Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/323830343a346138383a3a2f33322d3438203d3e20323637323436.roa
File:                     323830343a346138383a3a2f33322d3438203d3e20323637323436.roa (raw, json)
Hash identifier:          /nSAaB3M4V01NJQdBCk9y9g+vQPBHCbzY/epMTvMzlQ=
Subject key identifier:   D0:2A:0C:0C:BE:64:8D:26:29:D0:02:7C:2E:A8:74:EC:EA:49:B7:66
Certificate issuer:       /CN=BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5
Certificate serial:       1A1EC25EEA390A6487A4D898F08CDF8914835E72
Authority key identifier: BF:7E:A7:36:40:E6:02:9F:6A:17:BE:AA:62:D4:4D:3E:AB:DA:4A:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/323830343a346138383a3a2f33322d3438203d3e20323637323436.roa
Signing time:             Thu 15 Feb 2024 23:37:38 +0000
ROA not before:           Thu 15 Feb 2024 23:32:38 +0000
ROA not after:            Thu 13 Feb 2025 23:37:38 +0000
asID:                     267246
IP address blocks:        2804:4a88::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1e:c2:5e:ea:39:0a:64:87:a4:d8:98:f0:8c:df:89:14:83:5e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5
        Validity
            Not Before: Feb 15 23:32:38 2024 GMT
            Not After : Feb 13 23:37:38 2025 GMT
        Subject: CN=D02A0C0CBE648D2629D0027C2EA874ECEA49B766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:bc:3e:2c:da:3b:67:1d:4c:8b:b4:16:95:
                    c8:f0:06:c0:96:8a:65:fb:5c:fb:8f:5a:b5:09:d1:
                    05:4b:39:00:e9:20:50:fe:7e:c7:b2:fc:36:7f:a5:
                    2e:e8:6a:82:89:a8:cc:62:21:1a:de:d4:b4:74:83:
                    6c:46:6f:0f:41:9d:45:16:5a:30:7f:77:ff:42:ae:
                    0f:fe:fd:20:5e:fc:bd:03:3f:2d:3d:df:99:2b:8e:
                    4d:60:35:3f:6f:b0:6f:f4:90:db:fe:52:df:97:39:
                    2f:8d:76:47:57:cb:61:94:d2:0a:65:8d:5e:e7:ed:
                    0c:24:4a:2c:bf:de:0f:fb:5c:db:a9:0d:27:e5:1d:
                    cb:77:f1:69:b1:9b:0f:76:c0:02:1f:5e:96:6a:8b:
                    f5:df:52:2e:bb:a2:04:be:0f:33:6d:f5:43:97:61:
                    36:50:4e:f0:4e:23:ba:97:c8:28:71:f8:9c:4d:40:
                    bc:9a:e0:e8:11:b5:11:f9:1d:1e:49:79:dc:c1:1a:
                    f4:23:54:ab:ee:e6:c4:4c:8a:df:f1:72:74:fc:11:
                    f4:0b:e8:d4:9c:32:38:41:1e:c4:c0:48:12:d7:28:
                    9d:18:a8:8d:d3:86:20:06:12:a8:87:d4:af:b8:83:
                    1f:1f:b2:bd:a3:fd:55:71:bd:cf:ac:a5:46:96:90:
                    7f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2A:0C:0C:BE:64:8D:26:29:D0:02:7C:2E:A8:74:EC:EA:49:B7:66
            X509v3 Authority Key Identifier:
                keyid:BF:7E:A7:36:40:E6:02:9F:6A:17:BE:AA:62:D4:4D:3E:AB:DA:4A:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/323830343a346138383a3a2f33322d3438203d3e20323637323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a88::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:c8:78:0e:23:70:a6:d8:05:23:32:1b:51:dc:07:1a:0b:d3:
         c1:91:1c:39:70:99:47:84:5f:1d:be:c1:03:e0:30:ba:73:c0:
         75:c4:51:8c:fd:8e:22:c4:82:c5:d4:39:d9:54:37:cd:34:96:
         41:cb:2e:e5:40:45:dd:7f:34:73:07:af:fd:c2:49:90:e4:7d:
         a4:36:b9:20:88:d9:a7:03:fe:33:4a:48:ef:1f:da:8a:ab:96:
         bf:f3:10:65:0c:ef:99:bd:72:5c:39:9d:0e:70:1e:71:3d:93:
         62:d8:7c:f3:d3:11:3d:fa:76:19:e0:7d:ab:42:b5:ee:f9:32:
         c5:65:f1:93:e7:62:ef:f7:3a:03:e4:41:59:1d:39:13:a8:be:
         55:af:47:71:af:ff:11:54:14:d5:7e:e8:52:01:cb:40:f3:f3:
         c1:e7:7d:2e:73:fb:5b:4b:34:77:b4:5d:86:85:27:f4:c7:a4:
         28:c5:57:a6:f9:26:7e:e9:bc:04:3c:8a:1a:eb:73:0a:e1:4c:
         1b:61:1c:38:cd:a9:fe:6b:72:bf:e4:6c:c8:2b:10:99:b4:41:
         12:b8:59:21:f9:20:b6:d9:3b:eb:b9:bf:9d:20:4e:47:07:f1:
         29:be:d0:01:17:8d:aa:48:26:80:8d:8e:63:35:26:54:89:33:
         17:33:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org