Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a633030303a3a2f33342d313238203d3e20323639343434.roa
File:                     323830343a363462383a633030303a3a2f33342d313238203d3e20323639343434.roa (raw, json)
Hash identifier:          VFSD8ZWzSXKMePw99VF8o5U4kUcinWNu0JL+052UMxU=
Subject key identifier:   D4:A8:21:EC:40:05:8D:66:F1:E6:BF:51:1A:86:63:5D:66:2A:F1:CF
Certificate issuer:       /CN=BC99B43F1D37B63CED4F2A34288B802EAF222FE4
Certificate serial:       737DAF9D168C57FDB4690F932393A8CC45B65B84
Authority key identifier: BC:99:B4:3F:1D:37:B6:3C:ED:4F:2A:34:28:8B:80:2E:AF:22:2F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC99B43F1D37B63CED4F2A34288B802EAF222FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a633030303a3a2f33342d313238203d3e20323639343434.roa
Signing time:             Wed 21 Dec 2022 18:11:05 +0000
ROA not before:           Wed 21 Dec 2022 18:06:05 +0000
ROA not after:            Wed 20 Dec 2023 18:11:05 +0000
asID:                     269444
IP address blocks:        2804:64b8:c000::/34 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7d:af:9d:16:8c:57:fd:b4:69:0f:93:23:93:a8:cc:45:b6:5b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC99B43F1D37B63CED4F2A34288B802EAF222FE4
        Validity
            Not Before: Dec 21 18:06:05 2022 GMT
            Not After : Dec 20 18:11:05 2023 GMT
        Subject: CN=D4A821EC40058D66F1E6BF511A86635D662AF1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:53:17:05:88:fb:ef:4f:42:cd:d7:63:6e:5c:
                    6f:56:f9:86:69:11:d9:d0:07:eb:84:6c:22:83:1a:
                    7e:dc:06:59:54:0b:2d:6a:16:96:ec:fa:a1:2f:42:
                    36:93:12:c0:0c:1d:27:e0:95:a3:c6:66:75:7b:6b:
                    7b:ae:f7:fc:f4:ce:01:e6:f4:21:17:de:5d:2c:ec:
                    92:de:5f:9f:5b:d1:20:ce:c4:60:9d:8e:40:45:ad:
                    fd:a8:a5:95:08:c7:6e:e9:2a:10:d5:a9:a2:af:61:
                    2b:a7:f5:1f:ef:3d:6e:bf:2c:8e:a6:32:0b:ec:05:
                    bd:cb:be:89:7d:2f:e0:93:c1:58:13:dd:d1:4a:81:
                    42:57:af:d6:b2:cc:c5:aa:f2:b8:09:ed:94:60:d0:
                    b9:d3:85:ab:f2:ba:75:37:a9:1a:6c:6a:b9:b7:01:
                    ea:e2:de:4c:38:5f:84:3b:74:f0:0c:b1:3a:ef:62:
                    53:a2:0d:f0:bb:c1:ac:34:f0:75:52:ee:c5:42:43:
                    2c:d2:3e:da:82:c7:6e:e7:c8:e5:77:d0:52:ea:3d:
                    0d:ac:97:61:d4:be:81:87:7b:c6:d7:9d:03:91:e5:
                    df:be:35:a4:03:7d:bd:72:0a:57:94:4d:9e:59:23:
                    7b:73:83:e6:78:28:e0:ff:4c:dc:25:18:d5:4a:36:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A8:21:EC:40:05:8D:66:F1:E6:BF:51:1A:86:63:5D:66:2A:F1:CF
            X509v3 Authority Key Identifier:
                keyid:BC:99:B4:3F:1D:37:B6:3C:ED:4F:2A:34:28:8B:80:2E:AF:22:2F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/BC99B43F1D37B63CED4F2A34288B802EAF222FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC99B43F1D37B63CED4F2A34288B802EAF222FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a633030303a3a2f33342d313238203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64b8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         09:f7:3a:2a:03:90:05:15:82:f7:6a:c6:33:d3:12:83:4f:ff:
         4a:bf:cd:76:e0:42:12:fe:80:70:b8:6e:b8:44:05:67:d1:26:
         1d:95:a8:47:99:cc:bf:c5:60:61:65:13:8c:e7:bf:91:b0:16:
         d0:2a:2f:ba:3b:ed:95:0b:9d:f2:32:e3:f3:24:91:8a:a4:dc:
         d0:bc:83:f5:d4:42:12:d7:09:bf:91:6d:59:f8:a8:6b:0b:86:
         9e:7d:b5:b4:8d:dd:c9:5b:27:b7:fd:41:47:fc:28:28:5d:ad:
         60:6e:42:ea:45:96:d8:df:47:b0:a8:1b:97:b1:b5:51:55:e7:
         08:9b:99:bd:23:80:68:ee:78:78:b0:53:73:58:9a:61:45:83:
         f3:78:ac:47:40:22:7b:38:d4:96:af:a0:1b:7f:5c:a9:f9:a7:
         e7:a7:d7:2a:f8:83:72:88:74:1a:be:d3:75:97:28:61:c7:6e:
         77:81:09:51:dd:c7:d8:78:50:b9:92:ed:fa:51:45:1b:75:d9:
         75:81:09:03:53:ac:b6:2c:c4:e4:f2:c4:6e:29:93:6c:d3:87:
         0b:18:8c:a9:0d:be:2b:c8:8f:61:e9:f2:0c:77:c1:06:f2:57:
         da:de:53:94:e5:15:09:bf:b0:1e:55:9c:5e:ba:07:25:9c:4e:
         8e:59:d5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org