Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/1/323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa
File:                     323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa (raw, json)
Hash identifier:          n8B4wcL+8OFAINh1r1s7q4g+hV2xDA/MCAf7E+8HN4o=
Subject key identifier:   6F:3B:C1:F4:D7:1B:6B:26:C2:BC:7C:BB:1F:AF:2A:62:4D:33:7F:8D
Certificate issuer:       /CN=D031B487E72103F23BC5CC66124308EAD566D33F
Certificate serial:       73D5BC239F8805610D6FE58376848232F421685D
Authority key identifier: D0:31:B4:87:E7:21:03:F2:3B:C5:CC:66:12:43:08:EA:D5:66:D3:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D031B487E72103F23BC5CC66124308EAD566D33F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/1/323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa
Signing time:             Tue 23 Jan 2024 12:52:23 +0000
ROA not before:           Tue 23 Jan 2024 12:47:23 +0000
ROA not after:            Tue 21 Jan 2025 12:52:23 +0000
asID:                     273679
IP address blocks:        2801:80:4000::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d5:bc:23:9f:88:05:61:0d:6f:e5:83:76:84:82:32:f4:21:68:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D031B487E72103F23BC5CC66124308EAD566D33F
        Validity
            Not Before: Jan 23 12:47:23 2024 GMT
            Not After : Jan 21 12:52:23 2025 GMT
        Subject: CN=6F3BC1F4D71B6B26C2BC7CBB1FAF2A624D337F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:14:f1:48:8d:7e:5e:f8:04:e5:79:a1:18:
                    1a:72:c4:21:25:cb:9b:c5:e2:06:e1:0b:4f:49:6f:
                    4e:e7:21:89:68:4e:81:66:42:a2:ca:b3:66:71:f4:
                    c8:f9:d9:3a:eb:84:93:91:66:9e:44:19:f6:9e:bc:
                    fb:ba:4c:ce:c6:82:e4:31:27:cc:1e:6c:3d:85:6e:
                    bf:4a:0b:50:47:45:2f:8e:4c:b3:75:67:78:92:24:
                    38:3d:c2:6a:7d:c7:e2:7c:9a:1f:9a:d5:6f:43:5a:
                    1b:58:29:2f:20:13:ca:27:04:39:51:73:29:49:4f:
                    83:70:be:dc:ad:39:df:23:0f:9d:e5:a4:8d:f7:26:
                    e5:c4:4e:5c:88:f1:da:24:1b:a1:ce:f0:c8:79:dc:
                    82:b2:3d:5b:e4:4b:ee:be:b2:30:c8:ac:b0:c0:f4:
                    d5:cd:38:72:97:d6:80:18:58:be:dd:16:f0:b6:88:
                    fe:88:84:7f:f7:e6:92:ab:82:ef:6f:be:a0:0f:ea:
                    04:27:93:a0:e5:54:8a:fe:f3:ea:4e:c4:9e:04:1d:
                    30:e5:fb:d2:5f:6f:5f:a8:23:7c:32:75:47:c0:dd:
                    37:01:2e:fb:f8:30:5f:de:6d:83:9d:52:ff:02:8f:
                    e2:95:42:f9:00:8e:33:7f:6f:6a:4f:61:ac:6f:2b:
                    37:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3B:C1:F4:D7:1B:6B:26:C2:BC:7C:BB:1F:AF:2A:62:4D:33:7F:8D
            X509v3 Authority Key Identifier:
                keyid:D0:31:B4:87:E7:21:03:F2:3B:C5:CC:66:12:43:08:EA:D5:66:D3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/1/D031B487E72103F23BC5CC66124308EAD566D33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D031B487E72103F23BC5CC66124308EAD566D33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/1/323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:4000::/41

    Signature Algorithm: sha256WithRSAEncryption
         42:23:93:b4:8c:c3:5d:e5:7b:88:b1:6f:30:20:a8:71:15:27:
         92:05:73:5f:90:71:ce:34:3e:25:9b:ca:db:2f:cb:42:d0:c3:
         38:9f:58:4c:6f:f0:5a:3d:f4:e4:25:cc:e3:8e:ff:56:e3:d2:
         13:7a:86:84:ff:d1:e9:fe:12:bf:7a:0a:36:af:7b:62:59:43:
         f0:ed:c3:8a:1b:e1:dd:b3:42:91:28:f3:85:d3:33:51:fb:b8:
         52:d6:a6:27:35:ed:31:a1:b7:e3:4c:97:21:3e:01:62:ab:2c:
         6a:57:4e:df:be:2d:1a:88:96:f9:59:14:f1:c0:99:81:bc:d5:
         32:f6:4f:27:1c:f3:8a:d9:81:c9:7e:bd:4e:3e:2d:50:ba:28:
         0f:28:4e:3f:1a:71:6e:0d:ac:6f:d7:d8:f4:33:18:7b:21:17:
         1e:94:71:7b:d8:94:f7:a5:c8:2e:8b:89:71:39:12:49:a7:e6:
         35:80:2d:3e:c2:e4:6c:cb:94:25:49:2a:db:34:d6:b6:34:1e:
         30:a4:f8:56:c4:78:b0:62:71:38:aa:02:95:f9:79:39:a6:02:
         ee:f9:fd:c4:a0:5e:4a:e0:95:58:3b:dc:49:f2:f5:8d:c0:45:
         13:0f:b8:31:81:e3:de:f5:b5:f1:e8:cc:59:b7:49:6e:97:73:
         33:3f:fa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org