Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/323830343a323336383a303a313a3a2f36342d3634203d3e20323634313630.roa
File:                     323830343a323336383a303a313a3a2f36342d3634203d3e20323634313630.roa (raw, json)
Hash identifier:          41BgptNgNVifgkrl75rco3kgBCRkY4A7h4ypWKqCwSM=
Subject key identifier:   4D:61:10:B8:5E:25:DB:44:9C:13:B6:EE:57:88:14:F6:6F:63:62:ED
Certificate issuer:       /CN=432A09356CFC4BB8197E452038BB66C2873D93C6
Certificate serial:       0A2E17150BE433B1E93FFF9A0CA54BBB7266B0EB
Authority key identifier: 43:2A:09:35:6C:FC:4B:B8:19:7E:45:20:38:BB:66:C2:87:3D:93:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/432A09356CFC4BB8197E452038BB66C2873D93C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/323830343a323336383a303a313a3a2f36342d3634203d3e20323634313630.roa
Signing time:             Fri 27 Oct 2023 21:31:20 +0000
ROA not before:           Fri 27 Oct 2023 21:26:20 +0000
ROA not after:            Fri 25 Oct 2024 21:31:20 +0000
asID:                     264160
IP address blocks:        2804:2368:0:1::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2e:17:15:0b:e4:33:b1:e9:3f:ff:9a:0c:a5:4b:bb:72:66:b0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432A09356CFC4BB8197E452038BB66C2873D93C6
        Validity
            Not Before: Oct 27 21:26:20 2023 GMT
            Not After : Oct 25 21:31:20 2024 GMT
        Subject: CN=4D6110B85E25DB449C13B6EE578814F66F6362ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:b6:75:df:f8:ec:9b:93:f2:38:45:4b:a9:
                    79:af:74:3a:5c:92:c4:37:12:52:3f:d2:03:5e:ea:
                    08:cd:03:d6:39:51:7a:03:37:f6:b1:b6:d1:c7:95:
                    5e:8d:9b:eb:83:9f:5c:80:0a:c7:18:e9:f9:68:52:
                    70:99:93:a3:dc:6d:bb:68:fd:88:dc:6b:1e:96:a4:
                    2d:b6:78:27:7f:c0:db:75:7f:e2:ee:84:9f:e6:22:
                    14:23:9f:b1:ba:19:73:0d:ca:9d:6b:db:f7:1b:43:
                    73:9c:b9:f5:c1:57:4d:d9:7b:f0:b7:c0:14:91:2c:
                    48:e3:b5:7c:db:30:a9:0f:58:5b:30:f6:d2:1d:0a:
                    43:6d:f6:4f:f1:9b:07:db:0d:5d:3a:59:1e:2b:e0:
                    3f:ad:c3:58:54:a1:51:25:cb:db:98:28:87:67:87:
                    e5:b4:0c:df:82:be:0c:b0:5f:dd:01:72:6b:e9:95:
                    af:08:3c:31:54:1e:f4:52:25:95:6b:b6:24:a9:10:
                    c9:e1:d2:19:05:9b:29:24:7a:d5:0c:a6:31:b7:99:
                    42:a9:5d:73:d5:28:45:af:5d:15:23:06:a4:ee:b6:
                    f9:e0:25:3f:64:c4:9f:d8:fb:3c:e9:df:e8:7d:f8:
                    bd:5b:a8:ae:11:cb:70:5a:3a:cc:37:81:2d:b3:a3:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:61:10:B8:5E:25:DB:44:9C:13:B6:EE:57:88:14:F6:6F:63:62:ED
            X509v3 Authority Key Identifier:
                keyid:43:2A:09:35:6C:FC:4B:B8:19:7E:45:20:38:BB:66:C2:87:3D:93:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/432A09356CFC4BB8197E452038BB66C2873D93C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/432A09356CFC4BB8197E452038BB66C2873D93C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/323830343a323336383a303a313a3a2f36342d3634203d3e20323634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2368:0:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         8a:3e:44:65:0b:63:43:6c:6e:24:0f:ff:de:3f:92:e4:62:ec:
         39:cc:55:46:09:30:7e:a8:a0:b3:ad:a7:a8:69:8d:32:d5:9b:
         ce:94:85:0d:3f:e2:ef:0c:67:9f:c5:56:20:0d:1a:ec:43:4a:
         7d:63:4e:ae:62:f1:6f:fe:2e:5e:37:21:f7:1b:ff:04:4d:e4:
         78:c1:85:3f:ad:54:a5:89:73:24:cd:d7:f7:9b:a6:c4:61:48:
         cc:cb:ec:be:2f:b0:b0:fe:e1:bd:fd:44:c8:a4:1f:bf:af:07:
         5c:cf:24:b0:11:12:9f:5f:b4:0d:13:bb:4a:30:31:24:c7:09:
         75:58:be:21:77:58:ae:a4:94:db:f3:18:73:86:a1:97:61:97:
         a0:17:3c:39:e9:e4:da:e6:8f:73:d3:d7:22:66:d6:82:96:cc:
         fa:73:f3:57:a8:e4:96:0b:b0:a0:95:11:d4:e1:18:ce:02:34:
         94:d8:9b:35:9f:df:4a:bd:33:c2:3c:f6:b8:75:e3:8d:24:83:
         87:81:08:5a:ac:df:65:fa:50:d3:a8:ca:3f:19:ea:e7:af:92:
         63:61:78:c3:4d:32:0f:14:77:2e:6f:a5:fb:f7:e5:08:64:41:
         fe:ba:23:91:f1:2c:56:f6:cb:2f:39:3f:f5:49:ce:5c:f5:59:
         ce:4f:83:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org