Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a3a2f33332d3333203d3e20323639363938.roa
File:                     323830343a363838343a3a2f33332d3333203d3e20323639363938.roa (raw, json)
Hash identifier:          6WL+4jbAMUKtxNVY5OXJIyMeOecWoyvgpTDTRRXusAA=
Subject key identifier:   4B:6F:35:34:3A:44:75:A9:9C:5C:C3:51:4E:19:A5:AE:12:61:08:F1
Certificate issuer:       /CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Certificate serial:       702D490B02F60EEEF2AE7E1EFE92D2E71E75CEBB
Authority key identifier: BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a3a2f33332d3333203d3e20323639363938.roa
Signing time:             Tue 23 Jan 2024 14:19:17 +0000
ROA not before:           Tue 23 Jan 2024 14:14:17 +0000
ROA not after:            Tue 21 Jan 2025 14:19:17 +0000
asID:                     269698
IP address blocks:        2804:6884::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2d:49:0b:02:f6:0e:ee:f2:ae:7e:1e:fe:92:d2:e7:1e:75:ce:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
        Validity
            Not Before: Jan 23 14:14:17 2024 GMT
            Not After : Jan 21 14:19:17 2025 GMT
        Subject: CN=4B6F35343A4475A99C5CC3514E19A5AE126108F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:cd:d2:a9:e0:8e:e8:ce:59:67:b3:80:38:
                    c6:0b:73:37:ab:7c:1e:71:10:92:e2:d2:ef:03:00:
                    02:a6:76:69:d6:ac:46:a1:c7:e4:f5:c6:cb:3e:dc:
                    50:3d:65:42:3f:15:bc:c7:9c:7c:17:e9:db:e5:a3:
                    aa:ab:bf:a7:f1:db:f2:03:f9:e3:c7:99:01:5d:3b:
                    e1:e2:07:d2:0a:ec:c0:44:3c:9f:54:b9:93:74:23:
                    bf:e5:6b:d3:60:78:90:31:7d:be:fc:91:7e:50:68:
                    50:99:40:fa:99:ab:ed:45:5c:ce:22:05:82:af:60:
                    ef:1b:94:c6:18:fe:87:4e:8b:4e:0c:d5:f3:ac:83:
                    5b:ee:20:36:ea:cb:ed:8d:b9:43:99:46:d4:93:a3:
                    a4:d4:1c:99:c9:09:d0:31:56:c7:ea:dc:4d:5b:45:
                    b4:ac:07:24:0a:38:37:84:06:3a:56:b3:05:37:da:
                    f5:66:27:d3:4e:5b:94:34:da:87:e1:6c:58:ad:cc:
                    99:fc:25:e8:af:12:6b:a6:3f:4e:1e:3c:50:84:bd:
                    93:fe:4e:71:77:dd:d2:67:34:23:71:5a:bb:88:50:
                    b4:04:78:ad:68:c5:ab:83:b2:41:bf:ec:04:c9:78:
                    7b:1b:fa:d4:7a:63:69:24:90:4d:df:7e:c1:12:cf:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6F:35:34:3A:44:75:A9:9C:5C:C3:51:4E:19:A5:AE:12:61:08:F1
            X509v3 Authority Key Identifier:
                keyid:BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a3a2f33332d3333203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884::/33

    Signature Algorithm: sha256WithRSAEncryption
         c1:17:be:78:b5:e2:fe:b4:25:dd:d4:62:6c:f2:04:db:6a:6c:
         bc:cb:47:2a:f5:7e:1e:85:7d:13:0e:45:22:84:39:cf:14:bc:
         5f:2a:93:79:3e:65:63:e5:6a:1d:ab:7a:a6:1b:db:af:b7:95:
         59:82:b0:1d:ee:dc:82:3e:8c:ff:aa:36:3e:51:01:5c:7d:1b:
         4f:9a:d0:2c:5d:92:42:7d:6a:be:04:11:8b:60:21:a6:70:dc:
         b9:dd:f2:4b:19:fd:4c:01:10:34:9f:3b:36:4d:03:aa:89:b2:
         17:13:c8:9d:f4:67:8f:83:18:06:c8:73:5a:99:58:52:6c:c4:
         60:56:ac:9d:3a:bc:c9:6e:92:4a:a1:13:9a:4b:aa:2b:33:9b:
         2a:f8:8a:1d:4d:13:e1:f7:5c:0e:50:00:4d:48:c5:2e:b7:17:
         04:6a:2a:31:ea:db:7d:74:56:30:8c:1f:19:7d:ab:57:b3:48:
         78:8c:2f:ba:d0:fe:c4:16:0b:7e:7f:69:18:bf:e6:4e:31:ac:
         dc:d5:94:23:6c:0c:64:2e:dc:aa:f5:58:13:95:cf:47:66:26:
         da:cb:13:00:9b:36:d8:e3:07:7e:db:0d:11:70:07:6b:2e:7f:
         1b:57:15:d3:d5:f9:f9:f2:a9:fb:cc:f9:e9:c9:eb:c5:7f:0a:
         0e:95:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:49 2024 by rpki-client on console-ams.rpki-client.org