Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/323830343a326163303a343030303a3a2f33342d3334203d3e20323634303932.roa
File:                     323830343a326163303a343030303a3a2f33342d3334203d3e20323634303932.roa (raw, json)
Hash identifier:          forRnhT2OZvGoeLjJ+Yjnv4L+RSa0G6+fk/PH/QaEqI=
Subject key identifier:   0B:4A:E8:C0:F3:F2:60:5A:0C:EF:FF:DC:4A:97:69:E9:DE:E2:F4:47
Certificate issuer:       /CN=B1AC5634E7BDA84051622C640561EFEF38D90723
Certificate serial:       5D89DD738FD6B2B0CA88846AAEAE5C7652CF12E5
Authority key identifier: B1:AC:56:34:E7:BD:A8:40:51:62:2C:64:05:61:EF:EF:38:D9:07:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1AC5634E7BDA84051622C640561EFEF38D90723.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/323830343a326163303a343030303a3a2f33342d3334203d3e20323634303932.roa
Signing time:             Thu 05 Oct 2023 20:06:13 +0000
ROA not before:           Thu 05 Oct 2023 20:01:13 +0000
ROA not after:            Thu 03 Oct 2024 20:06:13 +0000
asID:                     264092
IP address blocks:        2804:2ac0:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:89:dd:73:8f:d6:b2:b0:ca:88:84:6a:ae:ae:5c:76:52:cf:12:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1AC5634E7BDA84051622C640561EFEF38D90723
        Validity
            Not Before: Oct  5 20:01:13 2023 GMT
            Not After : Oct  3 20:06:13 2024 GMT
        Subject: CN=0B4AE8C0F3F2605A0CEFFFDC4A9769E9DEE2F447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:a1:d2:f4:17:de:53:65:37:62:ac:46:d1:
                    87:98:33:9e:27:94:2e:e3:6e:2d:b0:ac:9d:c9:c1:
                    9d:25:35:ba:61:b5:b6:b8:1b:c7:dd:eb:49:18:48:
                    d0:ea:ab:13:98:87:ad:85:9b:6c:a0:0f:d5:b2:bc:
                    48:ae:30:20:04:6b:27:9e:55:db:fe:36:9a:ca:17:
                    48:8c:0b:20:c2:5f:f7:75:5c:ba:69:d1:55:3e:71:
                    74:59:70:b8:a5:1e:25:0c:b2:ed:e1:ba:46:80:92:
                    64:6a:82:fc:de:79:f3:0f:2a:59:9d:66:d9:31:27:
                    33:92:05:49:7b:f9:4f:4c:bc:23:ec:36:6f:fa:18:
                    59:0a:07:0c:49:cf:72:8a:7d:26:a3:7b:91:1b:0b:
                    33:ee:f9:28:f4:cf:ef:f5:fb:07:60:b3:a4:53:c3:
                    5a:ad:eb:db:2a:b8:0b:7f:52:07:5d:5a:30:0b:14:
                    5d:cd:b5:4e:19:13:b2:98:f8:ac:7b:ff:f0:d2:c6:
                    27:1e:09:1f:25:80:1e:81:55:45:54:d4:22:3d:c0:
                    62:d4:05:ea:39:cc:97:c7:f6:6d:de:e5:06:f5:54:
                    0a:c6:2e:f8:a1:b9:90:10:1d:67:97:d9:57:5a:7d:
                    53:8c:29:2e:b0:69:d2:c3:75:1b:8f:3a:90:2a:fb:
                    f7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4A:E8:C0:F3:F2:60:5A:0C:EF:FF:DC:4A:97:69:E9:DE:E2:F4:47
            X509v3 Authority Key Identifier:
                keyid:B1:AC:56:34:E7:BD:A8:40:51:62:2C:64:05:61:EF:EF:38:D9:07:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/B1AC5634E7BDA84051622C640561EFEF38D90723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1AC5634E7BDA84051622C640561EFEF38D90723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/323830343a326163303a343030303a3a2f33342d3334203d3e20323634303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         54:ad:6b:01:25:2e:f8:84:fe:bd:68:96:21:1f:b4:ce:f7:78:
         13:5e:8c:f3:9a:30:46:13:b1:d5:dc:d6:ba:e1:75:ad:25:36:
         bd:47:3b:ca:da:8d:3d:22:e6:cd:c3:83:5c:1d:18:a2:6d:a8:
         bd:d8:4a:82:24:b1:53:5f:53:41:2b:ad:b4:f8:c9:f0:ee:16:
         da:39:dc:92:9e:4f:80:c1:96:06:8a:ad:63:24:86:e1:f0:4a:
         d6:59:72:4b:70:9d:fc:e0:85:72:58:46:77:4d:73:0f:21:7f:
         87:75:40:fe:89:9f:88:e1:f7:25:6a:a3:39:04:f9:8e:ba:3e:
         5f:41:ab:eb:2a:f8:0b:da:3e:c1:ac:01:3d:4d:c3:02:f5:77:
         63:61:01:6b:f8:61:ab:5b:cc:ec:2d:9e:39:6f:3b:44:71:df:
         c1:23:fd:18:e3:95:6e:45:e6:f3:b9:91:04:f2:7f:d1:f6:c3:
         6c:f5:c3:fe:40:20:cc:72:95:c0:44:ed:27:a2:80:49:67:fe:
         f4:1e:46:d0:ab:e1:86:a6:04:26:60:b1:32:ce:33:56:e4:29:
         b1:d4:55:bd:ef:32:95:f7:96:65:ce:64:b8:f4:00:9a:b6:99:
         9c:73:48:f1:e3:d0:d0:b4:38:3d:c0:54:ea:8f:99:39:58:ce:
         2c:fa:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org