Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a3a2f33342d3334203d3e203532363533.roa
File:                     323830343a6266383a3a2f33342d3334203d3e203532363533.roa (raw, json)
Hash identifier:          0osOxezQb+66qG/8DU53qM4QmsUkhzmcef/ObfWVMyw=
Subject key identifier:   F8:E6:17:81:DC:87:C1:53:D0:1F:75:5A:43:96:6C:92:80:32:6F:A4
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       3ED38E470546E79330698225CFE974F1A5E80B80
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a3a2f33342d3334203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:23:51 +0000
ROA not before:           Tue 16 May 2023 14:18:51 +0000
ROA not after:            Tue 14 May 2024 14:23:51 +0000
asID:                     52653
IP address blocks:        2804:bf8::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d3:8e:47:05:46:e7:93:30:69:82:25:cf:e9:74:f1:a5:e8:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:18:51 2023 GMT
            Not After : May 14 14:23:51 2024 GMT
        Subject: CN=F8E61781DC87C153D01F755A43966C9280326FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:06:fd:f0:c9:1a:45:5c:ad:83:1d:97:ca:
                    75:2d:69:91:2b:b5:97:23:b9:b3:8f:f9:69:0c:ec:
                    ab:9f:b0:0f:8b:fe:2e:57:46:90:32:8f:35:c5:fd:
                    5c:54:1e:b7:2b:5d:a5:38:30:a1:14:1e:9a:56:f0:
                    28:fa:15:b4:ca:ae:0d:21:65:1d:07:11:c4:99:6a:
                    3c:c3:3d:9c:1a:ce:4e:d0:07:22:2f:31:b8:3f:28:
                    3a:a2:1c:d2:a5:a3:66:a2:bb:9f:5a:ba:23:0c:d1:
                    c1:a3:29:21:48:ab:18:13:19:2c:62:e6:62:05:18:
                    2d:ea:72:ca:a7:f6:40:e8:f8:83:de:79:b4:59:e0:
                    8d:93:da:8e:5b:d8:76:2a:4f:dc:bf:34:ab:de:b1:
                    ba:90:f7:40:f5:fe:4f:e6:7a:fd:76:95:cd:49:cd:
                    06:13:0a:fe:77:06:14:21:b0:f5:1a:13:ff:7c:52:
                    c3:66:3d:30:67:8f:7f:ac:0f:4a:90:e3:36:7b:ea:
                    8a:88:06:33:ee:70:19:9c:fa:e9:46:4b:6c:98:da:
                    cc:99:09:d5:05:fb:ad:19:53:a0:8a:6d:a6:38:3b:
                    9b:34:64:f6:ff:8b:a9:9a:c8:83:fe:26:a7:e1:bb:
                    58:df:bf:f7:df:30:44:dc:6c:57:cd:bf:36:81:90:
                    e3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E6:17:81:DC:87:C1:53:D0:1F:75:5A:43:96:6C:92:80:32:6F:A4
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a3a2f33342d3334203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bf8::/34

    Signature Algorithm: sha256WithRSAEncryption
         9e:c8:4f:cc:06:32:48:40:6c:3f:a8:a7:41:8e:2d:ee:69:fd:
         ab:92:24:e7:c3:53:ad:7a:3f:0f:37:d3:93:5d:ff:2f:c6:cb:
         e4:67:ff:80:df:7d:fb:f1:af:d7:7d:df:ff:3a:c2:5d:e2:b4:
         93:3d:69:d6:d0:72:d7:fa:76:6d:07:fb:1e:e8:01:ab:09:e1:
         96:5f:bd:81:ec:b6:9e:f1:c9:c9:17:1f:2c:b1:cd:aa:9d:c8:
         b1:e0:0f:39:71:59:5f:3a:07:be:8a:3c:4f:2b:d2:6c:71:21:
         19:b9:83:85:3f:85:8c:89:b5:6b:3f:4e:be:db:73:ef:aa:65:
         eb:eb:dd:aa:5b:3e:5e:3c:79:0b:1f:b2:37:f2:d8:1a:af:b9:
         ac:5a:a6:c4:64:cb:ee:1a:c5:89:00:ca:2f:4c:84:30:97:59:
         fb:bb:12:60:f9:68:e7:04:7c:33:42:86:48:c5:87:94:2d:94:
         a3:0a:44:0d:ad:8a:86:c8:09:80:50:9a:7f:4c:2c:3f:6b:1b:
         76:3a:22:14:62:40:a2:32:e1:b3:8f:b4:34:22:06:85:9d:1e:
         da:8f:cb:57:19:bd:1d:1a:6a:60:28:f2:2a:18:06:9d:c1:5f:
         ad:e2:e8:fc:b6:f3:42:69:43:d0:01:6e:73:c9:0a:60:0c:42:
         c0:02:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org