Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a32303a3a2f34342d3434203d3e20323639333033.roa
File:                     323830343a363238633a32303a3a2f34342d3434203d3e20323639333033.roa (raw, json)
Hash identifier:          GFXSFEIPNYM+ri4Tn2ozU84gx2pemFtAVcyTU8ad6Uc=
Subject key identifier:   86:CC:1E:55:D9:46:86:B0:8D:10:42:D7:94:4C:CE:CA:2F:E8:0A:3C
Certificate issuer:       /CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
Certificate serial:       05FAA5BAA0E0796501CDCF87593952BCEB3BCD15
Authority key identifier: A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a32303a3a2f34342d3434203d3e20323639333033.roa
Signing time:             Sat 16 Mar 2024 20:31:52 +0000
ROA not before:           Sat 16 Mar 2024 20:26:52 +0000
ROA not after:            Sat 15 Mar 2025 20:31:52 +0000
asID:                     269303
IP address blocks:        2804:628c:20::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fa:a5:ba:a0:e0:79:65:01:cd:cf:87:59:39:52:bc:eb:3b:cd:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
        Validity
            Not Before: Mar 16 20:26:52 2024 GMT
            Not After : Mar 15 20:31:52 2025 GMT
        Subject: CN=86CC1E55D94686B08D1042D7944CCECA2FE80A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:29:29:3b:18:28:e0:08:2c:34:be:e1:90:
                    5f:34:0e:02:23:1b:d3:e4:37:25:b0:9f:46:a2:7c:
                    23:89:d6:74:b8:60:5e:ae:ef:44:03:c0:1b:56:66:
                    8f:94:a9:79:b8:ac:6e:2a:26:59:47:82:a4:36:ba:
                    c2:21:c9:52:d9:49:7b:8d:42:36:9a:26:61:78:55:
                    a1:6a:16:da:0d:b2:a5:b9:53:c5:9b:f3:95:07:97:
                    01:67:e4:99:44:be:be:d6:ac:6b:6e:39:64:f0:04:
                    66:7f:51:f9:7b:b5:d5:0b:c4:88:ad:f4:27:56:15:
                    78:5f:4e:e6:0d:7d:2a:b3:68:c9:f8:48:b7:ea:6f:
                    5d:2b:4b:f9:a2:6f:af:ce:8f:36:5a:aa:67:d6:27:
                    9d:21:95:07:bc:50:80:4c:fd:c5:5e:af:fa:36:8e:
                    a6:d0:c7:ae:6b:f7:90:ff:20:52:a4:db:5f:fb:a4:
                    df:8e:04:ed:d4:bc:15:1b:96:ee:9a:bb:7d:6b:db:
                    67:0d:78:d2:68:ee:da:8a:e7:e0:58:27:65:6c:da:
                    18:3c:9f:58:4f:85:66:c8:71:1b:a6:13:e2:17:9e:
                    55:1c:11:f4:99:66:77:1c:22:23:f1:c7:1f:5d:1e:
                    09:52:1f:7a:84:03:5a:53:82:f1:b1:40:2f:c6:01:
                    1c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CC:1E:55:D9:46:86:B0:8D:10:42:D7:94:4C:CE:CA:2F:E8:0A:3C
            X509v3 Authority Key Identifier:
                keyid:A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a32303a3a2f34342d3434203d3e20323639333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:628c:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         ac:d4:23:11:56:db:09:13:d2:79:c7:1f:b0:72:cb:01:b2:09:
         af:27:79:36:31:f1:dd:dc:a9:48:57:35:ab:ea:1e:e1:d0:67:
         75:02:dd:96:a5:20:1a:1f:96:29:98:41:b7:23:24:dc:d7:a5:
         4b:e3:f4:c8:6d:08:ca:64:52:b5:13:7c:94:61:f6:46:43:92:
         13:39:2b:0e:80:d6:5e:a1:6e:7d:95:0b:d5:55:ad:c3:5e:12:
         d1:8b:47:dd:02:bf:9e:54:d4:d3:73:16:f0:a6:9e:24:db:a4:
         e7:60:cc:c4:b5:f9:7f:43:1b:1a:e1:1e:b1:dc:b8:a7:4e:4b:
         c9:62:24:7f:45:7f:63:20:17:98:65:3b:fb:82:a1:24:ce:10:
         29:43:60:a7:23:e0:87:31:2c:e2:75:72:0a:df:bc:67:62:ac:
         5c:84:5d:7e:26:7c:62:d5:9c:2f:fa:c5:2d:d9:48:7c:f4:65:
         0d:bf:49:ff:8e:e1:af:58:48:b1:75:79:cb:d1:db:9d:0f:ff:
         69:8f:fb:cf:96:35:50:47:5c:c7:e0:f1:e5:57:7b:6b:cd:34:
         32:69:21:ee:63:f4:33:6b:96:e0:db:b1:9a:e6:c9:89:a0:f9:
         e8:c8:b1:31:a0:cb:0a:2a:73:c5:af:20:31:18:24:8c:ea:2e:
         a5:3d:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org