Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a343061633a3a2f33322d3332203d3e20323635393734.roa
File:                     323830343a343061633a3a2f33322d3332203d3e20323635393734.roa (raw, json)
Hash identifier:          VWOsj6G3UX/i7cwP2hODNdRf+8oI5XmpHtbSjaYCQBo=
Subject key identifier:   39:84:36:27:80:2C:5B:25:FE:7D:57:A5:90:73:E3:CE:B4:BB:C8:57
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       5F35D42C84F20E9B4F181250E3EFC1004928B157
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a343061633a3a2f33322d3332203d3e20323635393734.roa
Signing time:             Tue 22 Aug 2023 18:33:46 +0000
ROA not before:           Tue 22 Aug 2023 18:28:46 +0000
ROA not after:            Tue 20 Aug 2024 18:33:46 +0000
asID:                     265974
IP address blocks:        2804:40ac::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:35:d4:2c:84:f2:0e:9b:4f:18:12:50:e3:ef:c1:00:49:28:b1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Aug 22 18:28:46 2023 GMT
            Not After : Aug 20 18:33:46 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:74:d7:d8:f9:34:9a:e1:94:a1:24:be:60:
                    c1:31:02:bb:c4:f6:ce:bf:9a:08:c6:0e:b3:ca:9a:
                    25:df:73:cc:01:70:80:ba:42:c5:58:04:76:63:01:
                    0e:2a:d5:2e:54:43:04:4c:90:0f:2b:10:0e:5e:e4:
                    4b:4c:db:70:6b:c1:2f:ee:88:a6:30:27:aa:ac:ab:
                    aa:84:9a:b9:8f:3c:b5:49:61:bf:4c:db:fd:ab:2f:
                    e9:b9:eb:f2:d1:93:e3:9f:60:f6:16:55:25:2a:48:
                    a6:02:7a:6d:d3:93:66:ec:3a:be:9d:93:bc:61:0d:
                    96:52:a4:c1:c5:b8:38:81:7a:40:1b:7c:cd:f1:a0:
                    8d:59:f8:01:26:4e:e0:9f:48:cc:d0:bd:2c:fc:9d:
                    88:f6:2f:b3:83:fb:ee:38:f4:62:ec:a7:ea:31:85:
                    7b:b0:e5:0c:55:a5:c8:bf:01:9e:ab:7e:62:f0:44:
                    a4:b2:74:c5:c5:12:c2:d9:dc:34:ef:42:59:bd:92:
                    1a:6b:fd:72:69:aa:37:6d:f6:60:0d:68:ba:0e:76:
                    77:01:66:21:93:8a:6e:37:f4:e0:d1:d8:fc:dd:99:
                    65:1d:cb:b9:b2:d5:0b:24:44:d0:72:79:6a:af:3f:
                    29:73:96:25:93:fb:4f:46:79:f3:69:2f:5f:05:b2:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:84:36:27:80:2C:5B:25:FE:7D:57:A5:90:73:E3:CE:B4:BB:C8:57
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a343061633a3a2f33322d3332203d3e20323635393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:14:6d:dc:67:84:d1:00:f9:23:ab:c3:85:1b:a3:66:5a:28:
         39:7c:6e:a6:bc:9f:ee:37:23:c8:b8:f4:df:01:cc:96:a5:a2:
         60:53:58:07:11:4c:b1:46:f0:af:04:92:78:00:29:96:ea:d5:
         e0:15:84:87:ae:22:4f:36:98:d8:67:dc:e1:c7:20:6e:2a:3a:
         dd:d0:f8:d7:ff:92:49:eb:d9:04:ed:f3:77:80:c4:3c:21:76:
         60:61:f2:47:f4:96:ed:a9:29:93:8f:19:ff:b5:d2:c9:35:f0:
         84:1c:37:fb:78:93:5f:23:a0:cc:14:70:dd:6a:94:bf:6d:a2:
         59:b9:94:ba:3a:8f:fb:5e:b7:31:97:00:9f:82:22:dd:98:9b:
         a0:a1:a9:22:ac:cb:e1:31:c0:53:3e:d3:0a:63:45:e6:5d:e0:
         01:e5:e9:1c:cb:c7:0b:d6:d2:50:ba:df:e1:11:a3:6c:32:56:
         a6:3b:7f:e4:66:b7:68:46:73:f0:e6:e2:d2:5e:d0:ea:f3:82:
         58:b1:dc:80:5b:08:1b:50:fd:33:cc:76:4f:9d:f8:b6:7d:33:
         ba:11:e0:ac:fc:ac:67:a8:81:70:53:f4:99:4f:25:8a:02:1f:
         68:a3:ff:57:89:d0:b3:90:84:11:f2:29:a6:bf:43:5f:56:ab:
         48:ee:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org