Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a323030303a3a2f34342d3434203d3e20323639333033.roa
File:                     323830343a363238633a323030303a3a2f34342d3434203d3e20323639333033.roa (raw, json)
Hash identifier:          zEqgI93BQk9tcNqYV3lwjehNM/Q3jKLha2A0COOiIIc=
Subject key identifier:   F6:F4:13:88:EE:54:55:A9:5A:33:D7:13:19:3A:D4:FC:37:2F:46:B1
Certificate issuer:       /CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
Certificate serial:       618C9B1295F6E4DB6B66C4C948B6F5CB58C88227
Authority key identifier: A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a323030303a3a2f34342d3434203d3e20323639333033.roa
Signing time:             Sat 16 Mar 2024 20:31:51 +0000
ROA not before:           Sat 16 Mar 2024 20:26:51 +0000
ROA not after:            Sat 15 Mar 2025 20:31:51 +0000
asID:                     269303
IP address blocks:        2804:628c:2000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8c:9b:12:95:f6:e4:db:6b:66:c4:c9:48:b6:f5:cb:58:c8:82:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
        Validity
            Not Before: Mar 16 20:26:51 2024 GMT
            Not After : Mar 15 20:31:51 2025 GMT
        Subject: CN=F6F41388EE5455A95A33D713193AD4FC372F46B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:6a:d4:52:52:06:b0:34:b7:74:72:85:b7:
                    6d:63:eb:e7:90:98:6d:ee:d9:36:30:ac:df:2f:fe:
                    d5:14:7f:53:f8:64:76:e2:2a:7e:37:93:14:38:d3:
                    5c:bb:b0:7e:76:9d:47:6a:d9:03:25:89:55:93:7b:
                    7a:53:d0:74:6f:7c:d1:3d:c7:1d:56:8a:7e:7c:b0:
                    8f:36:ff:09:4c:74:5c:61:13:06:e6:be:41:65:6a:
                    d4:cd:97:1a:80:ed:e8:5e:cd:cb:3a:ac:c7:8c:83:
                    44:a1:30:34:0a:6d:35:e0:05:1e:f9:7e:ae:1a:a2:
                    c8:91:3e:07:63:67:79:3f:90:c8:bf:03:2f:97:2c:
                    f5:89:2e:1a:92:1e:29:49:aa:f8:88:84:0f:72:18:
                    2d:b8:ba:0e:83:d2:1c:d9:b4:c1:1d:17:8f:d3:e8:
                    8d:18:7f:95:f8:b6:2a:3e:d5:01:09:c6:76:0e:da:
                    77:cd:f6:3e:5c:dc:76:df:d1:e7:0b:c9:c7:78:da:
                    98:24:ab:0c:ca:6b:fd:2f:42:02:50:9b:9a:17:dc:
                    92:87:67:45:e4:16:a9:27:cc:9d:05:cb:bb:cf:61:
                    3e:e7:a9:e8:5b:a0:fa:d7:0d:02:c0:6d:bb:36:76:
                    18:27:d9:39:60:10:a7:bf:df:4d:e7:e4:2b:2b:33:
                    78:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F4:13:88:EE:54:55:A9:5A:33:D7:13:19:3A:D4:FC:37:2F:46:B1
            X509v3 Authority Key Identifier:
                keyid:A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a323030303a3a2f34342d3434203d3e20323639333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:628c:2000::/44

    Signature Algorithm: sha256WithRSAEncryption
         9e:5c:3c:76:dc:6b:95:e6:65:37:04:9f:b5:ef:7e:6a:1d:08:
         81:7a:d0:d9:55:31:d2:e2:9f:2c:bb:d5:4b:94:12:56:59:13:
         43:d4:83:62:d1:60:1c:95:d5:55:53:2a:d1:5c:18:00:f1:66:
         42:2a:99:a5:c2:23:88:b4:ed:2e:31:f1:01:20:e8:2f:94:0e:
         94:54:ba:55:0c:b4:e2:57:8f:19:1e:67:fc:2f:fc:96:ce:99:
         ad:36:a5:76:49:19:86:7a:94:84:ae:ab:c0:bd:8a:9e:e3:e9:
         3e:8b:f1:5c:d1:28:5d:2b:b6:6a:aa:99:12:c9:31:f4:2f:0f:
         cc:61:f3:c8:57:e0:e5:71:47:8b:0f:9b:3d:6e:91:79:b3:b6:
         4d:8e:99:06:ca:08:24:9c:48:30:56:bc:a9:4f:4c:67:da:f0:
         f3:c7:ac:af:1b:5e:20:74:50:9d:57:6d:1c:11:14:cf:85:c6:
         02:14:08:78:b4:60:7d:c9:4c:68:c1:37:0f:42:db:f5:45:64:
         a0:8b:bc:44:c6:a1:af:44:b1:56:2c:51:b0:4d:ea:e1:9e:26:
         50:20:2c:53:4f:4a:b8:02:bf:bb:cb:d7:6e:44:27:ff:59:63:
         07:51:57:af:7c:53:40:ba:59:90:39:36:53:7b:17:bb:07:14:
         d4:d3:dc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org