Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33322d3438203d3e20323632353332.roa
File:                     323830343a6563383a3a2f33322d3438203d3e20323632353332.roa (raw, json)
Hash identifier:          0aoVDsYlfMhqdoesZwkF44LttNGWgP0pWP2P05ucUdg=
Subject key identifier:   BC:4B:4D:B7:15:B5:88:B6:49:9E:8B:6A:EE:76:41:9C:57:FB:5C:2C
Certificate issuer:       /CN=B01FD3D3715CD38F1177ED9627CE619ABD9C34A1
Certificate serial:       396BFA6819C7E17C81EAB5239351FADB990F6140
Authority key identifier: B0:1F:D3:D3:71:5C:D3:8F:11:77:ED:96:27:CE:61:9A:BD:9C:34:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B01FD3D3715CD38F1177ED9627CE619ABD9C34A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33322d3438203d3e20323632353332.roa
Signing time:             Thu 27 Jul 2023 15:55:56 +0000
ROA not before:           Thu 27 Jul 2023 15:50:56 +0000
ROA not after:            Thu 25 Jul 2024 15:55:56 +0000
asID:                     262532
IP address blocks:        2804:ec8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6b:fa:68:19:c7:e1:7c:81:ea:b5:23:93:51:fa:db:99:0f:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B01FD3D3715CD38F1177ED9627CE619ABD9C34A1
        Validity
            Not Before: Jul 27 15:50:56 2023 GMT
            Not After : Jul 25 15:55:56 2024 GMT
        Subject: CN=BC4B4DB715B588B6499E8B6AEE76419C57FB5C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:70:c1:3d:27:e4:0a:37:b8:83:a5:52:89:
                    12:57:fc:08:63:ca:fb:84:43:c0:8c:71:0d:cd:d4:
                    c6:d7:eb:ae:5b:00:47:3a:d6:67:a5:55:2b:48:59:
                    58:ce:0e:be:1f:5f:6f:a4:63:45:5e:0f:3f:4a:f6:
                    e9:bf:7e:53:6d:ed:b3:7b:b1:7b:23:c2:a4:eb:08:
                    ec:05:d9:55:b5:0e:43:04:4b:bf:2f:d6:4b:75:07:
                    18:a0:0f:fd:24:0c:d1:ca:7c:8a:91:a3:82:fe:0e:
                    fc:41:c1:e2:c2:f1:be:28:9e:da:7f:c4:12:97:87:
                    c2:0c:6f:72:ec:04:7c:27:8c:bb:4e:4e:ab:62:ec:
                    00:be:01:b5:f9:a2:21:65:dd:a8:42:8f:88:dd:70:
                    b6:2c:97:cd:b4:13:72:3a:85:84:bc:12:2c:c3:8a:
                    d3:a7:72:ca:51:fa:39:5f:ab:ff:61:a9:9b:66:69:
                    00:be:cb:80:e8:de:23:68:26:c1:1a:d9:0c:44:4b:
                    2a:00:74:81:8f:90:20:af:41:b2:1e:d3:ad:bd:5c:
                    b5:3e:be:a7:7f:44:e7:af:ab:b2:8e:ad:19:f9:00:
                    b0:ee:6a:64:0d:d6:1c:82:38:53:63:05:08:da:81:
                    74:fa:9c:99:b9:df:d8:45:60:77:fa:d2:1f:f9:a7:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4B:4D:B7:15:B5:88:B6:49:9E:8B:6A:EE:76:41:9C:57:FB:5C:2C
            X509v3 Authority Key Identifier:
                keyid:B0:1F:D3:D3:71:5C:D3:8F:11:77:ED:96:27:CE:61:9A:BD:9C:34:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/B01FD3D3715CD38F1177ED9627CE619ABD9C34A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B01FD3D3715CD38F1177ED9627CE619ABD9C34A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33322d3438203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:9e:28:08:56:3e:0c:b3:ff:07:7a:bc:1a:7d:04:6f:8a:2f:
         10:e7:90:fd:54:88:63:54:21:6e:5b:05:82:d2:16:0d:e8:79:
         62:16:7c:72:78:5d:7e:2d:f5:5c:b8:f4:ae:9f:2c:b6:f1:99:
         93:38:2b:aa:c9:d6:e1:3f:83:f3:a2:c2:6d:f9:b8:6c:c2:31:
         40:da:c4:3c:85:19:43:77:2e:80:b9:6e:f8:b6:5f:53:2b:38:
         64:5d:fc:ae:35:78:e2:1b:bf:58:cd:b5:06:52:12:79:aa:18:
         76:2e:51:a2:eb:8c:5b:14:fc:fd:f4:2d:63:29:86:40:a7:e1:
         eb:35:58:41:48:fa:1c:0e:73:fe:e4:e2:c8:c6:16:ea:5e:3e:
         df:68:e1:0c:c4:05:c5:a2:91:89:62:ff:ba:ba:c0:cc:55:37:
         cc:44:1f:0b:9d:cc:93:9f:3b:0d:82:a2:e8:4f:aa:46:71:f3:
         95:17:d8:c2:5e:5f:d5:26:4d:62:56:30:a0:57:85:86:c5:dd:
         78:ec:b7:c0:01:64:06:53:be:26:10:02:8a:fa:74:27:07:6d:
         99:4b:98:8c:b6:7b:2f:43:b6:c5:33:a2:68:34:18:ed:7b:23:
         f9:df:b8:00:c2:4f:54:43:91:8a:50:33:c4:3f:c3:8a:26:75:
         46:97:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org