Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKPN5gjbzxagapGVKuNUjVAzyKgFxwgNB14mLATtJWRg/0/323830343a376166383a3a2f33322d3438203d3e20323731343033.roa
File:                     323830343a376166383a3a2f33322d3438203d3e20323731343033.roa (raw, json)
Hash identifier:          xwmKUnBW57uR/OGSMWpTgjS73YNfx4KeUTXWjYklHBw=
Subject key identifier:   86:6E:17:9B:28:4E:07:78:45:29:C9:CF:DB:AA:98:AB:21:68:B6:82
Certificate issuer:       /CN=BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB
Certificate serial:       1CB2812746BDD2D2C0246A36108FB8C9F4CAFF91
Authority key identifier: BC:C3:B4:BD:85:E6:1D:FE:A7:BF:BC:38:5E:98:58:42:DD:00:06:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKPN5gjbzxagapGVKuNUjVAzyKgFxwgNB14mLATtJWRg/0/323830343a376166383a3a2f33322d3438203d3e20323731343033.roa
Signing time:             Wed 17 May 2023 00:54:00 +0000
ROA not before:           Wed 17 May 2023 00:49:00 +0000
ROA not after:            Wed 15 May 2024 00:54:00 +0000
asID:                     271403
IP address blocks:        2804:7af8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b2:81:27:46:bd:d2:d2:c0:24:6a:36:10:8f:b8:c9:f4:ca:ff:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB
        Validity
            Not Before: May 17 00:49:00 2023 GMT
            Not After : May 15 00:54:00 2024 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:70:ca:77:ef:16:89:0d:34:55:83:be:b2:
                    3d:b1:97:8e:ac:60:fb:c6:73:ad:50:51:a7:20:ee:
                    2f:b9:44:ae:f0:ba:26:df:59:9e:78:6e:6c:63:6f:
                    17:54:5e:7c:f7:b5:c6:00:71:50:d0:ef:fd:30:6f:
                    65:60:e3:fc:61:be:bd:6f:ec:6d:38:83:92:e1:41:
                    78:2f:02:24:9d:2d:e0:6c:2d:06:c1:8d:14:96:97:
                    59:1c:f7:ce:69:76:57:63:7d:d4:76:e7:ce:83:20:
                    b1:2f:77:20:3c:e6:98:c2:10:c7:de:da:64:58:ae:
                    7a:29:0c:ef:9e:5b:17:a6:0e:f8:cd:ef:ef:ac:ee:
                    9e:8d:ca:98:aa:63:18:3e:0b:85:1e:93:ab:62:cb:
                    08:4b:33:89:8a:94:aa:dd:eb:79:54:df:0c:69:4a:
                    6c:ed:4c:7f:fa:62:ad:aa:06:cf:89:23:bc:e8:01:
                    55:8e:59:ae:53:38:e1:6e:81:f6:38:9f:97:48:7b:
                    13:bb:08:5a:84:da:f6:f3:f0:8e:c6:af:4a:4f:8a:
                    cc:6f:7c:60:1f:b5:8b:55:1e:2e:aa:57:31:a5:1e:
                    1a:4e:e1:16:b3:71:af:eb:f8:c8:c8:8c:5f:ba:35:
                    4e:fc:44:b7:85:12:6b:0a:74:52:96:44:42:86:e2:
                    fc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6E:17:9B:28:4E:07:78:45:29:C9:CF:DB:AA:98:AB:21:68:B6:82
            X509v3 Authority Key Identifier:
                keyid:BC:C3:B4:BD:85:E6:1D:FE:A7:BF:BC:38:5E:98:58:42:DD:00:06:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKPN5gjbzxagapGVKuNUjVAzyKgFxwgNB14mLATtJWRg/0/BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKPN5gjbzxagapGVKuNUjVAzyKgFxwgNB14mLATtJWRg/0/323830343a376166383a3a2f33322d3438203d3e20323731343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7af8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:7f:15:ee:02:cf:57:c5:3b:67:ef:40:7b:da:a4:7e:9f:5c:
         0f:d4:bc:26:44:11:04:a1:f7:d9:bc:cd:ac:fa:c0:e7:3a:ab:
         7c:d2:9a:2a:9b:96:c4:dd:98:8d:6a:dd:f4:1f:e7:6f:c7:49:
         c9:70:c3:d9:14:b7:e3:0c:3b:f6:9c:5b:d2:24:bf:3b:77:e3:
         53:7a:cf:c5:b3:65:96:32:d7:dc:78:c9:14:db:b1:4e:69:ab:
         90:20:53:eb:04:6b:06:57:9a:08:3d:84:f3:e7:b7:62:2e:7c:
         62:f6:5b:71:6e:53:2b:4a:80:e8:70:34:21:b8:db:2f:fd:0f:
         77:91:ce:46:7a:e1:e7:48:e1:9d:bf:1e:3b:e2:fe:03:b9:ab:
         f7:77:9e:37:50:14:77:f2:d8:d3:27:6a:84:79:12:57:8b:93:
         fa:48:fd:74:6c:8b:10:e5:3f:6b:4e:3d:ab:79:64:61:48:5d:
         fd:ae:20:ea:c6:51:ec:1f:73:31:30:fd:52:30:f1:6f:9f:1f:
         71:2b:21:93:de:f6:99:dc:47:20:66:d9:47:c8:99:37:bd:31:
         c4:bc:81:22:7a:03:b5:34:6d:f8:ea:7f:ef:d8:e1:52:04:af:
         73:01:0c:9e:40:f0:7d:ff:d8:23:75:fc:d9:6d:16:af:48:43:
         95:72:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org