Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a633030303a3a2f33342d3334203d3e203532363533.roa
File:                     323830343a6266383a633030303a3a2f33342d3334203d3e203532363533.roa (raw, json)
Hash identifier:          KPTYlG1c+X7FrrYJYQcHKNgaVcGnl8pahObhVszAr0o=
Subject key identifier:   C4:33:0B:65:52:C5:F4:6F:90:BC:06:3B:C2:49:00:53:B3:71:B1:D1
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       3E092BDFD5030C8B5FE0AFF67A0B6D962CEAE18E
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a633030303a3a2f33342d3334203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:07 +0000
ROA not before:           Tue 16 May 2023 14:19:07 +0000
ROA not after:            Tue 14 May 2024 14:24:07 +0000
asID:                     52653
IP address blocks:        2804:bf8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:09:2b:df:d5:03:0c:8b:5f:e0:af:f6:7a:0b:6d:96:2c:ea:e1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:07 2023 GMT
            Not After : May 14 14:24:07 2024 GMT
        Subject: CN=C4330B6552C5F46F90BC063BC2490053B371B1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e2:a0:fd:53:60:09:88:c0:2c:a0:0b:dd:92:
                    be:be:af:be:ce:cc:d5:df:93:50:df:a1:2c:4f:ae:
                    13:e9:64:9c:46:a2:a2:9f:b5:8e:8b:78:45:7c:03:
                    f3:3f:db:f2:06:43:7e:61:65:99:e5:02:68:84:b9:
                    3b:fe:54:c2:f5:e8:46:ae:38:4c:0d:c4:bb:21:ba:
                    e7:8d:46:24:ee:17:6b:d1:1f:b2:a9:a9:a2:31:7c:
                    80:ff:30:3e:68:aa:f9:fc:06:50:81:95:27:47:9f:
                    9b:79:4b:41:c7:62:ba:ee:b5:82:21:93:1e:d7:06:
                    4c:53:58:be:7f:6e:d9:fd:ba:5a:47:49:14:9a:72:
                    0f:49:17:6c:6b:93:97:39:c2:1a:2e:f2:b6:90:25:
                    8d:37:5f:36:80:1a:d1:a5:2a:fb:ef:1f:b9:38:f2:
                    ae:9b:ac:eb:62:02:52:08:27:16:52:2d:b1:5c:c1:
                    63:eb:54:f8:96:fc:f3:2e:69:21:68:23:3a:04:5e:
                    5c:7c:48:ff:c2:1c:8b:52:91:fd:d2:43:c5:40:70:
                    06:51:c0:06:d2:4e:26:fd:b9:3f:bd:2b:9b:ac:10:
                    80:7e:5a:e5:5c:2f:a9:e5:85:c4:1e:ad:5a:b8:a5:
                    b3:1e:49:1d:44:bc:4a:03:30:b2:0f:88:b9:f9:c5:
                    83:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:33:0B:65:52:C5:F4:6F:90:BC:06:3B:C2:49:00:53:B3:71:B1:D1
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a633030303a3a2f33342d3334203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bf8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:d2:94:f3:68:a1:1c:ad:fc:9e:10:3a:eb:86:0e:0e:8d:8f:
         b7:9d:9a:b8:d8:b3:be:73:c4:66:de:7e:40:c0:25:7e:50:51:
         58:b4:c7:f5:a7:c4:b9:5d:ca:07:c5:a4:5b:2a:c4:cc:fa:f2:
         a3:e9:eb:4c:01:b3:49:e1:d6:a3:0b:89:6f:59:c4:b3:9c:13:
         75:47:a2:bf:1f:8b:a3:05:aa:ae:26:ba:59:c6:29:a8:f6:a8:
         a2:78:99:7c:c2:09:2c:51:3d:9b:32:05:80:c1:00:ab:0b:01:
         77:14:1e:68:56:8d:e0:83:e5:4a:95:c5:df:cd:39:0a:d3:37:
         7c:4e:e5:69:9a:f3:81:50:da:01:84:62:c2:f4:c1:30:11:79:
         cb:30:36:f4:cb:ab:5e:bf:f9:4d:41:8b:62:b3:d7:e5:fa:22:
         60:55:ed:4c:f3:49:1a:4a:48:50:f2:a3:63:33:54:b5:f4:dc:
         9d:a6:18:40:3d:53:e8:18:cc:f1:2b:b8:3f:32:04:a4:ea:70:
         f0:1d:34:f5:67:0a:73:5c:d1:25:aa:92:76:3e:51:58:90:54:
         48:1c:15:67:1e:d7:73:ff:d9:e8:4e:83:50:9d:1e:0f:af:4a:
         09:df:37:57:ad:8c:fd:6e:66:5a:80:83:91:75:4d:3f:34:c0:
         b8:ae:37:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org