Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/323830343a363538383a3a2f33322d3430203d3e20323639343937.roa
File:                     323830343a363538383a3a2f33322d3430203d3e20323639343937.roa (raw, json)
Hash identifier:          lr0j++opoj+Y0XjYivqA2RbzZ+y06HS8+r/k5c9ZpnA=
Subject key identifier:   26:53:61:32:27:77:D5:7D:D0:3A:72:56:72:5D:93:1B:96:74:FD:37
Certificate issuer:       /CN=7B85032F2F56AE296482EE2BA5C36156A4D672FD
Certificate serial:       1FCFCE75917FDB074CBD954508D983878F047A9F
Authority key identifier: 7B:85:03:2F:2F:56:AE:29:64:82:EE:2B:A5:C3:61:56:A4:D6:72:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B85032F2F56AE296482EE2BA5C36156A4D672FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/323830343a363538383a3a2f33322d3430203d3e20323639343937.roa
Signing time:             Fri 15 Dec 2023 11:58:16 +0000
ROA not before:           Fri 15 Dec 2023 11:53:16 +0000
ROA not after:            Fri 13 Dec 2024 11:58:16 +0000
asID:                     269497
IP address blocks:        2804:6588::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cf:ce:75:91:7f:db:07:4c:bd:95:45:08:d9:83:87:8f:04:7a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B85032F2F56AE296482EE2BA5C36156A4D672FD
        Validity
            Not Before: Dec 15 11:53:16 2023 GMT
            Not After : Dec 13 11:58:16 2024 GMT
        Subject: CN=265361322777D57DD03A7256725D931B9674FD37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:33:45:c2:8b:d3:de:42:08:fa:b3:a4:df:
                    81:9a:6b:49:06:bb:0b:8a:14:2a:00:6c:c6:96:95:
                    94:b8:a7:05:cd:c2:49:c9:5c:c9:55:9d:4c:53:f1:
                    0a:49:71:f8:e9:8f:17:da:a9:f5:ff:ee:45:fc:c3:
                    94:9c:5b:25:c1:41:76:95:24:0f:86:09:5f:92:22:
                    25:5c:0e:43:50:4c:8c:30:d6:c7:c8:4d:c8:ad:8e:
                    b7:78:ba:58:a2:5d:c6:56:1e:a4:3c:ac:52:5d:bf:
                    39:45:14:64:3c:05:c0:84:36:29:2b:eb:59:ef:b1:
                    7d:e0:ba:1d:e1:f7:56:d2:57:40:f5:4e:24:38:e2:
                    67:4d:4f:e4:6e:16:af:63:dd:23:74:ae:ac:a5:32:
                    ce:28:62:1a:93:55:5a:7e:ab:68:09:09:98:76:eb:
                    cc:52:8c:b7:0f:79:6d:cc:11:10:e4:36:96:e7:eb:
                    02:e8:ff:61:d0:dc:f1:be:31:42:e0:21:27:09:54:
                    88:82:c8:67:23:f7:69:bc:88:9b:a5:64:04:7e:4d:
                    14:a1:75:eb:8f:30:d8:8d:94:aa:0e:7a:be:22:98:
                    e6:63:b8:fb:75:2a:b9:b4:76:70:06:76:99:97:2d:
                    f5:ec:f5:1a:56:c7:cb:7e:79:a1:38:0a:dc:47:eb:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:53:61:32:27:77:D5:7D:D0:3A:72:56:72:5D:93:1B:96:74:FD:37
            X509v3 Authority Key Identifier:
                keyid:7B:85:03:2F:2F:56:AE:29:64:82:EE:2B:A5:C3:61:56:A4:D6:72:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/7B85032F2F56AE296482EE2BA5C36156A4D672FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B85032F2F56AE296482EE2BA5C36156A4D672FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/323830343a363538383a3a2f33322d3430203d3e20323639343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6588::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:d5:c3:80:a2:06:f2:e5:24:be:58:83:f9:91:a1:61:44:50:
         23:89:d0:f2:75:b4:7c:3d:b3:cd:09:93:c7:99:bc:7b:dd:69:
         da:4f:54:7a:54:ff:63:6e:53:23:fb:3f:d6:37:58:28:6d:87:
         ed:69:bf:9c:82:d3:74:dc:0d:dd:06:72:ad:93:a3:9c:24:ec:
         07:9d:3b:cb:14:4c:6b:ae:47:38:22:d1:ca:09:49:d1:b0:e0:
         45:9e:bc:36:37:7e:6d:fb:d2:5f:be:1d:8b:de:8e:48:4f:87:
         0b:78:58:0e:43:4b:4d:df:0c:a7:0c:11:1c:05:9d:33:5b:e7:
         48:38:bf:3b:ed:06:94:4f:e7:44:fe:c9:50:78:7c:85:a7:6f:
         d0:fe:6d:33:11:e5:74:fb:6a:98:49:a2:ab:0f:87:6e:b3:e8:
         0b:67:42:4a:f7:fb:b0:3a:83:e4:a9:9a:68:40:e2:83:d4:a1:
         3f:3b:48:92:d6:74:13:de:07:7e:6c:3b:cc:70:68:d0:41:84:
         23:2e:e7:a2:d8:c7:84:6d:fe:c0:3d:f0:36:f0:1f:10:71:0b:
         d7:3e:6d:fa:62:a5:6a:27:da:65:aa:42:9d:b1:c4:4a:af:9a:
         3a:8a:b7:c7:19:05:7b:e1:74:d1:14:a9:53:86:45:27:21:f8:
         eb:b1:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org