Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/323830343a363933343a3a2f33322d3438203d3e20323730323535.roa
File:                     323830343a363933343a3a2f33322d3438203d3e20323730323535.roa (raw, json)
Hash identifier:          0zb0CmkZT20v4FOW3++ex3q1gBExe47YOoZJNt3qqiQ=
Subject key identifier:   FC:84:AC:1E:E5:0A:C5:5F:A3:F5:25:61:54:26:D9:36:83:51:C5:68
Certificate issuer:       /CN=BCFE9D7FD2A3C25DC3911402465828615DB346CD
Certificate serial:       6909877A69695022744DB9617ABFAD63C43F3647
Authority key identifier: BC:FE:9D:7F:D2:A3:C2:5D:C3:91:14:02:46:58:28:61:5D:B3:46:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCFE9D7FD2A3C25DC3911402465828615DB346CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/323830343a363933343a3a2f33322d3438203d3e20323730323535.roa
Signing time:             Mon 04 Dec 2023 14:00:00 +0000
ROA not before:           Mon 04 Dec 2023 13:55:00 +0000
ROA not after:            Mon 02 Dec 2024 14:00:00 +0000
asID:                     270255
IP address blocks:        2804:6934::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:09:87:7a:69:69:50:22:74:4d:b9:61:7a:bf:ad:63:c4:3f:36:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCFE9D7FD2A3C25DC3911402465828615DB346CD
        Validity
            Not Before: Dec  4 13:55:00 2023 GMT
            Not After : Dec  2 14:00:00 2024 GMT
        Subject: CN=FC84AC1EE50AC55FA3F525615426D9368351C568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:2a:f8:bc:bc:19:fe:e0:d8:8d:5a:c0:53:
                    61:b2:be:d9:a6:c0:6b:9a:1b:f0:e7:e4:bf:2f:af:
                    5e:c1:13:8f:b8:07:94:ef:95:5d:97:72:0d:6e:45:
                    e7:fd:ad:80:aa:34:22:f7:9b:c3:bb:38:75:98:a4:
                    92:71:f5:61:15:8b:22:49:89:8d:11:5b:8c:74:0e:
                    b8:f6:79:64:9a:85:32:b9:eb:e0:7a:20:d8:af:8f:
                    2e:64:96:b8:e9:de:2f:52:be:89:25:a4:fb:1c:21:
                    b1:dd:14:96:51:93:28:72:b4:f5:19:2f:e3:4d:2e:
                    13:ce:58:d9:22:0f:03:44:ee:f7:ef:75:00:c6:95:
                    3c:c0:48:0a:22:91:20:f4:06:93:b2:e6:de:25:c0:
                    dc:f1:76:4e:dd:03:a8:1b:c0:9e:56:7a:ee:d7:49:
                    eb:c2:52:38:9d:2e:ca:b7:49:0f:b4:35:c9:34:3d:
                    a3:28:d2:2f:75:d0:9a:f8:4c:40:26:b9:88:08:fe:
                    b1:ea:38:25:7d:64:c4:6c:a3:16:4d:b2:c9:8c:94:
                    a2:e5:b1:32:a6:1e:01:fe:dc:89:2d:0f:68:bf:01:
                    31:28:e0:9f:52:b1:ab:95:d4:72:3e:e9:4b:28:87:
                    2c:87:d8:5f:b3:65:20:2e:40:b2:b5:a2:88:44:e4:
                    da:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:84:AC:1E:E5:0A:C5:5F:A3:F5:25:61:54:26:D9:36:83:51:C5:68
            X509v3 Authority Key Identifier:
                keyid:BC:FE:9D:7F:D2:A3:C2:5D:C3:91:14:02:46:58:28:61:5D:B3:46:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/BCFE9D7FD2A3C25DC3911402465828615DB346CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCFE9D7FD2A3C25DC3911402465828615DB346CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/323830343a363933343a3a2f33322d3438203d3e20323730323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6934::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:06:80:27:a1:9e:51:85:fc:47:f1:22:c4:cc:c0:94:59:55:
         d6:12:f9:c3:89:38:e0:1d:4a:cd:4a:a1:11:b9:59:24:45:62:
         e6:80:b0:ba:70:16:34:68:ad:3b:86:ee:d8:18:74:91:34:8a:
         26:80:a8:87:aa:30:78:19:b8:12:c0:53:86:29:2b:ab:cf:cb:
         8a:7d:b7:69:94:46:de:65:4b:b0:50:23:8a:f4:4d:cc:11:c2:
         5a:5e:c9:ed:64:a6:08:0b:45:45:0d:e4:69:03:9c:e5:bb:80:
         2d:db:84:7c:69:45:42:a8:b9:fe:a0:3a:0b:c0:59:28:f0:e5:
         89:0b:13:06:11:d6:9b:b2:b5:c3:5d:4f:c8:42:b7:eb:b7:1e:
         22:4b:39:c9:e2:13:9f:64:7c:2a:6b:aa:db:ea:02:26:2d:3d:
         b0:32:70:60:da:f5:72:8a:53:d0:50:33:5e:5b:ed:e3:f2:7b:
         59:d9:03:1e:b1:38:94:8b:1a:15:e3:21:46:25:a2:3f:98:2c:
         7a:6c:e9:f3:da:2e:05:d8:3a:39:25:86:e8:5b:a8:2e:aa:c5:
         b4:37:a8:39:5c:87:86:77:be:20:7d:e1:c8:49:f2:a8:f9:36:
         0a:51:4d:08:41:3d:61:30:54:4f:4b:58:ee:b0:59:64:ca:5a:
         4e:99:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org