Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/323830343a333237383a3a2f33332d3333203d3e20323635303830.roa
File:                     323830343a333237383a3a2f33332d3333203d3e20323635303830.roa (raw, json)
Hash identifier:          N5T0nGtWyB+aE6FH4Bf+rhqpgu/TlrsZkwr7bCjTsX4=
Subject key identifier:   B1:0E:BF:4B:3D:C7:C8:64:89:9E:F8:AA:1D:25:66:93:B6:EB:94:D1
Certificate issuer:       /CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
Certificate serial:       14276A2B7ABC8651CB118B5D2A3227572BDC0127
Authority key identifier: BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/323830343a333237383a3a2f33332d3333203d3e20323635303830.roa
Signing time:             Tue 05 Sep 2023 18:30:13 +0000
ROA not before:           Tue 05 Sep 2023 18:25:13 +0000
ROA not after:            Tue 03 Sep 2024 18:30:13 +0000
asID:                     265080
IP address blocks:        2804:3278::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:27:6a:2b:7a:bc:86:51:cb:11:8b:5d:2a:32:27:57:2b:dc:01:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
        Validity
            Not Before: Sep  5 18:25:13 2023 GMT
            Not After : Sep  3 18:30:13 2024 GMT
        Subject: CN=B10EBF4B3DC7C864899EF8AA1D256693B6EB94D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:25:0e:ce:b9:6d:cf:44:c3:e4:3d:a6:0a:
                    1a:a3:8e:db:dd:83:b2:c9:5e:56:15:00:f2:65:72:
                    8b:14:54:5f:c4:3e:4c:58:24:99:7c:81:b8:9b:18:
                    9b:8b:94:77:8e:0c:d2:9e:c7:aa:c3:24:7a:f9:0c:
                    b1:a7:ad:d3:8b:b2:39:a3:f0:16:c2:fa:bc:2b:d8:
                    86:76:8e:7c:95:54:96:1a:c6:40:0a:4b:09:59:0a:
                    37:d4:bf:2e:c7:3a:d0:ea:5d:ab:27:02:a4:df:b0:
                    77:86:f1:59:e4:df:26:53:59:43:83:83:fe:b4:a0:
                    3d:21:77:2a:dc:e4:39:8b:15:a7:63:66:05:50:72:
                    89:de:6c:5e:03:7f:36:d3:70:cb:91:d3:64:93:65:
                    ee:6a:7b:c6:95:5b:af:1b:7c:a8:67:9d:fe:2f:d8:
                    d2:b1:9d:b1:2a:9c:14:29:35:6c:d4:fb:4f:77:25:
                    9d:cb:bd:bb:95:0e:88:4f:65:e5:86:cb:dd:c9:d1:
                    dd:a0:7c:53:2b:11:c3:bb:b5:ff:e3:6f:3d:4d:67:
                    a9:89:26:6b:44:f8:fc:29:dc:07:4e:bc:ec:21:f2:
                    6a:fb:e6:f8:c7:b3:d3:d3:9b:2f:7d:73:b1:4b:b4:
                    13:db:14:5f:fc:1e:03:2f:b2:7c:e7:21:2d:5f:cd:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0E:BF:4B:3D:C7:C8:64:89:9E:F8:AA:1D:25:66:93:B6:EB:94:D1
            X509v3 Authority Key Identifier:
                keyid:BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/323830343a333237383a3a2f33332d3333203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3278::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:59:aa:f4:b1:11:3f:cf:27:26:2a:0a:d5:46:de:87:d8:2e:
         3e:15:b9:8f:86:0c:e4:76:0f:e2:88:51:d9:76:09:7c:0f:e1:
         08:04:25:6a:26:f0:2f:aa:dd:bc:49:be:6b:62:87:1d:f3:d7:
         98:e9:9a:22:10:50:cf:93:b2:07:d4:d5:4b:7f:0f:49:97:9d:
         99:c5:1e:f8:6a:c1:ce:ee:06:77:05:55:df:d6:10:3a:9b:85:
         cb:01:a4:d0:f9:3d:23:9a:2c:be:1e:54:25:44:60:3e:0b:2a:
         15:4b:ee:b4:25:d0:36:19:09:6f:34:34:c3:9a:11:c5:f0:87:
         d2:98:22:e5:bb:6b:b4:75:63:3c:cb:d8:1f:12:ed:59:24:7d:
         21:41:e5:9d:b1:7b:e2:6e:f0:0e:bd:b8:a1:63:39:1b:d5:6d:
         42:68:5a:7c:a4:05:7e:68:d8:b5:b9:98:75:c7:92:eb:74:5a:
         39:74:2a:b7:30:32:be:dd:75:6e:52:de:f7:73:5e:e0:6a:6f:
         2a:98:9f:7f:01:1a:85:e2:57:e7:4c:10:5c:72:e5:51:c8:97:
         7d:87:f1:28:c2:4d:e0:bf:1a:1f:64:dd:40:c4:1e:d0:ff:2b:
         02:0c:5b:95:34:9b:b7:45:ba:71:18:e5:10:01:2b:67:06:49:
         76:54:5a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org