Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a343030303a3a2f34342d3434203d3e20323639333033.roa
File:                     323830343a363238633a343030303a3a2f34342d3434203d3e20323639333033.roa (raw, json)
Hash identifier:          x4tzYzu0UuJBtzlhxqQefxEXaLkKncsOrPvFWbCA+No=
Subject key identifier:   C5:F8:4B:C3:80:89:74:30:C3:83:45:3C:5E:83:99:F1:3B:7C:18:8F
Certificate issuer:       /CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
Certificate serial:       180287604F7ACEDEC6E963233C0B36F116D8387C
Authority key identifier: A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a343030303a3a2f34342d3434203d3e20323639333033.roa
Signing time:             Sat 16 Mar 2024 20:31:54 +0000
ROA not before:           Sat 16 Mar 2024 20:26:54 +0000
ROA not after:            Sat 15 Mar 2025 20:31:54 +0000
asID:                     269303
IP address blocks:        2804:628c:4000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:02:87:60:4f:7a:ce:de:c6:e9:63:23:3c:0b:36:f1:16:d8:38:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
        Validity
            Not Before: Mar 16 20:26:54 2024 GMT
            Not After : Mar 15 20:31:54 2025 GMT
        Subject: CN=C5F84BC380897430C383453C5E8399F13B7C188F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:a7:ca:9c:af:6f:6a:f0:06:00:6a:c4:55:
                    87:56:71:e1:21:31:75:d7:49:7a:94:3e:08:58:ff:
                    c0:96:bf:b2:59:ea:7f:24:f9:1b:00:be:31:5c:43:
                    4b:2a:29:82:86:5d:06:84:e9:a6:71:4c:02:cf:88:
                    1b:f9:22:7c:b5:31:2e:4e:31:f4:3a:35:04:60:48:
                    08:77:7e:b3:c0:57:e0:74:f7:e5:bf:df:92:67:8d:
                    fa:f7:46:31:b5:63:7d:f9:91:cc:4c:22:ec:83:c5:
                    8e:28:1e:1f:a9:20:35:30:d1:ee:80:e5:5a:14:5a:
                    7b:fb:39:fd:26:70:02:c6:81:de:6c:c2:2d:92:c5:
                    74:9b:57:fb:b8:af:b7:82:56:13:a0:b1:09:4c:d4:
                    59:77:6d:1c:e2:d5:e3:0c:bd:0f:01:0c:8c:1f:2c:
                    d6:70:21:38:f7:3a:e4:85:d4:6c:52:a7:24:13:41:
                    08:f4:ef:0e:77:c1:07:6b:a6:2f:c2:76:3a:44:a7:
                    95:37:9d:71:88:6c:5b:b0:e5:32:bc:34:03:89:42:
                    6c:cd:d7:fe:f1:d8:95:13:70:e0:36:9c:c0:6c:38:
                    d4:f9:09:40:1a:4c:77:56:0c:0b:ed:98:4e:d0:ab:
                    f5:45:7a:14:94:b2:66:76:28:06:c2:1f:cf:42:45:
                    f3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F8:4B:C3:80:89:74:30:C3:83:45:3C:5E:83:99:F1:3B:7C:18:8F
            X509v3 Authority Key Identifier:
                keyid:A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a343030303a3a2f34342d3434203d3e20323639333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:628c:4000::/44

    Signature Algorithm: sha256WithRSAEncryption
         57:88:9e:57:fe:87:d2:e0:d6:59:5a:c2:10:ab:44:b2:6d:8b:
         d6:59:3b:58:37:47:a3:be:40:b9:0a:76:fb:7a:c3:45:2e:54:
         96:11:96:77:3c:79:d8:84:0f:b6:76:b6:8b:c7:71:1b:f6:29:
         69:1f:b3:77:6d:d5:16:fa:c7:a3:0e:57:98:92:07:ea:b9:32:
         91:ad:93:25:7e:29:e7:91:f0:2b:eb:80:a0:ca:7f:46:90:24:
         fe:05:6d:18:e4:6d:8b:f8:01:d2:02:cf:97:c5:6a:1d:48:c7:
         5c:1b:1e:15:23:f2:ea:60:07:97:e0:70:28:09:5c:a6:e9:28:
         bc:c4:cf:87:24:7f:08:d4:75:08:70:ff:36:7c:31:31:00:32:
         f2:d3:76:ce:aa:e6:dd:6e:65:0c:38:13:38:09:49:09:89:ff:
         67:99:68:94:75:f0:44:5c:6e:17:83:28:70:e6:49:2d:d7:de:
         eb:75:c6:70:0b:55:6a:04:04:9e:2f:f7:81:c2:92:f1:af:a3:
         15:f3:c8:48:ca:19:67:25:f4:f7:d5:cf:85:b8:c1:58:e3:ac:
         05:a1:fa:d1:34:0c:17:36:6e:cf:ab:be:76:4c:09:ff:fc:8c:
         ab:d8:80:de:07:27:d6:1f:63:67:8d:6c:2f:3a:6a:51:57:d9:
         16:e6:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org