Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa
File:                     323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa (raw, json)
Hash identifier:          j2sCVmtS0E6KbTSN70aJRFC1Whixa57IVCROexMHVSI=
Subject key identifier:   14:26:80:4B:CA:24:44:E3:79:0C:D8:85:12:56:5B:5B:1A:BE:F2:2E
Certificate issuer:       /CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
Certificate serial:       66B094328533C8555490FDBE65E2CDDFD94C158D
Authority key identifier: DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa
Signing time:             Thu 04 Apr 2024 13:52:29 +0000
ROA not before:           Thu 04 Apr 2024 13:47:29 +0000
ROA not after:            Thu 03 Apr 2025 13:52:29 +0000
asID:                     264891
IP address blocks:        2804:2f70:4000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b0:94:32:85:33:c8:55:54:90:fd:be:65:e2:cd:df:d9:4c:15:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
        Validity
            Not Before: Apr  4 13:47:29 2024 GMT
            Not After : Apr  3 13:52:29 2025 GMT
        Subject: CN=1426804BCA2444E3790CD88512565B5B1ABEF22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:76:63:23:a0:5d:0c:c6:90:e6:14:53:4d:
                    db:e7:de:2b:17:c4:61:85:88:ca:f0:f7:0b:fe:d5:
                    01:46:66:e1:38:b3:64:44:50:e9:96:cc:60:28:bf:
                    57:a9:0e:bd:f5:a6:ee:10:33:b2:f0:9c:bd:4c:04:
                    b4:b3:e4:4b:6d:48:bf:a4:44:e5:f1:9f:09:90:a8:
                    4f:39:cb:b0:24:07:a2:7e:d5:26:ee:09:e0:77:f6:
                    d1:e8:df:18:69:38:e3:3f:cb:56:7e:d3:de:be:99:
                    a9:5a:3b:23:98:a3:7f:de:11:69:2b:09:a7:0c:63:
                    27:2b:d8:5b:18:ee:c7:3f:81:01:f6:d8:31:a4:8e:
                    23:de:02:50:5d:28:0b:b2:4b:82:da:82:0d:5f:6f:
                    df:4d:98:5e:bb:d8:fd:92:47:5a:5e:a0:89:3d:e9:
                    a5:fb:a4:53:a5:6a:c8:cd:0c:3f:ba:66:a9:86:84:
                    a4:38:37:bd:01:ef:c9:e6:90:d8:f6:97:ac:74:bb:
                    b6:53:ce:93:b9:43:9e:42:8a:31:d6:98:94:f6:9a:
                    e5:f7:29:6a:1c:79:e1:6e:0a:12:47:2e:73:96:5f:
                    26:6b:ad:04:15:32:b9:58:8c:21:91:57:fb:c3:cc:
                    c5:0d:17:ef:69:0f:a8:24:4c:89:c2:58:96:56:89:
                    4c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:26:80:4B:CA:24:44:E3:79:0C:D8:85:12:56:5B:5B:1A:BE:F2:2E
            X509v3 Authority Key Identifier:
                keyid:DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:e6:89:d1:1a:3e:de:e5:8f:7b:a4:a1:f8:70:6c:2f:8d:a0:
         48:a3:b6:e1:ce:4d:f7:94:4f:ac:e1:d6:29:09:97:52:9a:d9:
         40:29:21:25:49:6b:b5:99:a4:d9:91:c2:38:8b:23:03:9e:9b:
         b8:3b:93:53:e5:72:5c:e8:1a:ff:be:79:1b:bb:f6:25:18:f1:
         ba:86:d0:60:9b:de:0f:ae:3b:9e:74:2a:e7:64:96:1c:00:91:
         91:8f:05:18:f8:ce:bb:97:f7:95:72:10:3a:ff:df:4d:59:b1:
         17:4c:2b:9c:4b:28:47:93:0d:34:0e:09:42:84:b8:df:ee:31:
         24:97:9d:17:75:4d:8f:5b:79:ec:f3:04:f5:8a:b3:31:68:11:
         6d:51:4b:c3:68:5e:94:28:2d:c6:db:79:bb:92:29:56:bb:15:
         81:9f:64:66:3a:e6:ea:27:8d:cf:4c:8c:2b:d3:01:22:49:e9:
         6f:9f:18:ef:b3:53:c4:d3:e7:81:3f:50:ac:26:e8:92:52:d4:
         66:f8:d2:57:d8:fc:2d:41:16:2a:fe:1b:49:45:81:8d:ac:c6:
         16:16:b4:0c:d4:a9:cb:f0:3a:f2:b7:2a:17:25:03:6c:66:c5:
         67:6f:4f:bd:59:0b:02:6d:ad:37:da:58:14:21:d7:fe:83:44:
         ea:e9:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org