Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a343031303a3a2f34342d3434203d3e20323639333033.roa
File:                     323830343a363238633a343031303a3a2f34342d3434203d3e20323639333033.roa (raw, json)
Hash identifier:          RPEudYkMOPCH1qz284MOpIvskrkHC4DaDRNsNCYHgIQ=
Subject key identifier:   7E:63:97:71:BD:D8:BF:62:07:FA:63:F4:13:22:4F:C3:CE:F2:58:52
Certificate issuer:       /CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
Certificate serial:       251AFE9E6B77E4214F3F8BCF824F4CFF8D9B43D5
Authority key identifier: A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a343031303a3a2f34342d3434203d3e20323639333033.roa
Signing time:             Sat 16 Mar 2024 20:31:54 +0000
ROA not before:           Sat 16 Mar 2024 20:26:54 +0000
ROA not after:            Sat 15 Mar 2025 20:31:54 +0000
asID:                     269303
IP address blocks:        2804:628c:4010::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1a:fe:9e:6b:77:e4:21:4f:3f:8b:cf:82:4f:4c:ff:8d:9b:43:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
        Validity
            Not Before: Mar 16 20:26:54 2024 GMT
            Not After : Mar 15 20:31:54 2025 GMT
        Subject: CN=7E639771BDD8BF6207FA63F413224FC3CEF25852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:5d:81:78:56:62:3a:c5:fc:b3:17:a8:04:
                    e4:04:3b:cb:7e:87:6b:81:ab:b0:0c:9e:d6:c2:2a:
                    47:81:0b:7b:c5:e4:a9:9f:c0:72:78:fc:dc:7d:f1:
                    e8:0c:7c:ce:0e:83:4a:54:73:94:c0:32:9f:ec:8b:
                    67:10:a4:f9:58:07:14:33:8a:b8:47:1b:48:99:03:
                    c3:06:b3:4f:0e:38:92:ef:a8:56:92:97:97:64:50:
                    3d:61:4f:b7:80:17:b1:ad:a6:fc:b8:50:b4:9f:45:
                    a3:c8:58:69:45:90:84:6b:49:8e:e0:06:45:73:24:
                    e9:d1:1e:6d:45:d3:05:f8:6d:8d:99:14:45:f4:1e:
                    7d:13:fd:34:18:e1:e9:0c:94:9c:e4:73:d1:0c:67:
                    dc:87:4a:38:0c:73:0b:52:75:5c:e8:69:73:c2:ef:
                    d0:80:9c:bc:5d:49:3f:94:43:c1:59:ad:55:4e:3f:
                    6a:58:05:87:74:3e:70:38:de:e9:28:b2:9e:00:f5:
                    c0:c3:11:aa:87:72:be:2f:35:a9:67:3d:ed:5f:5b:
                    1d:0a:4f:70:bc:cc:c2:24:06:9f:ff:29:b5:23:39:
                    d7:38:71:57:e1:a4:b0:45:82:9a:e1:a9:50:9d:7d:
                    ff:7d:7f:41:b9:66:8e:d8:90:df:9c:52:82:a1:94:
                    3d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:63:97:71:BD:D8:BF:62:07:FA:63:F4:13:22:4F:C3:CE:F2:58:52
            X509v3 Authority Key Identifier:
                keyid:A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a343031303a3a2f34342d3434203d3e20323639333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:628c:4010::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:f0:78:2f:77:37:68:be:4a:e1:42:76:ec:7b:95:48:b0:09:
         0a:29:bf:4a:76:75:44:4c:0c:f9:56:68:34:8d:bc:a8:91:22:
         29:a2:6a:3c:60:23:09:c0:17:7b:52:49:6f:c2:c7:82:19:7b:
         a3:0b:95:28:10:75:c7:30:e7:f8:a8:a5:09:8a:bf:29:bb:00:
         a8:24:dc:91:f3:a1:22:3d:9f:66:df:86:f4:45:a6:56:0a:c8:
         a6:bb:79:aa:0a:db:cc:91:69:cb:21:10:79:82:dd:e2:39:07:
         d4:61:e7:47:fe:08:65:11:b5:87:2b:68:31:ac:4a:42:96:5d:
         8e:b2:78:b6:d0:18:b3:eb:a6:bc:65:18:6a:ce:bd:7b:e2:8c:
         27:dd:8c:e9:db:15:a9:8d:1d:9b:10:e3:6b:4e:0d:ca:d1:7d:
         f0:a4:ce:a2:4f:f9:15:cc:88:a5:0b:3b:d3:91:1a:1e:0a:75:
         b6:9a:9f:c5:c0:14:31:a3:57:12:9a:8c:f0:a9:b7:77:9c:43:
         3d:05:fe:d0:7a:11:93:af:52:f3:0f:44:f9:06:3e:c8:94:52:
         9f:f7:06:c8:76:15:d7:ab:e6:a9:17:7b:00:f9:3e:54:8d:b0:
         82:87:7d:f4:f4:7d:e6:33:f6:2b:59:68:73:a0:ea:8d:5e:14:
         2f:11:ae:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org