Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXNC6UKksVJZEPCFUov8SzayG4xJziasFTQizAzCtBaP/0/323830343a333134383a3a2f33322d3438203d3e20323635303034.roa
File:                     323830343a333134383a3a2f33322d3438203d3e20323635303034.roa (raw, json)
Hash identifier:          bKDZZZ4tBLHwWtYFfdU7Q4CegRbLd+bmMrvBs5gMvSE=
Subject key identifier:   FF:F3:82:A5:C2:B6:EA:FE:47:80:76:38:D4:C7:41:E3:41:A5:9D:ED
Certificate issuer:       /CN=BB78A453A25C3A7C1029301CA2EABC508A518EAA
Certificate serial:       0F939332F73EA50728D61580D05A3029882AC14F
Authority key identifier: BB:78:A4:53:A2:5C:3A:7C:10:29:30:1C:A2:EA:BC:50:8A:51:8E:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB78A453A25C3A7C1029301CA2EABC508A518EAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXNC6UKksVJZEPCFUov8SzayG4xJziasFTQizAzCtBaP/0/323830343a333134383a3a2f33322d3438203d3e20323635303034.roa
Signing time:             Tue 12 Sep 2023 12:34:00 +0000
ROA not before:           Tue 12 Sep 2023 12:29:00 +0000
ROA not after:            Tue 10 Sep 2024 12:34:00 +0000
asID:                     265004
IP address blocks:        2804:3148::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:93:93:32:f7:3e:a5:07:28:d6:15:80:d0:5a:30:29:88:2a:c1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB78A453A25C3A7C1029301CA2EABC508A518EAA
        Validity
            Not Before: Sep 12 12:29:00 2023 GMT
            Not After : Sep 10 12:34:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:20:29:3a:fe:bc:ce:5e:52:a8:f6:c2:c0:
                    cf:43:48:5e:e7:21:62:6d:1f:3e:3a:c4:58:e0:99:
                    2f:e4:c6:8c:c9:5f:fe:ba:a5:fe:60:83:ac:dd:d6:
                    ce:2e:7b:da:f0:57:e5:09:97:dd:0d:ee:20:85:fb:
                    ec:74:a7:6c:ff:b5:94:cf:99:ed:29:e7:8e:0a:e4:
                    4d:1e:51:43:89:45:89:69:82:9e:2c:74:0c:75:26:
                    1f:8e:7d:5e:6b:7b:21:8d:7f:83:12:34:a9:ff:5e:
                    4c:4f:16:f7:7c:74:5c:76:79:c1:3f:b4:16:77:c0:
                    5f:c8:b5:62:5d:db:4f:07:01:f1:cd:81:1d:57:13:
                    53:20:0b:8e:e1:d9:f1:58:71:5d:79:de:1b:3e:37:
                    00:e4:0a:03:9f:0f:87:e2:54:88:18:e6:c5:6a:9b:
                    13:1a:1d:2c:28:ab:32:ac:61:80:c8:32:6e:26:35:
                    50:8c:b8:b7:ee:6e:01:46:68:d4:9c:6f:57:74:fe:
                    82:56:bc:e2:3d:35:3d:38:3a:f7:50:83:af:37:94:
                    3a:d7:cf:78:1a:d6:62:a7:3f:e2:6d:43:d0:a5:9d:
                    e7:df:fe:42:e7:d5:03:05:c4:3c:ae:83:03:95:5d:
                    e4:d9:b7:8c:61:80:47:17:9b:37:da:bd:f0:5a:09:
                    b9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F3:82:A5:C2:B6:EA:FE:47:80:76:38:D4:C7:41:E3:41:A5:9D:ED
            X509v3 Authority Key Identifier:
                keyid:BB:78:A4:53:A2:5C:3A:7C:10:29:30:1C:A2:EA:BC:50:8A:51:8E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXNC6UKksVJZEPCFUov8SzayG4xJziasFTQizAzCtBaP/0/BB78A453A25C3A7C1029301CA2EABC508A518EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB78A453A25C3A7C1029301CA2EABC508A518EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXNC6UKksVJZEPCFUov8SzayG4xJziasFTQizAzCtBaP/0/323830343a333134383a3a2f33322d3438203d3e20323635303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3148::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:2e:a4:b7:6a:ad:ef:67:e3:18:77:d0:ff:51:f7:e4:0b:37:
         79:ad:ad:8b:93:1e:06:f0:ca:57:22:91:e0:0f:11:24:b3:df:
         43:f1:74:5b:2a:b9:08:d9:2d:33:35:eb:12:19:b3:c8:0a:e9:
         ae:e8:6b:04:dd:88:a9:c6:e9:3a:13:de:af:35:62:77:b8:2f:
         75:23:62:bc:91:15:de:dc:ca:11:b8:e3:72:c3:96:82:7d:77:
         b2:94:85:5b:14:d3:b4:ee:a8:53:0d:dc:8e:ad:8d:d2:48:9d:
         7f:c7:d2:df:83:97:c5:59:6f:71:50:13:02:86:80:67:c0:5c:
         22:83:7c:2a:6b:ab:b6:13:80:c5:c5:27:c4:35:e1:ec:43:9f:
         87:cc:ca:99:f2:f6:d0:ec:53:e5:68:85:3a:f6:2a:58:32:23:
         b7:35:c8:1e:63:af:98:83:c3:c8:57:e4:89:0d:4e:9c:60:ce:
         40:07:29:4a:69:a8:38:ab:e7:2a:02:68:bb:c3:48:4a:c5:ea:
         82:28:8a:2f:47:5d:79:82:b8:69:b4:3c:fb:eb:67:23:63:74:
         dc:0f:d0:6d:09:95:b9:a6:97:0a:cd:0e:3f:f6:0d:b0:53:a4:
         bc:41:0d:38:df:f1:da:fc:e4:fe:f9:bf:91:c8:e9:60:7f:66:
         51:e2:90:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org