Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/323830343a336563343a3a2f33322d3438203d3e20323636363139.roa
File:                     323830343a336563343a3a2f33322d3438203d3e20323636363139.roa (raw, json)
Hash identifier:          0L3D93I05bcUkJ0Twt2muc8vBCm5EcAseZQYkO8yMQg=
Subject key identifier:   F2:1F:97:84:0E:87:E5:4F:AB:B6:2C:80:11:3D:6D:E6:04:FC:32:56
Certificate issuer:       /CN=BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8
Certificate serial:       7A63B1AB01AA529AE774F0950670A8E1EC1D55A2
Authority key identifier: BA:45:0E:F2:12:FC:16:CA:8B:9C:EA:80:BF:02:70:94:CF:FB:0B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/323830343a336563343a3a2f33322d3438203d3e20323636363139.roa
Signing time:             Wed 10 Aug 2022 20:00:00 +0000
ROA not before:           Wed 10 Aug 2022 19:55:00 +0000
ROA not after:            Thu 10 Aug 2023 20:00:00 +0000
asID:                     266619
IP address blocks:        2804:3ec4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:63:b1:ab:01:aa:52:9a:e7:74:f0:95:06:70:a8:e1:ec:1d:55:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8
        Validity
            Not Before: Aug 10 19:55:00 2022 GMT
            Not After : Aug 10 20:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:cf:f3:d4:aa:91:ad:c9:35:d3:ab:6e:90:
                    65:a7:43:87:c7:07:ff:bc:8c:c5:02:c0:ce:4f:fb:
                    b4:04:3d:84:4e:ff:ab:33:11:0f:df:eb:5f:02:74:
                    14:a8:69:d6:6f:68:a1:30:5e:36:74:8c:05:aa:f7:
                    40:a2:e9:88:97:c4:e5:5b:33:a2:bc:f0:fc:dd:b6:
                    9d:12:68:60:f2:b4:14:8b:68:76:74:d4:e4:0a:89:
                    37:c7:3a:c8:45:e1:6b:bc:d2:fc:89:c8:d2:97:ec:
                    af:b6:35:01:e8:0b:2b:7e:e7:4b:33:b6:f1:d8:77:
                    14:a7:9d:6d:b2:3c:ac:13:87:00:f0:e0:b4:51:01:
                    75:05:4e:ac:50:66:84:c5:bf:e7:5e:c7:61:ee:fa:
                    eb:06:84:04:89:58:18:b8:09:1d:17:a0:33:f2:5c:
                    34:6e:f3:f0:da:5f:d4:54:a1:a8:65:2d:69:66:8b:
                    db:fa:7b:56:98:04:80:47:ec:4b:84:57:7a:02:8e:
                    8f:bd:b9:e9:96:6c:24:b6:20:f4:80:88:3d:d3:63:
                    16:06:6e:95:14:5b:8b:1f:f1:38:32:13:69:67:64:
                    99:58:c6:f9:d1:37:9c:ab:30:a4:7a:09:a3:b7:75:
                    2a:37:8d:5c:8b:8f:fb:d4:17:d8:d0:44:38:ec:2e:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1F:97:84:0E:87:E5:4F:AB:B6:2C:80:11:3D:6D:E6:04:FC:32:56
            X509v3 Authority Key Identifier:
                keyid:BA:45:0E:F2:12:FC:16:CA:8B:9C:EA:80:BF:02:70:94:CF:FB:0B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/323830343a336563343a3a2f33322d3438203d3e20323636363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ec4::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:29:84:b1:29:8f:9a:3f:08:c5:e8:6d:93:a2:65:58:f2:7d:
         56:94:6d:6c:11:84:db:82:f4:7c:14:20:fa:c2:93:a9:63:d4:
         ef:35:b1:66:47:b9:aa:6c:c2:03:05:43:80:2c:27:4b:d6:e8:
         b0:37:ab:2a:13:7a:72:ac:ac:9f:b2:64:f7:56:5a:8c:54:b5:
         93:a4:a4:72:4b:dd:9b:1e:69:c5:2d:23:00:25:8d:d0:80:6c:
         f1:92:26:80:fa:4c:41:5a:7e:99:44:66:7c:86:ca:e4:70:95:
         56:62:a6:43:70:1f:71:e5:a5:47:3b:1e:b3:32:a9:af:28:2d:
         bf:6f:f5:ef:0e:a7:e0:df:2a:0e:d7:f7:32:40:d3:6e:ea:03:
         a8:d2:fd:40:c6:f2:93:7e:5a:5a:1b:98:40:20:84:20:bd:a2:
         ed:d8:ae:55:8c:4e:84:79:14:87:d6:1d:56:4d:46:bf:f9:24:
         8f:aa:44:52:31:2e:5d:34:f9:72:ee:1f:f0:24:85:ed:51:a5:
         d9:21:a9:df:84:8a:c0:45:fd:10:af:3a:6d:df:f4:86:fe:e1:
         25:43:7e:32:85:cc:36:7f:3d:27:b7:90:7d:bb:ec:79:e0:30:
         4b:79:20:89:72:58:7b:0d:1c:01:b8:fc:e8:18:ad:99:dd:a2:
         bf:1b:2f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org