Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/323830343a356662633a3a2f33322d3332203d3e20323639313230.roa
File:                     323830343a356662633a3a2f33322d3332203d3e20323639313230.roa (raw, json)
Hash identifier:          M4fqs/kGsnL8aWcMsGn7iynTlR6FNao/cS7697VLpqs=
Subject key identifier:   D7:54:C5:D3:FA:42:8A:9C:5C:56:FA:97:DA:F7:4D:47:55:D4:2C:FF
Certificate issuer:       /CN=6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A
Certificate serial:       34B7523E2CE65AFE2384AB77AFF6AC0D7BCAF859
Authority key identifier: 6B:6A:2A:9C:47:A9:F6:0A:7A:49:B3:AB:53:B5:8E:89:F7:12:75:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/323830343a356662633a3a2f33322d3332203d3e20323639313230.roa
Signing time:             Wed 08 Nov 2023 17:40:36 +0000
ROA not before:           Wed 08 Nov 2023 17:35:36 +0000
ROA not after:            Wed 06 Nov 2024 17:40:36 +0000
asID:                     269120
IP address blocks:        2804:5fbc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b7:52:3e:2c:e6:5a:fe:23:84:ab:77:af:f6:ac:0d:7b:ca:f8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A
        Validity
            Not Before: Nov  8 17:35:36 2023 GMT
            Not After : Nov  6 17:40:36 2024 GMT
        Subject: CN=D754C5D3FA428A9C5C56FA97DAF74D4755D42CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:c3:53:56:83:72:38:c0:68:ce:60:c3:c5:
                    e6:0a:47:ba:9b:a0:07:14:56:de:ad:fe:77:e9:5c:
                    9d:02:25:7b:71:ed:a9:21:bc:55:af:25:1e:34:84:
                    10:57:9d:e2:5c:f1:a1:66:76:93:1d:00:35:a3:a9:
                    78:16:e1:b6:6a:64:f0:8a:b3:7c:58:f8:b0:4b:0a:
                    30:17:a8:92:02:4e:42:56:22:6e:a9:2c:95:3c:e7:
                    2b:a4:25:8d:a6:43:e3:be:b5:2a:84:20:9e:98:a4:
                    31:17:90:9b:61:98:41:82:a7:20:ac:63:f0:a2:72:
                    73:5e:f3:42:9a:a0:67:0b:50:40:bd:30:8c:be:05:
                    37:e8:55:d3:a4:c2:04:0a:55:ac:8c:f8:21:3d:31:
                    1b:15:af:21:60:39:25:b5:af:db:a4:d7:ad:e2:93:
                    4c:16:ef:32:e4:fb:c5:63:80:72:b8:dc:a7:46:cf:
                    6a:dc:97:7a:cc:47:3c:4e:55:af:dd:32:cb:8d:68:
                    34:08:42:f9:ae:be:c0:82:80:28:c4:b1:ac:94:72:
                    ac:a5:fe:23:43:b9:29:63:7f:de:bf:69:15:cf:0c:
                    f0:5e:73:87:1c:9f:db:3e:9d:89:38:df:dc:f4:88:
                    7b:9d:ef:27:1f:84:c2:55:57:16:0f:58:a0:c5:7b:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:54:C5:D3:FA:42:8A:9C:5C:56:FA:97:DA:F7:4D:47:55:D4:2C:FF
            X509v3 Authority Key Identifier:
                keyid:6B:6A:2A:9C:47:A9:F6:0A:7A:49:B3:AB:53:B5:8E:89:F7:12:75:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/323830343a356662633a3a2f33322d3332203d3e20323639313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:b9:00:87:f2:29:54:c5:45:a3:5d:fe:87:d6:9f:ee:f6:
         6f:d2:b6:0c:8b:74:d2:a1:95:80:07:9a:27:42:36:61:e7:7a:
         0d:be:73:f6:ce:ce:d8:92:34:a6:86:48:0c:6d:9f:2b:e4:6b:
         9c:65:b2:9d:ff:87:0e:68:ba:30:36:ae:a9:16:83:4f:67:7d:
         13:2c:b2:fc:1d:cd:21:37:f7:4b:dd:fc:81:71:da:46:91:68:
         a3:17:63:bb:2d:dd:5f:d5:c3:ee:8d:7f:7c:fd:48:bf:de:02:
         ad:db:a9:a5:93:9e:2a:09:88:a3:54:bf:3a:c5:b9:b8:35:1c:
         a3:52:da:cc:18:27:48:9c:d1:01:fd:14:07:2e:47:5f:14:d5:
         ff:8b:a5:e4:08:9f:43:94:90:2a:92:b4:3b:11:49:56:ad:55:
         ed:29:48:88:c0:1d:f7:34:1e:8c:53:02:27:ee:9c:20:5a:71:
         cc:60:be:62:e5:8e:3b:49:91:ad:a5:89:4a:b3:03:5e:8a:48:
         2b:ec:45:6c:8d:38:c2:92:10:1b:d4:c6:4e:15:d5:5a:d9:2a:
         6c:2a:3e:90:21:95:5e:66:4a:42:5a:0a:11:c7:a7:d1:93:be:
         52:22:cc:0e:f7:e5:38:2b:86:ce:48:76:88:f8:69:ae:ea:84:
         11:a0:7f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org