Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a383030303a3a2f33332d3333203d3e20323639363938.roa
File:                     323830343a363838343a383030303a3a2f33332d3333203d3e20323639363938.roa (raw, json)
Hash identifier:          0HaHql4I8skKXYe8IfiIwWXwOCe4QW4QhLhvkF+NsBc=
Subject key identifier:   5A:41:D7:91:1C:AC:EE:57:11:D4:E5:F5:D7:99:18:F6:BD:D2:29:62
Certificate issuer:       /CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Certificate serial:       0F295C82581CA69D332361E2434F558BCB5624A8
Authority key identifier: BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a383030303a3a2f33332d3333203d3e20323639363938.roa
Signing time:             Tue 23 Jan 2024 14:19:17 +0000
ROA not before:           Tue 23 Jan 2024 14:14:17 +0000
ROA not after:            Tue 21 Jan 2025 14:19:17 +0000
asID:                     269698
IP address blocks:        2804:6884:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:29:5c:82:58:1c:a6:9d:33:23:61:e2:43:4f:55:8b:cb:56:24:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
        Validity
            Not Before: Jan 23 14:14:17 2024 GMT
            Not After : Jan 21 14:19:17 2025 GMT
        Subject: CN=5A41D7911CACEE5711D4E5F5D79918F6BDD22962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d9:76:d6:ca:1e:95:c7:54:80:6e:99:c1:2b:
                    ab:6f:8f:63:1b:a9:08:e1:c1:50:e3:4e:23:9d:0d:
                    08:aa:f4:ce:df:2f:4f:87:9e:ff:b8:ce:f2:9b:f1:
                    4b:d6:fe:82:77:5a:2c:1b:77:8f:38:a1:e8:65:fd:
                    59:c4:86:09:0d:7e:37:90:2c:2d:95:4a:7d:09:15:
                    8d:66:0e:55:f0:41:ed:4b:d9:b3:0f:8e:ac:1d:2c:
                    5f:7f:11:28:3e:17:29:02:b7:53:8b:45:20:35:c6:
                    3f:9e:f3:95:d3:73:66:3e:40:94:ad:fd:a9:e8:3c:
                    47:8e:5f:71:ab:45:a7:7e:4b:f8:04:a2:05:6f:ef:
                    c7:c3:68:52:4a:37:43:9b:7a:01:2f:fe:47:6f:35:
                    94:64:45:08:21:aa:45:80:62:68:0c:73:74:85:d9:
                    fb:47:c2:4e:09:d0:68:fa:b9:29:5f:73:fa:0e:f4:
                    53:7a:fd:d3:43:23:86:98:6c:13:d0:36:75:d5:b4:
                    00:70:dc:3e:5e:2a:90:b8:a8:c3:ed:fd:ee:15:64:
                    90:9c:4b:50:4e:c8:df:56:85:90:5b:31:de:e6:0f:
                    db:ae:42:dd:fd:06:48:37:27:0c:d0:87:4b:a8:53:
                    95:a6:ec:08:b1:e2:f4:41:2e:23:a5:ae:0d:ad:08:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:41:D7:91:1C:AC:EE:57:11:D4:E5:F5:D7:99:18:F6:BD:D2:29:62
            X509v3 Authority Key Identifier:
                keyid:BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a383030303a3a2f33332d3333203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         01:e0:7b:9d:f3:42:07:9e:fd:c0:16:7a:6c:d5:67:40:1f:39:
         f2:3b:b2:28:30:cb:e0:29:28:f0:bb:61:1e:7e:e6:18:57:63:
         54:28:1c:02:b8:f4:d6:6f:9f:09:ea:1f:83:5c:0e:dd:83:06:
         a9:b4:11:87:fa:cf:61:cc:86:6a:8b:17:bf:d8:7f:71:e2:9b:
         2d:c4:59:db:26:09:81:a5:cb:46:e5:7a:be:5e:87:a2:ea:1c:
         1f:3a:db:22:02:0e:44:b9:03:29:84:dd:fa:09:83:0e:51:5f:
         6d:c1:77:6d:8c:76:72:60:40:1e:dc:d7:47:7d:81:a1:06:19:
         e9:3c:f8:3c:ba:67:62:d2:0b:c3:d3:fd:37:04:98:e5:e8:18:
         d9:59:6a:e8:cb:f8:b8:c9:c5:6e:c5:30:bf:30:3d:0a:a5:f3:
         5a:f4:53:f5:ff:12:a9:d2:88:eb:a8:12:91:94:14:26:1c:f9:
         fc:c8:cd:be:92:33:36:25:01:77:db:88:9b:92:74:ef:fe:e3:
         67:a0:16:76:3d:ca:a5:d2:5e:ca:c7:a8:d8:44:4f:51:93:3c:
         07:5f:65:65:ad:1d:a5:3a:f1:d4:1c:73:67:4a:9a:66:60:71:
         2c:09:b1:a6:f7:e6:cc:4c:3f:bc:7e:cc:a8:1b:15:a4:db:04:
         ae:7f:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org