Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/323830343a6438383a3a2f33322d3438203d3e203532363337.roa
File:                     323830343a6438383a3a2f33322d3438203d3e203532363337.roa (raw, json)
Hash identifier:          AX8lD696U85OscYtPNCoJ6MEMS2SSJeNpPf64cdi6nI=
Subject key identifier:   E3:9E:81:1D:C8:25:8A:3D:27:97:DE:4A:B3:CA:23:52:7C:ED:8A:27
Certificate issuer:       /CN=65957368ED64EBC667C549743F4EF7F7D715D062
Certificate serial:       08DEB95C624BE9DB74566B5FFCE26C4047137701
Authority key identifier: 65:95:73:68:ED:64:EB:C6:67:C5:49:74:3F:4E:F7:F7:D7:15:D0:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65957368ED64EBC667C549743F4EF7F7D715D062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/323830343a6438383a3a2f33322d3438203d3e203532363337.roa
Signing time:             Fri 08 Dec 2023 13:00:00 +0000
ROA not before:           Fri 08 Dec 2023 12:55:00 +0000
ROA not after:            Fri 06 Dec 2024 13:00:00 +0000
asID:                     52637
IP address blocks:        2804:d88::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:de:b9:5c:62:4b:e9:db:74:56:6b:5f:fc:e2:6c:40:47:13:77:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65957368ED64EBC667C549743F4EF7F7D715D062
        Validity
            Not Before: Dec  8 12:55:00 2023 GMT
            Not After : Dec  6 13:00:00 2024 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:f9:10:a9:60:4a:92:60:3e:ac:ea:49:44:
                    59:f6:ed:29:de:03:1e:6e:bf:bf:df:88:11:f0:b2:
                    a8:dc:ad:34:28:99:31:60:bb:17:03:1f:d6:d6:76:
                    c2:92:fc:07:55:85:aa:0c:22:1e:80:2a:df:62:5f:
                    cb:6e:cb:63:26:c1:4b:e9:32:1a:d1:d2:45:b7:22:
                    81:67:57:27:8d:f0:b8:36:4d:84:e0:29:dd:ee:b2:
                    4b:30:99:1a:35:44:e3:ac:fc:e6:74:9c:fb:9f:04:
                    41:d9:26:13:0c:9b:e8:f4:32:1f:48:83:f0:06:87:
                    16:14:3c:60:16:2b:b2:b9:0e:fc:1f:d8:16:40:f1:
                    47:0a:6e:4c:a4:2b:86:ee:bf:9b:18:5a:77:a2:3f:
                    ab:a0:68:29:40:f2:4b:45:d7:10:9b:a8:81:55:f6:
                    7f:14:1a:2e:a4:02:a5:de:69:b3:f0:69:72:d8:7c:
                    57:fb:e1:03:84:20:7d:cd:f4:c6:a3:b2:62:be:b3:
                    b2:19:d3:0e:c3:08:50:99:be:26:a4:2e:e1:ca:1f:
                    2c:a7:bc:51:46:fd:01:b0:77:6c:71:f5:59:15:08:
                    3d:07:22:b6:ad:67:fb:8f:8c:59:0b:77:0e:4b:0d:
                    e9:3f:36:80:83:e6:f1:24:ac:16:49:d1:62:5e:5a:
                    91:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9E:81:1D:C8:25:8A:3D:27:97:DE:4A:B3:CA:23:52:7C:ED:8A:27
            X509v3 Authority Key Identifier:
                keyid:65:95:73:68:ED:64:EB:C6:67:C5:49:74:3F:4E:F7:F7:D7:15:D0:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/65957368ED64EBC667C549743F4EF7F7D715D062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65957368ED64EBC667C549743F4EF7F7D715D062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/323830343a6438383a3a2f33322d3438203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:82:fb:e2:a7:37:e6:4b:57:18:99:89:ea:5d:20:cd:0c:ce:
         7e:8f:72:d0:04:bc:85:cc:f9:fd:b1:14:b1:7e:d3:44:57:bb:
         0d:9c:c5:95:78:a5:3e:a5:54:ef:84:55:6c:5c:79:b9:fd:e0:
         a4:e4:81:c5:6a:d0:f3:d4:e4:51:08:48:93:b1:d9:c3:f5:db:
         d6:f8:d6:a4:ac:e8:89:30:6f:6c:1e:99:da:e1:cf:5a:80:79:
         49:9d:de:b5:54:d0:ef:40:4c:18:b6:a7:62:dd:1d:b2:02:db:
         3e:42:b5:10:a7:67:24:43:8a:8b:b6:0f:88:f3:41:f9:dd:80:
         09:26:db:9e:77:dd:c7:15:d5:1a:ea:b5:22:0c:b7:37:c5:77:
         87:32:46:be:64:c1:12:73:dc:b6:94:94:59:27:eb:ea:93:4a:
         ee:f9:55:b3:69:9a:73:c8:ef:f5:f2:a2:fa:a5:7c:d0:69:ae:
         5d:c4:1a:65:33:fe:1c:43:d2:eb:5c:db:c7:ef:2b:71:5d:72:
         64:ae:f5:3b:4e:72:9e:2e:29:a6:75:cd:0a:32:8e:17:ae:ad:
         d2:12:3c:6f:b9:f2:c0:e4:d4:85:75:32:1e:bb:33:6c:f4:65:
         62:a5:98:52:c9:90:fb:b7:4a:aa:26:94:38:8f:60:3b:e3:24:
         0f:6f:7e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org