Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/1/323830343a363661383a3a2f33322d3335203d3e20323639353734.roa
File:                     323830343a363661383a3a2f33322d3335203d3e20323639353734.roa (raw, json)
Hash identifier:          TqRdN2WvRcbsMFHw2wST8YI2I+eFtoaFpD4i/242jPs=
Subject key identifier:   59:04:86:0C:7A:14:1A:F7:E6:00:B7:B3:5E:CF:24:AF:3D:DB:68:4A
Certificate issuer:       /CN=BD2465B228D2637E84C30C571BCC9A0154B7754D
Certificate serial:       591CC1F98E031CD03F92C2DE759B16E80D8B02D6
Authority key identifier: BD:24:65:B2:28:D2:63:7E:84:C3:0C:57:1B:CC:9A:01:54:B7:75:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD2465B228D2637E84C30C571BCC9A0154B7754D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/1/323830343a363661383a3a2f33322d3335203d3e20323639353734.roa
Signing time:             Tue 12 Sep 2023 15:25:12 +0000
ROA not before:           Tue 12 Sep 2023 15:20:12 +0000
ROA not after:            Tue 10 Sep 2024 15:25:12 +0000
asID:                     269574
IP address blocks:        2804:66a8::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1c:c1:f9:8e:03:1c:d0:3f:92:c2:de:75:9b:16:e8:0d:8b:02:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD2465B228D2637E84C30C571BCC9A0154B7754D
        Validity
            Not Before: Sep 12 15:20:12 2023 GMT
            Not After : Sep 10 15:25:12 2024 GMT
        Subject: CN=5904860C7A141AF7E600B7B35ECF24AF3DDB684A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:1d:a4:0f:01:a4:52:5a:e5:29:c1:6e:f3:
                    8c:bf:cb:d8:af:11:b7:5d:bd:e1:6f:80:36:17:33:
                    2a:e1:88:f6:77:cd:ad:20:72:55:7c:53:64:49:9b:
                    be:69:be:21:c0:da:69:61:e9:62:78:32:7b:56:1e:
                    e9:f4:f5:a5:ce:09:1f:a2:29:7c:4e:dc:4a:0e:28:
                    1b:7b:01:60:28:2f:eb:9c:6a:27:e9:70:dc:da:fb:
                    1f:0b:14:c3:b2:0f:f6:5c:23:b3:ff:a4:5e:04:86:
                    a7:2f:33:e3:e1:6a:ea:6e:85:d1:4c:c5:b6:0a:a0:
                    38:8a:a1:64:82:f5:83:05:f5:01:7e:4d:31:ca:a6:
                    14:81:1e:ee:57:9b:94:66:bd:4a:93:d7:b8:1f:46:
                    1d:bb:56:92:00:af:72:e6:2b:f6:4d:78:a8:f0:7f:
                    26:03:ee:0e:fa:3a:4b:de:2f:91:7a:30:bc:95:54:
                    1d:ad:0b:62:a3:2f:83:06:93:e0:0c:7d:87:e6:3b:
                    b8:ca:54:6a:47:cc:63:3c:f4:e0:b2:68:63:92:ca:
                    a3:5f:c0:af:b9:b1:53:ac:b8:7c:90:1e:f3:02:4a:
                    22:0e:88:f4:9a:6d:01:cb:55:47:52:a0:ee:6f:8f:
                    2c:52:88:8b:77:67:0a:95:33:83:3f:66:33:13:16:
                    43:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:04:86:0C:7A:14:1A:F7:E6:00:B7:B3:5E:CF:24:AF:3D:DB:68:4A
            X509v3 Authority Key Identifier:
                keyid:BD:24:65:B2:28:D2:63:7E:84:C3:0C:57:1B:CC:9A:01:54:B7:75:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/1/BD2465B228D2637E84C30C571BCC9A0154B7754D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD2465B228D2637E84C30C571BCC9A0154B7754D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/1/323830343a363661383a3a2f33322d3335203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:cd:23:86:de:1d:65:a0:b3:55:85:9e:a7:98:82:84:46:ae:
         be:f6:d4:c3:b5:ed:63:11:a1:00:bc:9e:62:f9:0e:07:80:8a:
         84:dc:a9:07:06:03:c4:e2:00:d0:00:17:76:7b:d9:2a:67:bf:
         ab:89:91:30:6b:89:08:7b:d1:9c:5e:70:f0:24:6d:5e:73:b8:
         50:c2:88:3b:7b:7f:a4:93:b1:6f:b7:0d:08:2b:5c:5e:79:08:
         84:45:cb:98:51:2d:af:e5:84:5d:9b:3a:60:0b:1b:e3:7a:79:
         50:70:ec:36:a1:a5:68:7b:d4:9d:89:49:9a:f4:12:25:7e:b9:
         79:82:96:c1:f8:e0:0d:51:4c:e1:f7:bf:e8:51:8b:58:05:13:
         b7:51:e8:55:d5:f1:f9:97:f0:a2:24:6b:bd:44:fe:17:60:f3:
         06:c6:1c:05:db:15:b1:5b:22:9d:0a:11:ed:b4:de:75:8b:ab:
         68:63:ec:b7:16:e0:41:ff:c0:48:5d:f2:63:e9:cb:3a:07:c9:
         de:89:02:2d:0c:39:47:dc:e0:f0:70:56:d9:e2:8f:fb:71:82:
         eb:ae:29:07:46:2b:13:d4:2f:25:9c:7f:92:fb:e1:4f:64:41:
         e2:d7:60:52:0c:f9:7e:56:91:51:27:d1:4a:b2:9e:9b:34:16:
         b5:59:68:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org