52:3a:5d:3f:4f:93:54:80:12:fc:64:95:1d:f0:
         d0:8f:63:8f:ab:86:b4:46:92:7e:36:00:d8:4b:37:58:f4:8f:
         d1:db:bf:23:f7:bc:62:60:43:f2:f7:c1:eb:38:4d:69:0d:6f:
         4f:0c:6b:b8:85:ca:7e:93:61:96:e8:63:ce:e0:e5:b2:f9:cb:
         b0:85:e0:ad:27:48:73:65:56:9f:7e:01:7e:41:03:a3:54:0c:
         6f:d1:06:85:93:44:03:5a:67:7b:c0:19:23:2f:e0:30:10:23:
         f0:58:a2:1f:fa:d3:ae:6f:de:9e:03:8f:1a:22:7f:7d:04:52:
         e2:ce:33:dd:cc:4b:29:52:d3:72:d0:2f:26:47:3f:16:63:f3:
         7f:28:78:8b:5a:43:76:4f:14:b9:05:07:72:32:a3:24:c9:6c:
         79:ae:b6:d1:f0:29:6b:e8:63:aa:cf:33:84:c3:cb:44:a1:6a:
         04:9b:c5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org