Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/323830343a376436303a3a2f33322d3336203d3e20323731353537.roa
File:                     323830343a376436303a3a2f33322d3336203d3e20323731353537.roa (raw, json)
Hash identifier:          3vNxGbbaXrHAiyK0S5kWP3lyjCs3qRLGIR/CMeWYmNo=
Subject key identifier:   55:C7:BF:B4:02:70:95:95:74:11:5B:3C:30:CD:B7:99:59:99:FF:E0
Certificate issuer:       /CN=BDEDBAF5A2A83155974AEA6482B69592C8F88CC3
Certificate serial:       1DE3CC61427085A40F12BDA2021F351E6BF8FB68
Authority key identifier: BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/323830343a376436303a3a2f33322d3336203d3e20323731353537.roa
Signing time:             Wed 24 May 2023 13:23:16 +0000
ROA not before:           Wed 24 May 2023 13:18:16 +0000
ROA not after:            Wed 22 May 2024 13:23:16 +0000
asID:                     271557
IP address blocks:        2804:7d60::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e3:cc:61:42:70:85:a4:0f:12:bd:a2:02:1f:35:1e:6b:f8:fb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEDBAF5A2A83155974AEA6482B69592C8F88CC3
        Validity
            Not Before: May 24 13:18:16 2023 GMT
            Not After : May 22 13:23:16 2024 GMT
        Subject: CN=55C7BFB40270959574115B3C30CDB7995999FFE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:e7:d9:29:34:e7:76:e7:c0:1a:a8:57:90:
                    49:c9:bc:7c:fd:0a:42:6c:fa:78:01:6f:23:2a:53:
                    c5:95:38:dd:5d:81:66:1a:42:fe:94:ad:d6:5a:28:
                    aa:0a:81:a8:55:e3:a0:12:1a:3c:61:d8:7a:4e:ec:
                    21:9b:0b:8f:8f:d8:4a:d3:dc:c8:11:d6:ec:2f:d0:
                    31:fa:38:f3:25:dd:96:0b:00:29:31:bf:c9:78:bd:
                    22:5e:62:44:b5:1c:5c:ce:10:6f:41:6d:78:3d:7f:
                    a4:f4:fd:22:ab:1a:a2:c0:74:39:7a:a3:bc:f5:1e:
                    3f:c1:64:4e:7b:c2:1f:47:b9:28:cd:de:77:f7:51:
                    db:18:f9:a5:6f:24:e3:c7:77:f9:e8:6b:e7:87:7b:
                    31:70:7e:98:0d:1b:0a:67:81:76:7b:ca:09:ce:6c:
                    55:92:40:1b:6c:85:ea:2a:9c:dc:18:a2:7e:c2:39:
                    9c:b1:31:b7:16:f3:f8:76:d1:7c:41:23:98:7d:3b:
                    ae:77:46:a8:2e:66:39:51:4d:cb:3c:9e:11:e2:ba:
                    58:04:1c:21:fb:69:3e:02:cf:1c:da:39:f5:90:ec:
                    83:86:d8:07:c7:b1:64:6f:d6:29:ce:0f:4d:9a:e8:
                    61:02:1e:4c:65:45:3d:0e:bf:3a:4a:53:3f:96:2f:
                    40:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C7:BF:B4:02:70:95:95:74:11:5B:3C:30:CD:B7:99:59:99:FF:E0
            X509v3 Authority Key Identifier:
                keyid:BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/323830343a376436303a3a2f33322d3336203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:81:57:40:5f:13:e8:8c:f8:18:55:57:5b:31:14:6a:20:39:
         2c:31:73:62:85:21:ad:9e:6d:c2:70:98:85:3c:d0:9a:8c:d2:
         c5:b3:3f:df:fe:c6:de:b2:56:de:14:31:5f:1a:50:18:73:c4:
         fc:59:1b:64:ce:2a:8e:a3:17:d1:1d:9f:dd:fb:c5:49:95:a8:
         ce:ff:d3:cb:ca:8a:f7:2f:d8:f0:fa:8a:9b:cf:75:21:f0:fc:
         ce:08:de:f6:d8:cd:0e:48:27:77:f9:4d:c7:29:8f:0a:25:84:
         8d:4c:56:d5:94:90:98:5b:c0:75:36:7d:6b:fa:43:2f:68:1d:
         61:61:a6:ca:63:11:b6:4b:74:f1:6c:85:3b:c6:bf:d4:ab:d0:
         bf:d9:0e:d6:9e:78:b9:5d:5d:cc:a0:bc:a8:95:d3:48:d9:c7:
         5a:a7:ea:9e:22:ce:e9:46:7c:aa:cb:86:81:4f:f4:eb:9a:5a:
         84:a0:79:f6:f6:8d:31:8f:f6:86:27:ac:29:28:49:3d:0f:10:
         8c:c6:1b:8f:c6:b9:80:0e:33:15:25:09:1a:36:6a:1f:5b:b8:
         aa:7d:d6:37:51:35:7b:81:55:c3:ad:2b:49:26:b5:a7:88:70:
         fa:00:36:6c:ee:79:0e:7b:56:0e:78:bf:7b:18:5e:fe:65:c9:
         bc:b5:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org