Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          oTU7hc3kVB2m1fECfSBpeMsF47wBfzwbMbCQnSYuzYc=
Subject key identifier:   4F:6A:32:25:CC:87:6F:00:F6:08:29:BA:75:2B:A6:FF:0C:21:6E:04
Certificate issuer:       /CN=B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342
Certificate serial:       757FD1DF517A4D652B1A0FBE7400B5992CD17179
Authority key identifier: B5:FA:5D:2C:3F:2A:BD:D7:0A:6F:C2:F0:1F:3F:B6:90:EC:38:03:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Thu 01 Feb 2024 01:42:55 +0000
ROA not before:           Thu 01 Feb 2024 01:37:55 +0000
ROA not after:            Thu 30 Jan 2025 01:42:55 +0000
asID:                     265393
IP address blocks:        2804:3364:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7f:d1:df:51:7a:4d:65:2b:1a:0f:be:74:00:b5:99:2c:d1:71:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342
        Validity
            Not Before: Feb  1 01:37:55 2024 GMT
            Not After : Jan 30 01:42:55 2025 GMT
        Subject: CN=4F6A3225CC876F00F60829BA752BA6FF0C216E04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:31:49:f7:ae:61:97:4c:3a:47:8c:25:e1:
                    4e:11:6a:2f:a5:b6:e8:1a:e2:c8:90:ef:a4:55:dd:
                    5d:0d:9b:08:8a:9e:31:7d:c9:7c:c3:4b:7d:40:54:
                    39:8b:bd:30:ca:94:c8:be:b9:bf:02:36:e4:19:9d:
                    8f:04:42:81:75:e3:65:ca:75:54:95:5a:c6:96:7e:
                    fa:7d:a7:b7:47:01:e8:f5:c1:19:d6:18:b8:aa:e3:
                    87:87:28:c4:63:25:53:db:d3:93:7b:14:b2:60:94:
                    61:66:77:e4:b2:80:ab:9c:d8:57:df:83:33:f1:fb:
                    b8:f7:cb:49:fa:37:c1:ed:92:f2:bb:3a:f7:ba:0f:
                    68:f2:6d:d4:e6:45:66:64:59:88:91:10:2c:aa:24:
                    b6:b7:ed:99:5f:fa:0d:c3:43:59:0f:d3:33:68:a6:
                    bf:12:ae:7e:9d:c2:9f:31:4a:e2:83:fe:59:88:85:
                    d8:43:cd:37:53:28:f9:70:93:d9:39:1b:ce:55:f4:
                    1e:8d:e2:70:33:b6:cd:0d:c5:2e:2d:5c:bf:50:f1:
                    a2:b2:ab:19:8d:7c:0d:d5:27:5a:8d:eb:0f:9c:8d:
                    15:e0:94:d6:29:c5:98:6a:52:ea:fe:3a:42:98:71:
                    99:83:51:be:e8:72:ec:84:2c:02:46:9e:59:11:bf:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6A:32:25:CC:87:6F:00:F6:08:29:BA:75:2B:A6:FF:0C:21:6E:04
            X509v3 Authority Key Identifier:
                keyid:B5:FA:5D:2C:3F:2A:BD:D7:0A:6F:C2:F0:1F:3F:B6:90:EC:38:03:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:a2:e8:a1:4f:97:dc:7e:bb:b1:0f:f5:2f:98:30:d8:53:59:
         4e:05:49:0c:57:07:f5:c5:2c:c2:75:5c:21:12:6d:78:6a:4b:
         c4:7b:b1:c8:f6:c2:ba:b7:e2:1d:64:be:13:9a:f7:1d:0c:03:
         a1:91:7a:71:17:a4:f6:b5:46:91:86:b5:eb:79:82:52:9b:f6:
         1e:9e:93:0f:25:03:d3:67:eb:ca:4f:89:a8:84:96:a5:bb:09:
         e6:ea:5e:e6:a7:c2:63:22:51:1c:30:9f:f6:4e:86:94:1f:b6:
         a7:97:30:cd:4d:38:26:09:42:7a:f9:e1:c0:d4:34:fa:5c:34:
         98:e5:74:22:95:74:48:ed:80:df:87:88:f9:d4:55:17:37:76:
         12:3c:49:b5:80:9d:4c:af:c1:57:cd:66:e9:9f:c1:a7:bb:f6:
         19:b1:82:66:5b:33:69:8d:15:34:76:08:bf:48:5d:e5:4f:e3:
         8f:39:a2:39:3e:0c:79:fa:8c:a1:38:7a:03:21:e7:93:d4:b9:
         d7:27:81:b3:34:ba:90:28:e6:5d:06:48:b2:c8:63:73:a4:95:
         e6:0c:ca:68:a7:41:87:e7:5a:e8:1d:b4:2b:a7:c5:10:6c:ab:
         29:b4:4d:74:04:ea:a9:89:57:fe:3b:34:d4:70:f9:63:a1:cb:
         23:f1:9d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org