Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa
File:                     323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa (raw, json)
Hash identifier:          J1YF17Us6VQfkY6b4MDhubKJ5sdr9Q1e6wLnn+W763U=
Subject key identifier:   AD:F2:E8:4D:31:99:76:B5:1C:DA:3B:9F:9C:7B:90:68:51:D0:88:5E
Certificate issuer:       /CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
Certificate serial:       2754507D5D7870DF90C77553C0EF5E28AF0D9E5C
Authority key identifier: DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa
Signing time:             Thu 04 Apr 2024 13:52:28 +0000
ROA not before:           Thu 04 Apr 2024 13:47:28 +0000
ROA not after:            Thu 03 Apr 2025 13:52:28 +0000
asID:                     264891
IP address blocks:        2804:2f70:5000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:54:50:7d:5d:78:70:df:90:c7:75:53:c0:ef:5e:28:af:0d:9e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
        Validity
            Not Before: Apr  4 13:47:28 2024 GMT
            Not After : Apr  3 13:52:28 2025 GMT
        Subject: CN=ADF2E84D319976B51CDA3B9F9C7B906851D0885E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e2:23:48:e6:dc:ab:e3:c7:b7:0b:56:aa:01:
                    d4:fa:95:f4:74:47:87:a1:83:08:87:6f:3f:69:96:
                    be:d5:c4:d9:5c:45:49:b9:30:9b:0b:ac:f8:df:fc:
                    86:81:9d:0e:fc:6e:e3:54:07:ec:83:03:95:32:11:
                    de:ed:00:9e:dd:fa:1e:62:bb:02:75:ee:c7:3f:01:
                    b1:b2:51:b6:71:54:d4:34:a8:54:f6:54:f3:d4:65:
                    e2:6e:5a:b1:99:28:88:f4:fd:2f:97:e6:ba:63:27:
                    bd:3c:1e:b4:97:83:56:94:5e:7c:90:db:b8:e8:be:
                    78:35:a2:47:a3:87:06:8b:8e:44:af:0e:cb:e3:e8:
                    57:7d:36:34:e2:ea:71:d5:ac:4f:9a:24:1b:b3:a8:
                    86:b2:7b:36:a3:77:32:02:12:65:61:c4:e6:6f:3f:
                    ce:c6:fb:b4:84:b4:62:48:c5:b2:56:31:78:1d:cc:
                    21:1f:de:38:d3:f0:54:f0:74:a7:57:68:29:a9:ab:
                    22:fe:2b:54:dc:f9:7c:6a:0d:3b:32:bb:2a:01:16:
                    2a:cd:e9:ef:bd:62:e0:db:d3:ab:31:6f:94:a4:87:
                    6e:ec:95:94:23:cb:2d:35:0e:01:d8:4b:23:1c:3a:
                    9c:88:ed:0a:ea:69:30:ca:2b:59:42:49:46:0c:58:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F2:E8:4D:31:99:76:B5:1C:DA:3B:9F:9C:7B:90:68:51:D0:88:5E
            X509v3 Authority Key Identifier:
                keyid:DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:78:ac:4c:2d:3a:6c:18:58:45:ab:7a:33:f3:07:05:4b:57:
         ff:14:41:4e:85:74:58:15:3d:42:a7:a6:14:e9:7a:32:f9:1b:
         a1:31:5a:63:de:bc:f9:a9:34:8d:83:17:fe:c7:fb:d4:6e:83:
         ce:e9:19:6d:d1:92:81:8b:ea:9f:a0:2b:f8:9c:87:ff:5d:45:
         e0:53:04:72:e3:76:19:cf:5b:d7:52:f8:71:58:fe:1b:d4:93:
         ed:fd:4f:93:36:5f:b0:6f:07:77:7f:a5:ca:b7:24:45:0b:28:
         4e:79:a8:d0:d8:af:42:7c:f9:46:0c:c7:79:17:16:e2:19:be:
         73:15:08:58:3d:1b:4b:94:1b:39:15:61:f8:e3:b3:88:36:fb:
         94:8e:2b:94:ce:69:51:13:73:68:f3:4b:e0:57:8d:04:eb:5d:
         ea:48:b4:88:c1:2f:21:4f:d6:e7:32:ce:49:46:99:d7:2b:61:
         8c:b9:6c:04:9d:e0:0a:80:61:bb:58:86:c8:a0:26:90:16:64:
         bb:91:11:26:10:e5:6a:a6:dc:cb:b7:8d:e5:dc:15:81:61:be:
         75:2e:76:92:9c:48:24:f3:cc:e0:8f:80:ec:93:5a:b5:9e:0b:
         c5:a5:60:3b:87:3f:bb:c8:30:81:03:31:a1:29:60:1f:65:d3:
         6c:12:61:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org