Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a323465383a3a2f33322d3438203d3e203533313731.roa
File:                     323830343a323465383a3a2f33322d3438203d3e203533313731.roa (raw, json)
Hash identifier:          UvjNMzFGQFvgk+U051+UA97HR9k08k+HVU9/JXUt+r4=
Subject key identifier:   29:27:E0:72:77:9B:44:B7:60:29:99:34:66:98:2C:09:0D:BE:7C:E8
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       2E287C930DAB50C73714710ADDD7F58A99ADC539
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a323465383a3a2f33322d3438203d3e203533313731.roa
Signing time:             Fri 22 Sep 2023 13:40:00 +0000
ROA not before:           Fri 22 Sep 2023 13:35:00 +0000
ROA not after:            Fri 20 Sep 2024 13:40:00 +0000
asID:                     53171
IP address blocks:        2804:24e8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:28:7c:93:0d:ab:50:c7:37:14:71:0a:dd:d7:f5:8a:99:ad:c5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Sep 22 13:35:00 2023 GMT
            Not After : Sep 20 13:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6e:5c:aa:bb:1d:01:58:f7:60:ce:75:fa:ac:
                    ec:cd:e6:f0:5c:53:52:19:b9:20:3b:0a:5c:14:07:
                    ee:63:41:9e:3e:94:a3:6b:a5:9b:c0:63:d0:ee:76:
                    c3:d7:14:ec:80:9f:81:c4:8e:ea:f1:e6:cf:36:9e:
                    39:ff:fe:02:a2:c7:0a:9f:c8:be:8e:9d:f5:4a:c5:
                    1d:cc:10:3c:68:f9:9f:b5:cb:9f:77:15:43:cd:ac:
                    f8:86:5d:bc:8a:f0:fe:01:6a:ca:06:51:79:9e:5a:
                    15:8f:8c:fe:ed:dd:2b:da:9a:b7:b5:1d:d3:78:3f:
                    06:19:68:03:6c:5b:18:13:e6:03:66:0a:83:a9:34:
                    37:69:36:fd:76:c8:53:4f:71:b7:69:5c:c8:5f:b1:
                    5a:71:b6:dd:53:eb:27:ff:bd:9a:1b:79:dd:f7:d4:
                    0d:b8:a1:09:d2:7b:0b:15:7f:e9:84:9a:5b:ed:a8:
                    97:4c:f2:38:af:04:f7:75:65:2e:21:5c:42:71:99:
                    6a:a9:f6:73:a1:2e:1d:37:4d:d1:8a:39:15:cd:b8:
                    3b:6a:23:8f:d4:92:40:21:9b:6c:95:3e:c1:9e:2c:
                    55:14:35:ef:7c:64:38:85:a8:91:cc:c7:ec:a9:45:
                    b6:55:7b:1a:d4:e0:82:f0:b4:c8:4d:b1:8e:5a:1d:
                    5a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:27:E0:72:77:9B:44:B7:60:29:99:34:66:98:2C:09:0D:BE:7C:E8
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a323465383a3a2f33322d3438203d3e203533313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:ea:21:d7:84:29:1c:e1:aa:02:4f:a5:0e:ff:26:97:bf:79:
         89:e2:ff:6a:9a:6f:75:e8:ab:fc:40:f0:b9:16:51:39:ce:ee:
         07:29:99:ef:25:43:76:48:38:8e:c5:f2:7d:0c:75:b7:06:d2:
         e9:54:dd:be:76:04:ef:7a:89:18:e4:6d:d7:ec:86:f1:49:7a:
         aa:be:76:0f:13:37:84:67:53:d9:09:6c:68:5b:3a:fb:e1:f0:
         83:d7:1b:57:0a:6a:93:9e:f2:0f:a3:bc:4d:0b:f0:82:72:a8:
         27:58:94:5e:09:77:b3:9e:5a:a6:07:8d:26:85:ea:84:77:65:
         bf:0d:7a:b1:20:fd:ae:32:a6:13:6a:70:00:01:e3:c4:84:84:
         bf:2a:8a:23:19:62:7a:01:2e:3a:99:96:5c:9e:1d:a6:15:ef:
         f7:b2:00:8a:64:06:ab:df:d0:0f:76:b6:ab:3a:07:8c:23:2c:
         fe:b6:6a:6d:84:83:68:f5:db:53:d1:af:99:00:a2:d1:fd:34:
         a4:3e:c2:62:15:07:95:ed:0d:48:81:aa:63:94:5b:4a:28:f6:
         87:16:62:90:71:c3:f1:bd:2f:85:b7:f3:a6:87:e0:05:78:a0:
         95:e5:71:60:9b:ab:d9:88:a4:42:2f:00:c3:ef:ee:2a:8c:53:
         3b:c0:d1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org