Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa
File:                     323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (raw, json)
Hash identifier:          lyl6KscYTe5/q9tmzyVRgbu9gLi2QumXleTLFqns07A=
Subject key identifier:   A5:2D:79:F3:5F:00:3E:80:60:62:43:C6:0D:9E:FC:2D:94:31:95:3E
Certificate issuer:       /CN=BCB1F68DF2709D725FAB621593B41E20C3D376FE
Certificate serial:       7DF66D802AFD8A874F84B244857F9626DCD76879
Authority key identifier: BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa
Signing time:             Tue 09 Apr 2024 16:49:42 +0000
ROA not before:           Tue 09 Apr 2024 16:44:42 +0000
ROA not after:            Tue 08 Apr 2025 16:49:42 +0000
asID:                     268205
IP address blocks:        2804:4d90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f6:6d:80:2a:fd:8a:87:4f:84:b2:44:85:7f:96:26:dc:d7:68:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB1F68DF2709D725FAB621593B41E20C3D376FE
        Validity
            Not Before: Apr  9 16:44:42 2024 GMT
            Not After : Apr  8 16:49:42 2025 GMT
        Subject: CN=A52D79F35F003E80606243C60D9EFC2D9431953E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:87:99:0f:19:94:12:be:d0:43:68:ed:6b:
                    91:36:b8:89:e8:ea:ab:e9:d5:bf:00:a7:5a:73:1f:
                    99:e9:ac:84:a9:c8:31:67:41:57:01:00:a9:da:20:
                    cc:ed:bf:e0:f7:22:17:c9:18:fd:3d:4d:c4:f5:0e:
                    32:ed:7c:21:9d:2c:f2:54:8d:5d:e7:77:f0:39:17:
                    45:86:fc:29:ab:2d:b2:72:ec:54:64:90:de:12:dd:
                    45:a1:e4:44:6a:1d:03:9d:19:a2:56:d1:6c:f6:80:
                    4d:99:5d:1a:7a:05:14:10:64:b4:48:46:a4:f4:c4:
                    4a:46:75:e6:c6:b4:4e:df:53:da:cb:a8:b6:ee:21:
                    6b:a7:68:a1:08:80:80:fc:a2:2d:f3:86:0b:2a:bd:
                    31:3d:1a:ff:f7:19:2a:ed:3f:99:81:9b:42:ae:27:
                    5e:6f:f2:22:6a:f3:9e:f3:8a:ff:af:8e:82:de:db:
                    23:2f:52:76:56:f4:75:6f:0e:eb:7c:13:c1:1c:78:
                    5c:df:59:3f:2a:31:4b:43:54:1e:df:79:88:29:96:
                    03:35:fc:fb:a8:f0:a5:a4:0a:4f:58:df:0d:09:bf:
                    1a:ed:6f:9e:f6:d0:21:fe:cf:76:a9:47:11:74:3b:
                    d3:ec:2c:fb:6b:60:cf:3e:4f:13:0a:a1:4b:d8:72:
                    8a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2D:79:F3:5F:00:3E:80:60:62:43:C6:0D:9E:FC:2D:94:31:95:3E
            X509v3 Authority Key Identifier:
                keyid:BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/BCB1F68DF2709D725FAB621593B41E20C3D376FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:32:11:16:e7:52:fa:30:a1:ae:a3:4f:de:b1:f6:4c:8d:d9:
         4c:ba:39:df:06:1b:04:d2:90:8e:bd:f3:a8:d4:e2:b5:87:be:
         79:44:4a:a9:fb:9c:9a:f4:0f:8c:80:b1:2b:6e:65:6b:a0:55:
         21:4d:e2:4a:e8:76:56:a0:f5:b9:3a:e2:97:c3:fc:5d:36:5e:
         15:ba:47:cd:5f:0c:45:75:82:de:d6:db:bd:98:08:56:f8:39:
         64:5f:34:0a:6a:84:a1:f8:fe:52:78:20:28:ee:ce:4f:70:e5:
         9b:5b:45:89:40:9f:99:da:8b:7b:69:f7:89:cc:ca:df:bf:e5:
         b6:e4:66:57:e3:99:fb:43:33:23:84:c7:29:5c:b3:b8:09:69:
         ad:a3:89:76:c4:1a:55:11:00:76:ea:9f:c1:b5:72:8d:6a:e6:
         3c:8f:2d:54:81:16:dc:40:20:a0:68:dd:ea:e8:dd:ba:01:5f:
         1f:79:1c:f0:2b:82:ae:c2:c7:b9:65:9b:a5:35:a6:b5:d7:6f:
         56:87:9b:31:b2:b5:4b:b7:0d:cc:4f:9c:a3:10:2e:3d:26:28:
         f9:66:c1:d4:cf:b7:b1:12:d0:10:b0:77:bf:de:6d:b7:db:9e:
         cc:31:50:2b:73:64:71:98:d4:8d:74:21:18:f6:14:ed:15:0b:
         ae:c3:44:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org