Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/323830343a333237383a383030303a3a2f33332d3333203d3e20323635303830.roa
File:                     323830343a333237383a383030303a3a2f33332d3333203d3e20323635303830.roa (raw, json)
Hash identifier:          X5ihc8RMmjJ8p7645KxuBIbBUs+N3dHT1i5rnEUGntA=
Subject key identifier:   41:35:E1:4D:26:BB:25:ED:E7:73:11:B0:07:B1:17:6C:76:80:79:9A
Certificate issuer:       /CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
Certificate serial:       42BC31BCAFB5EFB70CD2F07EEB361E281669B9FD
Authority key identifier: BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/323830343a333237383a383030303a3a2f33332d3333203d3e20323635303830.roa
Signing time:             Tue 05 Sep 2023 18:30:15 +0000
ROA not before:           Tue 05 Sep 2023 18:25:15 +0000
ROA not after:            Tue 03 Sep 2024 18:30:15 +0000
asID:                     265080
IP address blocks:        2804:3278:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bc:31:bc:af:b5:ef:b7:0c:d2:f0:7e:eb:36:1e:28:16:69:b9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
        Validity
            Not Before: Sep  5 18:25:15 2023 GMT
            Not After : Sep  3 18:30:15 2024 GMT
        Subject: CN=4135E14D26BB25EDE77311B007B1176C7680799A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:34:de:58:25:ac:b9:13:03:58:e7:e9:35:79:
                    47:df:bf:2a:dd:c3:ca:0b:2c:9d:84:a6:21:95:5e:
                    7c:0a:77:b1:29:e7:62:6f:3d:0b:bc:c0:f6:3f:1b:
                    ba:45:87:20:22:b1:85:cc:9a:95:a6:e2:37:78:79:
                    54:1d:92:b8:02:16:71:7a:5a:64:98:fb:02:f7:b5:
                    83:33:22:d6:15:c8:48:c4:4c:19:93:a0:13:a7:36:
                    4f:ca:d5:7f:45:db:b5:ad:a6:94:5a:5e:76:21:f3:
                    e7:f3:ce:b5:81:7b:10:ca:5c:d7:3f:a0:44:48:df:
                    04:28:85:a0:1f:fa:59:76:db:e3:13:3d:b5:75:60:
                    f4:c9:27:c7:de:3f:1f:8b:a9:49:fd:41:61:46:4e:
                    52:e2:d5:e5:a1:ed:ae:72:c9:60:74:08:b6:ea:60:
                    1b:9d:e9:2c:e8:bd:ff:d9:10:9f:95:0b:9b:95:d3:
                    75:ee:4b:17:36:08:02:2b:d9:fd:e6:63:21:b5:4a:
                    14:d4:71:22:4e:8b:9a:b8:75:aa:fc:d6:cc:56:aa:
                    f2:62:e3:9f:31:0e:50:1c:17:d4:cf:ca:db:98:30:
                    c8:f7:1c:de:5f:91:22:8a:00:9f:10:3c:58:57:fd:
                    23:dd:9c:eb:23:b7:0e:8d:5a:77:c1:6c:61:00:e1:
                    65:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:35:E1:4D:26:BB:25:ED:E7:73:11:B0:07:B1:17:6C:76:80:79:9A
            X509v3 Authority Key Identifier:
                keyid:BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/323830343a333237383a383030303a3a2f33332d3333203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3278:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2c:46:89:c0:4e:19:f1:bc:34:2a:59:ad:3a:d3:1d:14:29:0d:
         97:4a:19:58:c8:fb:c7:09:88:ee:e0:ff:9e:28:76:46:e8:1a:
         43:e3:9f:ef:61:4b:19:65:8e:0e:4d:1a:1e:5b:0a:e9:fd:74:
         0b:36:d0:d7:0a:e8:5a:ed:80:40:57:94:e6:b6:43:7a:6e:d3:
         2e:f8:8b:54:97:89:59:8f:c4:be:48:3f:9c:dc:6b:bb:f4:50:
         c6:e4:d0:60:f8:26:9e:ad:bd:eb:95:70:f3:54:a2:24:5f:e6:
         1e:27:3d:33:00:e8:11:03:c6:26:8b:12:ee:25:e4:98:40:91:
         b7:aa:74:4e:38:c0:d7:3a:cf:18:38:b7:9e:b3:1c:be:2e:f4:
         37:c5:2b:98:cb:6b:5e:2a:ff:7f:ef:bb:74:27:bf:5c:34:26:
         24:c0:3d:dd:5a:71:93:6d:41:ec:71:46:42:51:77:d5:40:17:
         11:5c:ae:47:7b:65:44:b9:60:42:c5:55:e2:c7:73:4b:d9:4c:
         a3:fb:04:f8:c8:b3:c8:68:ca:b5:43:01:6a:81:5a:dd:4e:25:
         48:3c:d8:d7:37:bb:cc:a9:74:80:a3:ef:09:85:99:8a:71:4e:
         87:97:83:a7:6b:16:df:ed:96:98:72:23:09:0c:61:68:a4:a3:
         7b:ca:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org