Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a343030303a3a2f33362d3336203d3e203532363533.roa
File:                     323830343a6266383a343030303a3a2f33362d3336203d3e203532363533.roa (raw, json)
Hash identifier:          iJZeuJLM5yhHNT5BWNoBJk0V2wMrIdWsKVK7tl0SCcI=
Subject key identifier:   A2:B1:62:51:9D:B2:F5:FE:4D:D0:4B:45:AD:8A:01:C6:E1:F7:A0:D6
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       142D6C327C91D0A5835DA863F92320A6D9A06EF3
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a343030303a3a2f33362d3336203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:03 +0000
ROA not before:           Tue 16 May 2023 14:19:03 +0000
ROA not after:            Tue 14 May 2024 14:24:03 +0000
asID:                     52653
IP address blocks:        2804:bf8:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2d:6c:32:7c:91:d0:a5:83:5d:a8:63:f9:23:20:a6:d9:a0:6e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:03 2023 GMT
            Not After : May 14 14:24:03 2024 GMT
        Subject: CN=A2B162519DB2F5FE4DD04B45AD8A01C6E1F7A0D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:f8:4a:b4:9f:fc:a6:20:63:01:e9:2c:03:
                    04:28:f8:fb:a1:dc:b4:d0:5d:3e:44:32:96:7d:fb:
                    65:1b:10:3a:0b:af:5f:e6:b5:f7:7b:4f:3c:c4:6d:
                    7f:8c:4e:47:0a:75:4e:db:09:70:45:31:d0:c4:00:
                    f8:22:b3:d8:bd:a5:e6:a8:c6:7e:31:35:d8:1e:fe:
                    82:36:61:fb:8c:04:dc:ca:ce:33:93:94:a3:70:de:
                    17:36:5c:2c:29:06:14:07:1a:f7:f9:0b:49:f8:13:
                    33:1d:58:b2:8c:fd:c9:9f:e8:7c:90:c3:24:09:80:
                    8e:96:d3:c2:c3:08:1a:7a:93:a2:ee:93:e2:4b:8b:
                    53:09:6f:c7:fd:ba:42:f0:e5:f9:95:0a:2e:fd:04:
                    f5:16:13:db:ae:31:48:fa:82:33:fa:5b:52:84:ae:
                    e8:a5:c4:24:9d:c6:e4:ce:e5:00:ee:ef:df:05:76:
                    2b:ee:0f:ad:5f:f8:47:88:9f:f0:cf:76:66:b5:6d:
                    45:67:e1:38:0c:a5:f7:5c:4e:6e:80:3a:8c:2b:cd:
                    64:a3:19:d4:8c:23:f8:96:e7:b1:76:f1:71:43:f5:
                    35:79:5d:55:b5:ec:8d:a4:6e:3e:e6:df:64:3c:ae:
                    b7:66:f6:5f:ab:73:6f:97:ce:b6:75:d4:16:26:25:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B1:62:51:9D:B2:F5:FE:4D:D0:4B:45:AD:8A:01:C6:E1:F7:A0:D6
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a343030303a3a2f33362d3336203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bf8:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4b:1f:bd:03:0a:9a:59:45:bb:f8:7b:d3:c6:0f:86:db:56:f4:
         f9:71:d7:b5:01:00:f6:34:d0:d0:90:9f:fc:b3:d8:62:31:c1:
         3e:1a:ea:1a:82:47:ab:0d:4a:d6:aa:e4:15:68:8f:dc:fb:03:
         96:9e:a3:78:b8:78:4e:a4:c3:f1:03:9e:68:a0:f2:74:2e:f3:
         7b:bc:2e:06:ba:4d:8a:1c:d9:36:43:e1:f2:10:f6:f1:1e:b0:
         66:5a:4d:89:3c:7e:52:31:b7:05:44:cf:28:9b:d0:76:d7:d1:
         ab:b1:ba:b6:2c:6d:19:44:5a:eb:49:fe:bf:07:5b:78:73:e9:
         c5:ef:a0:01:14:c3:d8:78:13:3f:ce:e9:c9:ba:59:a5:84:0f:
         2e:27:5a:e8:de:b3:48:15:13:fa:46:a2:53:e5:82:14:8e:2a:
         b0:7c:d4:1c:a2:ef:e7:2f:ad:f2:2d:f6:d6:be:15:bd:66:cd:
         aa:a8:60:eb:11:4e:bc:7d:d5:64:83:bd:c8:f8:76:7e:2d:b9:
         df:70:e4:02:f3:5f:06:30:0e:05:b2:d0:12:ae:7c:da:fc:2d:
         8c:f6:fd:6c:67:ed:92:bc:ce:b4:eb:ee:e3:52:ee:49:5d:a7:
         8e:2a:7c:91:c1:02:0f:3b:0f:1d:27:80:8a:68:30:0d:e0:5d:
         13:df:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org