Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/323830343a316130303a3a2f33322d3335203d3e203631383331.roa
File:                     323830343a316130303a3a2f33322d3335203d3e203631383331.roa (raw, json)
Hash identifier:          yO0dG+PGnQMekmI2+4IpUl4qm817aqYdJM3L+c3B9Xw=
Subject key identifier:   0A:47:35:9E:B9:EB:DA:DC:2E:50:A2:B6:B2:10:B6:A8:7D:A5:0D:ED
Certificate issuer:       /CN=BAD9CC7CBF44E5172A5D41F85B5447D327D88E12
Certificate serial:       6DE1CF8602DFB58F9DD80BDA62A5E86116EC3CB7
Authority key identifier: BA:D9:CC:7C:BF:44:E5:17:2A:5D:41:F8:5B:54:47:D3:27:D8:8E:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/323830343a316130303a3a2f33322d3335203d3e203631383331.roa
Signing time:             Tue 26 Sep 2023 23:54:15 +0000
ROA not before:           Tue 26 Sep 2023 23:49:15 +0000
ROA not after:            Tue 24 Sep 2024 23:54:15 +0000
asID:                     61831
IP address blocks:        2804:1a00::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e1:cf:86:02:df:b5:8f:9d:d8:0b:da:62:a5:e8:61:16:ec:3c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD9CC7CBF44E5172A5D41F85B5447D327D88E12
        Validity
            Not Before: Sep 26 23:49:15 2023 GMT
            Not After : Sep 24 23:54:15 2024 GMT
        Subject: CN=0A47359EB9EBDADC2E50A2B6B210B6A87DA50DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:7b:6b:d7:7d:8d:c5:14:88:15:7d:aa:b1:
                    26:84:fe:1f:3c:15:3d:af:22:42:a6:a5:d5:a7:f3:
                    8e:07:9e:29:dc:57:c7:d1:9e:86:b7:e0:df:52:0f:
                    eb:21:58:13:af:19:ff:31:6e:f4:ef:03:d8:f2:2f:
                    7c:22:a7:35:f4:0f:b6:96:6e:5d:9f:bb:8f:da:a7:
                    e3:4b:1b:d7:19:07:b7:76:8b:c8:b0:b3:01:88:60:
                    a9:6b:dc:d6:ef:e9:fa:d6:d2:a9:82:9e:f6:69:da:
                    c9:82:90:64:bf:79:f8:74:5f:34:1a:48:21:f7:31:
                    65:b7:e4:4d:73:ac:2a:03:0b:4b:5c:ac:75:c5:f0:
                    7e:59:72:7f:b6:28:58:c9:b9:18:60:7f:25:34:1f:
                    c7:30:4c:2d:d5:ad:b0:73:ed:58:ee:ec:d9:52:84:
                    ed:5f:3b:2f:7d:0e:5e:39:2a:ba:48:c0:e3:01:d7:
                    51:9b:51:5c:6d:47:e1:49:af:ac:5c:59:aa:fe:cf:
                    e0:47:50:3e:19:fc:3b:cc:30:93:c8:9c:70:7d:d4:
                    ab:fb:95:02:6b:d3:33:6e:6e:24:38:4a:60:a7:cc:
                    bf:09:64:4a:6f:0b:71:01:b2:80:79:35:c5:fc:f0:
                    50:6d:77:cc:1c:98:88:01:4c:a8:65:17:99:7c:ee:
                    04:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:47:35:9E:B9:EB:DA:DC:2E:50:A2:B6:B2:10:B6:A8:7D:A5:0D:ED
            X509v3 Authority Key Identifier:
                keyid:BA:D9:CC:7C:BF:44:E5:17:2A:5D:41:F8:5B:54:47:D3:27:D8:8E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/323830343a316130303a3a2f33322d3335203d3e203631383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:0b:ec:2e:a1:89:e6:18:47:cd:82:06:1e:5d:4f:92:04:da:
         d8:15:44:da:b0:39:82:f5:13:e9:1f:fd:1c:60:c3:24:ba:ca:
         50:2b:2e:f3:6d:84:cb:da:ce:09:d1:68:d1:f8:e5:90:71:15:
         89:a9:3f:e2:cf:87:e8:30:dc:aa:a9:07:40:d3:63:bc:52:6c:
         45:90:6e:ec:b9:9a:be:fc:10:40:ee:94:fa:b9:6d:cb:d9:9b:
         fd:01:14:49:2f:2d:7e:fe:4f:c3:66:af:96:8c:e4:9c:f1:bd:
         b4:a2:15:db:0d:be:1e:be:f1:54:d8:75:f8:3d:68:47:1d:22:
         94:cc:c3:f7:4b:ef:d5:6b:81:69:9c:00:f7:c4:b4:b1:56:34:
         16:3d:c3:01:ea:27:c6:0b:a0:54:dc:7f:f3:43:a6:bd:ee:e8:
         f6:43:7b:57:91:ea:f7:18:54:12:5d:fe:8e:ae:8a:0b:a6:bd:
         b6:c0:5e:d1:3c:ba:a0:4f:b3:3c:da:9d:3d:7a:88:53:5c:ef:
         39:04:5a:df:4b:c5:af:c8:e9:20:39:58:9d:c3:23:f5:f7:84:
         d8:c1:bc:54:12:df:1d:fd:25:41:6a:70:99:8a:8b:c6:c9:f3:
         ad:c5:05:8e:3b:07:12:83:e2:7c:f3:22:86:40:08:29:3e:ed:
         a6:a1:02:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org