Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a323032303a3a2f34342d3434203d3e20323639333033.roa
File:                     323830343a363238633a323032303a3a2f34342d3434203d3e20323639333033.roa (raw, json)
Hash identifier:          SRkPF6ZZQ9r34Jj+EjEkEes4RNheKnW4D3kYeT7zp2o=
Subject key identifier:   8E:B4:4C:7C:6D:F9:AE:D6:9C:B2:62:D5:60:1A:7A:7E:25:3D:5A:F4
Certificate issuer:       /CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
Certificate serial:       41FC5459AFE382A5F92698303C7E47FEF71F5C68
Authority key identifier: A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a323032303a3a2f34342d3434203d3e20323639333033.roa
Signing time:             Sat 16 Mar 2024 20:31:49 +0000
ROA not before:           Sat 16 Mar 2024 20:26:49 +0000
ROA not after:            Sat 15 Mar 2025 20:31:49 +0000
asID:                     269303
IP address blocks:        2804:628c:2020::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fc:54:59:af:e3:82:a5:f9:26:98:30:3c:7e:47:fe:f7:1f:5c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
        Validity
            Not Before: Mar 16 20:26:49 2024 GMT
            Not After : Mar 15 20:31:49 2025 GMT
        Subject: CN=8EB44C7C6DF9AED69CB262D5601A7A7E253D5AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:32:36:29:b8:21:97:96:c7:7d:1f:ff:46:e6:
                    0d:bb:bb:71:9b:c1:37:39:c9:0d:11:cf:94:4a:03:
                    54:8b:08:9f:b7:91:7b:34:a3:c7:a4:2c:a5:f8:a0:
                    37:ca:16:8e:08:51:e7:86:03:62:16:11:92:f8:fd:
                    de:6f:ba:b6:79:ed:ce:75:2a:06:b5:14:d7:d4:f3:
                    de:ce:55:f6:94:54:71:78:8b:78:f8:0b:e0:11:03:
                    d3:f9:47:1e:91:b7:74:c0:13:cf:21:40:ec:fc:9c:
                    75:e4:49:fb:bf:44:b6:71:f3:15:8d:c2:8f:4c:c1:
                    72:b7:90:51:23:75:0f:68:05:2e:cc:85:37:c0:ce:
                    05:12:eb:d9:34:6c:2b:1d:9a:8f:81:06:b7:9a:34:
                    25:06:ba:a0:dc:0b:aa:55:7c:8a:e0:15:07:4e:15:
                    46:5d:8a:79:a2:ee:70:ee:d0:03:9d:79:bc:31:5c:
                    49:4b:e5:60:c4:4e:22:00:fb:78:5a:26:65:0a:30:
                    fa:d6:e2:fc:cd:b8:5a:af:fc:e4:b9:89:79:57:2f:
                    6a:ce:e5:25:db:bc:66:c6:bf:11:de:db:bc:9a:f0:
                    74:77:5c:64:22:4c:db:90:a8:76:ab:f3:bf:51:db:
                    ee:25:15:2c:97:ef:c3:94:fd:17:1b:de:f9:0a:50:
                    a4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B4:4C:7C:6D:F9:AE:D6:9C:B2:62:D5:60:1A:7A:7E:25:3D:5A:F4
            X509v3 Authority Key Identifier:
                keyid:A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a323032303a3a2f34342d3434203d3e20323639333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:628c:2020::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:b4:d0:8c:cb:78:9d:4f:c4:e4:f4:56:b4:1f:ee:a9:85:6f:
         62:db:94:bd:3e:51:b6:01:4f:84:e8:ba:a4:fb:c8:3c:7f:07:
         7f:ee:49:0a:51:44:22:e5:db:ed:5f:06:e0:94:b9:4a:6c:dc:
         ed:e8:c9:c6:4e:32:61:bc:23:8a:2c:c1:02:d3:d7:2e:99:4e:
         3a:e5:e6:c8:03:96:f3:8b:86:e1:13:be:51:eb:f6:a4:fb:ff:
         ee:ad:8a:6c:c4:72:05:f6:94:0a:0e:6a:8c:95:fc:58:57:ae:
         6e:12:d1:72:e1:bc:a3:d6:6a:e6:80:25:c9:57:67:d0:76:97:
         71:8b:4e:c6:c5:7b:9b:27:52:cb:1a:d2:cb:a7:63:40:f0:fe:
         bd:3e:2b:d5:84:ca:d7:17:17:cd:01:78:65:43:e6:4c:84:ba:
         d5:34:1d:b1:3a:cd:89:da:53:65:0e:d5:e4:b9:5a:2c:07:44:
         85:c8:6d:80:f5:f1:39:5e:fd:64:56:2b:ed:f6:e6:27:6a:69:
         90:3a:44:a6:66:d5:43:1f:e7:8f:c4:d5:fa:1f:af:4e:bf:6d:
         bf:c9:5b:46:f7:45:0b:ae:5b:7c:dc:bb:9c:77:f3:77:8a:5e:
         bd:69:32:a3:b0:73:70:af:7a:02:ea:0b:b7:6a:e6:a2:33:77:
         0a:98:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org