Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a3a2f33322d3332203d3e203532363533.roa
File:                     323830343a6266383a3a2f33322d3332203d3e203532363533.roa (raw, json)
Hash identifier:          pqw2s/GxXngN/56gwDjFi7KT8Ve/Yi071riXLyb0bJ8=
Subject key identifier:   70:B2:0B:C9:5D:C3:71:7F:F8:01:80:7F:2B:E4:B5:7F:A7:CA:76:6F
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       064A3BBEF77384BE82F8280482F22999BB557418
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a3a2f33322d3332203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:23:49 +0000
ROA not before:           Tue 16 May 2023 14:18:49 +0000
ROA not after:            Tue 14 May 2024 14:23:49 +0000
asID:                     52653
IP address blocks:        2804:bf8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4a:3b:be:f7:73:84:be:82:f8:28:04:82:f2:29:99:bb:55:74:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:18:49 2023 GMT
            Not After : May 14 14:23:49 2024 GMT
        Subject: CN=70B20BC95DC3717FF801807F2BE4B57FA7CA766F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:03:6a:ac:84:50:0c:f5:f9:3e:b7:8c:be:42:
                    6e:1b:1e:06:e3:90:c3:17:0d:53:cc:a0:2c:e9:ba:
                    2e:31:dc:12:91:2e:1f:93:ba:9f:e5:20:60:79:ad:
                    41:13:ea:b9:37:6d:7a:ed:a4:a7:f8:53:de:c5:07:
                    9f:0d:2b:cb:dc:e1:7d:fc:9e:e3:00:ec:b3:82:00:
                    5f:93:97:ba:8a:76:95:d8:53:bd:08:07:12:34:9c:
                    82:a1:61:53:45:95:c4:df:3d:04:fc:4f:ba:f3:5e:
                    af:fc:30:ab:0a:4e:a8:f3:86:61:f2:5b:c4:8c:6b:
                    05:ad:4e:d9:41:2c:cd:7f:06:d5:d4:9a:c5:a1:92:
                    59:ff:57:82:04:3c:9b:ad:04:f8:ff:24:19:e3:f6:
                    37:85:48:f1:d7:c3:96:3f:7d:5e:f2:7b:5b:c7:d7:
                    c3:2d:f7:1a:75:53:7e:12:b5:cf:79:46:71:1e:9f:
                    1c:47:11:ba:e2:07:6b:8e:74:41:c2:36:36:b4:6f:
                    3e:14:fd:45:76:0e:57:b3:0c:ae:00:9d:3b:59:ad:
                    4d:f5:47:49:0b:3c:2d:00:2c:a2:58:52:c9:f2:59:
                    6e:ab:bd:26:f6:47:ab:63:65:82:e6:83:78:04:08:
                    b5:9b:14:79:fe:3d:28:c1:e1:54:f0:7d:55:bc:59:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B2:0B:C9:5D:C3:71:7F:F8:01:80:7F:2B:E4:B5:7F:A7:CA:76:6F
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a3a2f33322d3332203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:d0:3a:8f:1c:f3:f5:23:d1:5d:89:38:65:88:b5:c3:22:5d:
         79:fb:3a:f8:57:55:32:bf:67:c6:4c:00:98:6d:a6:79:78:7a:
         9b:4e:95:07:29:22:59:7d:d0:bd:d0:04:88:07:94:91:13:65:
         8b:cf:92:ff:0c:11:a8:70:e7:77:1c:34:86:87:be:54:f1:04:
         8c:d4:98:99:87:69:8a:ce:ea:88:e5:45:99:15:17:dc:a8:a4:
         f2:f4:90:2b:02:ec:cf:b4:64:69:25:6b:a4:65:5e:de:a7:f2:
         d9:2d:c0:0c:c4:b9:a8:a7:6b:c1:3d:f5:bc:b9:98:27:8c:e7:
         f0:f3:07:0b:76:07:8b:1c:9b:c0:e8:ad:82:5a:39:94:f5:47:
         47:f9:f3:03:4b:7c:df:66:bb:91:fd:25:e8:01:9b:c5:fb:ad:
         e2:64:76:ea:23:40:28:80:85:0b:b2:5c:92:23:9d:2a:39:2e:
         d3:78:54:d9:ea:b7:1f:80:73:dc:c9:26:f0:10:df:29:40:68:
         ea:a9:be:ba:95:65:1d:f2:12:7b:0d:86:cf:8a:1c:90:ea:92:
         8c:a3:04:2f:67:61:ef:db:e4:26:ae:a8:7a:75:d5:a3:02:0e:
         a1:4c:54:55:96:35:e3:1c:57:5c:31:03:1b:62:36:2e:b7:7d:
         59:b0:98:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org