Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/323830343a313532383a3a2f33322d3334203d3e20323633333734.roa
File:                     323830343a313532383a3a2f33322d3334203d3e20323633333734.roa (raw, json)
Hash identifier:          +sUnpzEb+Xk9RyTn35tNyOdCgvdSOU29i+q+1H/lkvs=
Subject key identifier:   7A:3A:E4:3B:76:A6:EE:2D:56:FA:51:5B:6E:56:FB:1D:CF:45:19:66
Certificate issuer:       /CN=BDA1100C1000EE6F3E01E85E309530BE36F13995
Certificate serial:       4E464F793C6DBE76A0BDB3413BEF4E23C3EAE2D5
Authority key identifier: BD:A1:10:0C:10:00:EE:6F:3E:01:E8:5E:30:95:30:BE:36:F1:39:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/323830343a313532383a3a2f33322d3334203d3e20323633333734.roa
Signing time:             Thu 17 Mar 2022 17:29:52 +0000
ROA not before:           Thu 17 Mar 2022 17:24:52 +0000
ROA not after:            Thu 16 Mar 2023 17:29:52 +0000
asID:                     263374
IP address blocks:        2804:1528::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:46:4f:79:3c:6d:be:76:a0:bd:b3:41:3b:ef:4e:23:c3:ea:e2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDA1100C1000EE6F3E01E85E309530BE36F13995
        Validity
            Not Before: Mar 17 17:24:52 2022 GMT
            Not After : Mar 16 17:29:52 2023 GMT
        Subject: CN=7A3AE43B76A6EE2D56FA515B6E56FB1DCF451966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:93:2f:d0:89:e4:da:bc:e3:9d:13:10:18:02:
                    1b:65:0c:6b:c6:aa:4f:1c:fe:4f:cc:eb:c4:86:26:
                    f8:bf:6e:75:ad:ec:0b:85:f5:69:3e:dd:ae:08:d4:
                    dd:c2:a8:b6:3f:a9:33:87:d0:b6:ac:65:54:56:c9:
                    f5:0e:4d:ed:9d:2c:00:d4:00:c0:88:0d:09:1d:98:
                    f4:8f:98:26:ea:f0:d9:cc:01:6e:db:10:f6:07:91:
                    a4:cd:80:05:86:ef:a9:5f:9a:42:26:58:4b:2c:4e:
                    dc:cf:7d:85:1e:3e:ac:0d:cc:67:76:04:f0:6b:c0:
                    56:12:47:3c:0a:70:65:12:fd:77:4a:16:b1:30:9e:
                    1a:be:9b:0d:d9:ec:16:27:cd:3d:2e:ce:9a:59:8c:
                    e0:e6:58:3b:65:77:69:a4:a3:2e:f6:d0:01:e9:6a:
                    7c:96:24:36:2e:5e:23:bf:61:00:17:cd:6d:db:e5:
                    e3:0f:51:7e:43:6f:09:d1:64:f2:25:d7:7c:af:59:
                    51:f8:9c:6e:ff:8f:09:62:9b:3e:4c:cb:6e:7e:0d:
                    21:14:45:25:d1:26:d5:2b:50:8c:42:8e:46:26:20:
                    02:52:a3:0d:46:f5:b8:85:3b:95:26:b4:6d:c3:b7:
                    6b:23:bf:6c:23:52:60:be:61:58:04:c7:b6:c2:99:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3A:E4:3B:76:A6:EE:2D:56:FA:51:5B:6E:56:FB:1D:CF:45:19:66
            X509v3 Authority Key Identifier:
                keyid:BD:A1:10:0C:10:00:EE:6F:3E:01:E8:5E:30:95:30:BE:36:F1:39:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/323830343a313532383a3a2f33322d3334203d3e20323633333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1528::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:ae:fb:c7:0f:25:12:00:d0:43:8f:3e:13:c7:69:0c:2b:48:
         6c:43:2c:cb:97:70:18:75:6b:87:6e:7a:26:ec:f8:b8:dc:f2:
         af:e2:e8:09:08:89:b3:b7:10:f4:18:d2:09:b6:03:ae:f0:42:
         79:7e:4b:a6:d2:f2:48:b6:39:ce:b3:bb:b5:5f:3d:7f:03:2f:
         cd:cb:b0:f7:ff:f2:9c:82:9b:8a:6e:0d:46:5b:57:22:a6:d6:
         b2:37:3c:56:70:b5:16:eb:47:29:ea:b8:9c:d5:f6:6c:5f:a6:
         a5:db:d6:a0:bd:a1:ea:7a:2e:b4:07:26:65:87:74:49:cf:9c:
         0c:a7:f7:ee:69:0c:8b:8f:e8:e3:aa:29:8a:70:49:08:f5:07:
         fc:b0:a8:27:37:e1:09:ec:b2:08:59:db:cc:5b:92:68:dc:8b:
         7e:12:38:6b:89:b9:55:98:54:26:c5:05:c2:cd:b2:60:56:b8:
         30:87:db:d4:2b:e9:81:94:f7:cd:5e:af:11:75:d6:62:be:e0:
         cd:15:b9:f5:30:59:53:f2:fe:92:a6:94:84:eb:99:18:a8:05:
         12:ab:49:54:f1:bc:56:b4:61:aa:70:57:38:9b:9f:37:ef:69:
         c1:cf:96:e7:06:f3:6d:7a:0e:14:1e:8c:0e:a8:0c:a8:a9:69:
         4d:e7:c3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org