Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33322d3334203d3e20323639373132.roa
File:                     323830343a363862633a3a2f33322d3334203d3e20323639373132.roa (raw, json)
Hash identifier:          P4e+12dgVw+cmbbzoz0ZY9reL59zeAAcM76MLj3JV7w=
Subject key identifier:   FA:83:82:31:9F:A3:5F:13:98:81:B2:21:31:CD:49:85:98:88:69:FA
Certificate issuer:       /CN=13694C03068EC86512CD1EA1BAB718A4D76B8156
Certificate serial:       1B6630F5B9AFEE926917D8D2357AD89E2D82BD97
Authority key identifier: 13:69:4C:03:06:8E:C8:65:12:CD:1E:A1:BA:B7:18:A4:D7:6B:81:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13694C03068EC86512CD1EA1BAB718A4D76B8156.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33322d3334203d3e20323639373132.roa
Signing time:             Wed 09 Feb 2022 02:57:11 +0000
ROA not before:           Wed 09 Feb 2022 02:52:11 +0000
ROA not after:            Wed 08 Feb 2023 02:57:11 +0000
asID:                     269712
IP address blocks:        2804:68bc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:66:30:f5:b9:af:ee:92:69:17:d8:d2:35:7a:d8:9e:2d:82:bd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13694C03068EC86512CD1EA1BAB718A4D76B8156
        Validity
            Not Before: Feb  9 02:52:11 2022 GMT
            Not After : Feb  8 02:57:11 2023 GMT
        Subject: CN=FA8382319FA35F139881B22131CD4985988869FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:6c:a8:2e:3b:6d:c2:97:0f:56:bf:4a:db:
                    cc:18:32:6e:3a:76:a0:73:1c:78:1a:2b:ba:db:5b:
                    96:65:45:01:b1:69:7b:f2:1e:fb:39:e9:63:c2:67:
                    6f:e6:a1:44:d4:7a:48:9c:43:10:0d:3f:de:f6:9e:
                    ef:20:ad:09:5a:d4:0d:0a:7d:21:9b:ad:f7:62:6b:
                    c7:37:99:2f:a9:15:e1:b3:87:49:68:b7:0a:25:dc:
                    17:bc:f6:f4:55:f8:80:6e:93:53:50:bd:c2:b4:7f:
                    42:d9:fa:32:86:62:fb:ac:65:fc:4f:fa:a6:fe:81:
                    35:bc:82:3e:ba:38:26:8a:45:c4:ca:93:b8:19:e1:
                    b0:06:35:bf:6e:1d:d1:58:f9:42:30:2c:f2:74:a8:
                    a4:2a:e7:c9:20:77:c7:1c:55:b0:72:26:44:6e:10:
                    6b:1a:60:09:dc:8a:46:75:20:4b:a0:50:40:79:1b:
                    60:f2:6d:40:fa:c4:d7:e4:14:76:5c:c8:ce:ce:81:
                    28:a2:bd:19:4b:84:76:b4:5f:2a:df:3b:cc:ab:14:
                    6d:38:27:7c:40:4a:30:44:93:c4:b2:c7:f8:07:1c:
                    eb:2e:18:a3:23:39:67:1c:3b:e4:fb:c3:4d:98:03:
                    8a:9b:43:d0:49:bf:cb:da:b8:8e:50:77:48:37:f2:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:83:82:31:9F:A3:5F:13:98:81:B2:21:31:CD:49:85:98:88:69:FA
            X509v3 Authority Key Identifier:
                keyid:13:69:4C:03:06:8E:C8:65:12:CD:1E:A1:BA:B7:18:A4:D7:6B:81:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/13694C03068EC86512CD1EA1BAB718A4D76B8156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13694C03068EC86512CD1EA1BAB718A4D76B8156.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33322d3334203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:c4:02:15:77:fd:98:28:ce:2d:bb:eb:3d:ee:e7:c9:b4:79:
         cd:f0:2c:ee:d9:6c:b2:58:2a:67:d4:ce:7e:d5:a1:e4:a4:cb:
         2b:63:07:e6:86:73:a3:cb:39:4f:73:f7:c1:df:7d:8e:5e:ae:
         4d:90:a3:98:9d:d8:dc:8e:8f:1b:82:de:8f:4a:e6:75:d9:52:
         67:4a:3b:48:f4:19:5b:13:0d:41:86:c9:9b:f7:de:af:5d:54:
         f2:9b:2c:83:ca:30:c7:c6:48:64:4b:88:68:9e:bf:ed:19:f7:
         3f:e3:a6:c4:5c:eb:6a:ac:07:94:84:40:7e:c1:84:96:e4:88:
         98:ef:7e:cd:2e:a1:35:e5:ac:51:43:20:ef:e3:b5:16:63:0c:
         1a:d5:d5:a8:59:e5:20:df:f4:b8:d7:34:6c:4a:5c:6e:b9:0e:
         85:39:ad:88:20:67:7e:ee:49:ca:d3:5c:97:2d:17:58:e7:4c:
         d9:d6:91:9f:2a:ca:ff:d1:79:ee:d1:10:85:fb:4f:f0:65:35:
         dc:f1:c5:9b:06:d5:dc:d3:c9:01:0f:80:63:f5:b6:70:e1:dd:
         9e:e9:01:64:4b:c2:a6:db:8d:60:e9:73:35:72:8a:6f:ac:b7:
         3c:13:02:4e:bb:29:77:8c:9e:73:ab:25:ef:48:5f:e9:bf:30:
         ad:00:b8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org