Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a343030303a3a2f33342d313238203d3e20323639343434.roa
File:                     323830343a363462383a343030303a3a2f33342d313238203d3e20323639343434.roa (raw, json)
Hash identifier:          AW7ZOIRugTxW5TAzzQ6wO98at9GmgA42DF5b2HdiN+E=
Subject key identifier:   D6:B5:CE:DA:67:C0:2C:26:A1:BC:E9:8B:AC:8C:3D:81:73:72:36:06
Certificate issuer:       /CN=BC99B43F1D37B63CED4F2A34288B802EAF222FE4
Certificate serial:       50C909D0F3194FC64F8BA78E531FEA8961A4BC92
Authority key identifier: BC:99:B4:3F:1D:37:B6:3C:ED:4F:2A:34:28:8B:80:2E:AF:22:2F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC99B43F1D37B63CED4F2A34288B802EAF222FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a343030303a3a2f33342d313238203d3e20323639343434.roa
Signing time:             Wed 21 Dec 2022 18:10:33 +0000
ROA not before:           Wed 21 Dec 2022 18:05:33 +0000
ROA not after:            Wed 20 Dec 2023 18:10:33 +0000
asID:                     269444
IP address blocks:        2804:64b8:4000::/34 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c9:09:d0:f3:19:4f:c6:4f:8b:a7:8e:53:1f:ea:89:61:a4:bc:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC99B43F1D37B63CED4F2A34288B802EAF222FE4
        Validity
            Not Before: Dec 21 18:05:33 2022 GMT
            Not After : Dec 20 18:10:33 2023 GMT
        Subject: CN=D6B5CEDA67C02C26A1BCE98BAC8C3D8173723606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:01:b2:06:47:74:8d:b5:ee:40:2d:28:b3:
                    cf:9b:f7:77:4a:7e:02:7f:53:25:aa:96:7a:0e:67:
                    6f:07:a8:87:4e:29:4f:78:45:81:3f:09:5a:b4:18:
                    14:7f:dd:83:fc:d2:7f:65:43:f3:bd:14:d3:f0:b4:
                    58:7d:c4:48:5d:9e:6e:8b:e4:93:51:f4:4b:30:24:
                    ed:d3:32:e3:65:6f:bb:97:8b:39:60:01:19:26:ce:
                    07:41:13:ec:e3:ab:0b:dd:76:8e:6a:72:9f:40:64:
                    d6:7b:4e:2e:cf:50:a6:64:7c:03:55:c1:97:79:04:
                    62:e6:78:be:0b:1d:48:06:ba:10:74:e4:67:5f:28:
                    be:92:97:07:69:c8:0a:fb:d5:93:8d:21:ed:88:2a:
                    25:30:4f:e4:2d:d1:f2:e9:05:63:41:9c:dc:e3:10:
                    cf:a6:71:6f:0c:2c:44:f0:ac:c6:a9:27:4f:e4:b6:
                    2b:f6:9e:18:c8:b5:00:eb:00:c7:ae:81:96:d1:27:
                    d0:6b:06:82:12:d2:dc:5c:fd:cb:4b:a8:cf:ec:ff:
                    62:93:3b:15:20:3e:c6:73:52:c3:57:6e:9f:7c:45:
                    fe:fa:f6:27:b3:d0:bc:bf:83:42:47:b3:e2:ab:8d:
                    67:9b:96:a6:5e:be:7b:6b:90:af:4c:c8:f7:62:ed:
                    a7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B5:CE:DA:67:C0:2C:26:A1:BC:E9:8B:AC:8C:3D:81:73:72:36:06
            X509v3 Authority Key Identifier:
                keyid:BC:99:B4:3F:1D:37:B6:3C:ED:4F:2A:34:28:8B:80:2E:AF:22:2F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/BC99B43F1D37B63CED4F2A34288B802EAF222FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC99B43F1D37B63CED4F2A34288B802EAF222FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a343030303a3a2f33342d313238203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64b8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         01:13:bc:9f:51:7c:d5:5c:d9:99:0e:97:d4:46:4d:6c:51:48:
         6a:b4:af:91:98:0a:70:ce:b4:a9:b9:34:e9:8b:74:5d:9d:0f:
         3a:3e:98:4d:83:fb:8a:23:37:fd:fb:4d:79:80:b9:e7:be:58:
         4a:fc:20:4b:8e:89:27:c3:84:98:75:32:13:e5:d9:9a:55:fa:
         12:19:1f:39:e6:c3:01:00:55:15:a5:02:ea:ea:1c:78:eb:1c:
         98:0a:b0:3c:c6:86:9f:34:fb:2a:17:5c:f8:cb:89:08:e6:dc:
         4f:af:99:0f:88:af:f6:ad:da:d0:3e:0f:78:d9:c3:c9:9a:13:
         84:bf:06:65:ba:f8:93:c9:ba:71:00:03:31:2f:8a:63:df:94:
         4f:6b:bd:6d:ad:08:0c:64:03:c2:c0:6b:65:e0:8d:21:21:3a:
         cf:a9:44:41:a3:4d:93:8b:01:2e:40:06:84:32:98:88:2c:9e:
         c7:98:21:ef:eb:84:d5:98:81:8b:d1:2c:3c:94:03:b8:02:3d:
         56:af:79:3b:2d:ad:df:f9:06:65:90:6f:c4:36:ed:11:06:9a:
         ee:32:af:ca:28:ff:50:c7:6e:a7:9f:09:29:51:8a:cb:67:93:
         bb:30:cf:1c:86:54:4e:c2:ca:db:88:9f:df:63:f2:ad:25:e1:
         ed:3e:62:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org