Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a666666663a663730363a3a2f36342d3634203d3e203631353839.roa
File:                     323830343a343866303a666666663a663730363a3a2f36342d3634203d3e203631353839.roa (raw, json)
Hash identifier:          +UbivBM//60glASf4Fju6zqZM9j9DSE15kHSiA81fU0=
Subject key identifier:   BB:03:47:81:4F:8B:35:84:FE:F2:5D:97:F7:73:1D:48:43:9F:2F:4B
Certificate issuer:       /CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
Certificate serial:       0EF71F95E64C3F4249D2661CEAB71032F4986139
Authority key identifier: 64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a666666663a663730363a3a2f36342d3634203d3e203631353839.roa
Signing time:             Tue 21 Mar 2023 13:30:03 +0000
ROA not before:           Tue 21 Mar 2023 13:25:03 +0000
ROA not after:            Tue 19 Mar 2024 13:30:03 +0000
asID:                     61589
IP address blocks:        2804:48f0:ffff:f706::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f7:1f:95:e6:4c:3f:42:49:d2:66:1c:ea:b7:10:32:f4:98:61:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
        Validity
            Not Before: Mar 21 13:25:03 2023 GMT
            Not After : Mar 19 13:30:03 2024 GMT
        Subject: CN=BB0347814F8B3584FEF25D97F7731D48439F2F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:53:27:20:c4:ef:19:76:33:ce:4c:a2:8c:
                    56:12:94:53:c6:b8:a8:67:71:4d:1d:69:ec:94:70:
                    f8:a6:bf:3a:31:af:39:b2:3e:32:40:33:2f:99:1e:
                    e4:2b:9c:e2:ec:84:ef:fb:0d:f0:a3:0c:c7:52:92:
                    f5:cc:29:c1:2b:53:d0:53:30:56:7f:d4:0b:68:19:
                    61:b4:32:fd:22:88:63:a3:d9:6d:39:d2:09:c5:e1:
                    40:01:27:b6:e7:49:8c:3a:62:0f:80:cd:fd:7a:db:
                    30:46:74:0b:1f:f0:6b:76:73:8b:54:4c:58:56:04:
                    9a:6a:5e:d9:95:5e:f3:07:af:2a:fc:84:e8:ed:30:
                    20:22:39:85:21:b8:3a:0c:89:44:5c:e1:56:81:a5:
                    11:43:6f:8d:ba:b0:98:83:e7:9d:79:26:d0:4f:e2:
                    18:b5:bb:8a:87:27:ac:b3:de:98:d2:4d:bf:4e:39:
                    8c:25:72:99:8a:a2:e4:fb:5c:36:04:c4:df:37:8e:
                    4e:c3:51:a1:64:a0:5c:a1:d7:ca:a9:50:9a:c4:c3:
                    83:02:86:a5:48:3d:82:32:0f:5b:e7:95:19:01:8a:
                    c8:82:b6:6d:34:e2:1f:45:d6:d0:69:c7:e5:ad:02:
                    aa:c0:4c:f1:ef:f0:50:d6:f6:44:3c:6e:7b:84:35:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:03:47:81:4F:8B:35:84:FE:F2:5D:97:F7:73:1D:48:43:9F:2F:4B
            X509v3 Authority Key Identifier:
                keyid:64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a666666663a663730363a3a2f36342d3634203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:ffff:f706::/64

    Signature Algorithm: sha256WithRSAEncryption
         74:6a:d6:1b:1c:3d:eb:67:f4:2a:fe:cb:77:fb:9f:53:ca:b9:
         98:2d:a6:b1:cc:87:4b:e5:5b:37:ca:e0:d2:23:e7:23:3f:47:
         a3:96:ca:81:a7:35:04:e9:e3:fb:4b:8f:60:03:17:72:69:48:
         06:18:7e:d5:7b:29:9b:86:1e:16:a5:0e:b4:03:29:fa:05:a8:
         52:9f:08:26:b1:45:92:f1:8e:db:48:6c:a8:a5:fa:48:28:b1:
         22:f1:82:c9:67:e1:77:8a:fc:33:73:43:b0:e9:b2:b3:88:93:
         2c:18:07:c0:0f:68:2a:45:9c:10:ae:0b:8b:e1:82:11:e4:aa:
         15:41:0f:da:b5:a5:f3:d5:94:31:2d:d3:7c:00:b4:fc:6f:c4:
         12:6c:a3:70:59:cc:66:11:67:1c:00:e4:b1:0f:34:94:28:16:
         12:14:02:50:04:ad:ab:54:5e:f2:cf:83:15:a6:70:f2:36:b0:
         2c:b7:d4:e7:49:3d:1a:0a:02:59:93:5f:3f:69:65:fe:00:6f:
         41:40:b1:75:e7:2a:b1:e2:7f:22:0a:5b:9d:26:c5:93:c8:74:
         c1:04:1b:c5:ad:11:72:93:7f:3d:ea:dc:fa:05:7c:4a:32:16:
         99:8f:fa:8d:bf:6c:66:63:08:bd:33:93:37:09:2b:45:31:da:
         2e:f2:14:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org