Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa
File:                     323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa (raw, json)
Hash identifier:          +0LkHYaSaEAMP8e24Lb+vwJwkPwmaxdw4IxytUOIAHM=
Subject key identifier:   BE:63:80:F5:A6:AD:6D:6F:9D:EF:ED:2A:A8:41:D9:84:DC:C1:BA:82
Certificate issuer:       /CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Certificate serial:       2AC5F55629C6A672878C1B5F03D6D221D83D4091
Authority key identifier: BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa
Signing time:             Tue 23 Jan 2024 14:21:10 +0000
ROA not before:           Tue 23 Jan 2024 14:16:10 +0000
ROA not after:            Tue 21 Jan 2025 14:21:10 +0000
asID:                     269698
IP address blocks:        2804:6884:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c5:f5:56:29:c6:a6:72:87:8c:1b:5f:03:d6:d2:21:d8:3d:40:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
        Validity
            Not Before: Jan 23 14:16:10 2024 GMT
            Not After : Jan 21 14:21:10 2025 GMT
        Subject: CN=BE6380F5A6AD6D6F9DEFED2AA841D984DCC1BA82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:b7:c1:b1:8a:64:bb:69:0a:c6:01:0a:b5:
                    85:de:d5:14:44:b2:c7:c3:56:a6:2c:69:65:35:f3:
                    1a:89:b1:07:95:e2:ff:9f:b0:e4:1e:31:a7:11:9d:
                    53:d3:41:33:77:6d:d3:94:84:8c:e1:31:88:d1:1b:
                    5a:ba:3e:40:c7:10:29:71:40:6e:63:3d:ab:6c:67:
                    52:c4:df:12:0e:a9:ea:35:90:37:a1:c9:d0:b2:7b:
                    05:1e:ba:e2:7b:c5:86:73:4b:8c:b5:b1:ca:34:34:
                    57:95:b9:32:78:29:8c:b4:c6:61:d2:05:8c:76:b0:
                    a5:77:35:02:99:de:a4:1e:e8:3c:c4:7f:61:c3:00:
                    74:d3:40:ef:8e:4a:fc:2d:6d:ce:a3:6e:a0:46:3e:
                    cd:d7:6b:23:55:70:a2:f5:f6:27:7e:d7:97:9a:97:
                    00:5e:43:b2:68:2a:f3:5b:dc:da:f6:ce:1e:9a:ab:
                    bc:a5:65:52:7e:5b:69:ea:5e:ea:80:f2:eb:c1:1d:
                    10:7b:88:2c:5e:9b:fd:45:f7:32:40:31:4f:f8:52:
                    cc:1e:f3:ec:00:cb:fd:6e:af:4b:63:c1:6a:77:8a:
                    3e:cc:e9:e7:de:fa:7e:fb:3d:3d:32:5f:6f:19:e0:
                    e6:14:89:cf:35:b9:91:02:4d:64:1b:ad:c3:9e:04:
                    82:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:63:80:F5:A6:AD:6D:6F:9D:EF:ED:2A:A8:41:D9:84:DC:C1:BA:82
            X509v3 Authority Key Identifier:
                keyid:BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3c:85:0c:70:34:2c:c4:ee:ca:ba:d8:ff:f9:ca:6d:2b:bb:98:
         14:fa:61:8c:7a:dc:97:03:37:40:bb:7d:20:16:a4:6e:4e:3b:
         cb:fb:51:fc:2a:dd:a7:de:a9:2b:d8:ca:47:38:95:c8:0b:83:
         a2:47:8c:9e:f5:d5:02:ec:b0:d1:a2:10:c4:dc:c5:eb:22:05:
         44:21:75:b2:2e:14:c2:ce:2b:a3:f4:70:10:dc:7f:52:9d:9f:
         1d:f1:9d:73:44:eb:d0:5e:ea:9d:f2:9b:c9:31:5b:68:35:4e:
         af:29:31:00:03:de:04:0e:26:93:a2:0f:46:aa:ef:74:a9:4f:
         1d:bd:d8:46:ad:d5:b8:ab:51:ad:c0:49:92:54:f1:dc:5d:79:
         d6:76:b2:85:7c:67:fd:07:55:a9:75:71:47:c4:7b:c9:6a:3f:
         60:fe:24:12:08:5e:34:f9:5e:32:fd:44:d3:e9:7e:1e:0f:4f:
         f3:23:49:fc:c8:19:fe:63:49:27:57:1a:ef:7b:4c:13:c9:f4:
         f2:3d:1b:da:32:08:7f:0a:82:e1:31:48:91:8d:f1:77:fe:45:
         90:91:f9:d3:03:f4:c1:e3:cc:d1:82:b6:29:84:62:de:62:42:
         89:a6:ef:1c:49:02:a0:99:f0:a7:39:3a:e2:57:b9:85:c4:c7:
         3a:ef:e2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org