Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa
File:                     323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa (raw, json)
Hash identifier:          lnXJvZgyujrKVDwxCwM/HhIdhh93PnAs1pmMwblXPik=
Subject key identifier:   CB:EA:A1:49:4B:E3:E6:A8:39:8E:F1:9A:FC:B1:8C:AF:F6:70:E4:CC
Certificate issuer:       /CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
Certificate serial:       32B36D3E82222549D0C9CA8FEB68A2CBB78CFAA9
Authority key identifier: DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa
Signing time:             Thu 04 Apr 2024 13:52:29 +0000
ROA not before:           Thu 04 Apr 2024 13:47:29 +0000
ROA not after:            Thu 03 Apr 2025 13:52:29 +0000
asID:                     264891
IP address blocks:        2804:2f70:7000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b3:6d:3e:82:22:25:49:d0:c9:ca:8f:eb:68:a2:cb:b7:8c:fa:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
        Validity
            Not Before: Apr  4 13:47:29 2024 GMT
            Not After : Apr  3 13:52:29 2025 GMT
        Subject: CN=CBEAA1494BE3E6A8398EF19AFCB18CAFF670E4CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:e7:1f:37:2a:b9:23:e8:47:04:60:e6:38:
                    7c:0f:25:ab:e4:8b:ae:82:6d:1e:df:48:86:86:d2:
                    d4:a0:6f:d1:6c:f6:0b:04:fd:cf:4c:a9:cf:72:19:
                    22:6a:ac:7c:55:bf:dd:c2:04:98:6f:b2:26:02:a2:
                    a2:a7:22:64:33:43:42:65:f6:49:5d:31:cc:8b:3d:
                    45:bd:56:62:dd:04:80:28:d7:ed:32:55:c5:da:82:
                    b3:4f:e0:ed:00:16:de:93:fb:3f:59:9d:68:2c:85:
                    c1:2c:ee:73:b5:e7:7e:b5:06:f0:30:78:fb:fb:12:
                    52:d8:b5:f1:92:89:51:67:4b:ec:d3:f8:dd:2b:87:
                    4d:a5:e3:a3:49:47:15:a9:a6:da:72:12:3b:9e:64:
                    5f:9d:7a:81:c5:ec:38:a9:a5:89:7c:88:05:12:68:
                    c8:b8:95:8c:76:ea:13:70:0c:2d:75:3e:5f:b7:50:
                    9f:87:90:bc:87:4b:cb:b3:6a:a4:23:4b:59:1c:2c:
                    cc:30:da:bf:f0:a9:eb:10:9e:35:f4:2b:ca:27:17:
                    20:bb:a1:3b:93:82:db:dc:3a:f0:ee:5a:a8:4e:1a:
                    f8:df:3e:7b:70:46:08:bc:5d:67:f8:f4:ec:fb:75:
                    41:96:25:36:30:20:9f:47:0f:ee:71:7d:45:c5:81:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EA:A1:49:4B:E3:E6:A8:39:8E:F1:9A:FC:B1:8C:AF:F6:70:E4:CC
            X509v3 Authority Key Identifier:
                keyid:DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:f8:ed:d9:bb:cf:f1:1a:db:82:ea:c9:11:fc:76:e7:2a:
         eb:02:6d:75:a3:7d:3e:12:f1:28:e9:0a:95:cf:1b:cd:a1:53:
         89:82:15:9a:75:f3:d1:32:e7:62:df:66:5c:3f:fe:14:a8:35:
         70:52:0c:d3:79:96:9f:db:95:10:7f:8c:75:be:bd:2c:ce:df:
         55:bc:de:30:c0:9a:c3:2b:ab:17:06:47:60:7b:57:f2:19:36:
         05:e0:ee:5c:af:bd:f3:5c:01:bd:0b:33:99:2a:66:83:51:a6:
         0b:6b:45:a3:53:4a:bd:88:4a:28:00:c3:df:2d:a5:1e:99:b4:
         ee:81:33:a5:74:00:e3:c4:e0:a3:96:bd:72:a2:14:44:38:b4:
         eb:19:09:d6:7d:8e:ca:64:d7:89:ce:79:c3:af:5d:23:08:51:
         52:d2:1e:38:5b:f1:1e:7d:d0:82:e0:0d:54:07:92:69:0e:cf:
         32:c0:a3:5e:29:bc:70:6b:4a:2c:ba:b7:38:dd:15:fa:09:ad:
         0a:3e:c0:5f:87:71:2f:a6:38:dc:c4:e8:db:dd:7c:c2:66:3a:
         0a:21:e5:78:81:45:18:9e:e0:94:56:a7:ad:68:9c:d9:b2:32:
         a7:cb:b9:a0:7b:ee:fb:a1:d3:3f:7f:53:73:46:e6:79:59:a0:
         78:81:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org