Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a383030303a3a2f33332d3333203d3e203238333630.roa
File:                     323830343a31343a383030303a3a2f33332d3333203d3e203238333630.roa (raw, json)
Hash identifier:          nTSf6W9+Ct7dLRrwWZwDNfBEDSNht5/H/lJMOlm1pnc=
Subject key identifier:   61:75:73:0A:89:3D:86:25:BC:35:4D:A5:A0:66:90:F3:5A:70:BC:96
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       A75CEA0EE0F3FE3699CCBB318008F060AFD30F
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a383030303a3a2f33332d3333203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:20 +0000
ROA not before:           Sat 06 Apr 2024 02:40:20 +0000
ROA not after:            Sat 05 Apr 2025 02:45:20 +0000
asID:                     28360
IP address blocks:        2804:14:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a7:5c:ea:0e:e0:f3:fe:36:99:cc:bb:31:80:08:f0:60:af:d3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:20 2024 GMT
            Not After : Apr  5 02:45:20 2025 GMT
        Subject: CN=6175730A893D8625BC354DA5A06690F35A70BC96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:40:4d:d9:73:85:4a:fb:f7:74:de:45:c5:2a:
                    6f:ef:f7:77:c3:5a:70:3e:a3:4a:a1:c1:dc:70:01:
                    3a:d1:76:8a:2f:0c:75:27:ef:4e:28:7e:a7:ae:c1:
                    6c:2c:c4:b5:62:45:94:e6:22:26:4e:f2:41:7b:7c:
                    d5:8c:8b:e7:f8:9a:6a:c7:2e:97:b4:df:49:c3:40:
                    aa:c7:ce:87:4d:82:9b:a7:be:ca:44:3c:53:d4:d4:
                    ba:8a:80:4d:e8:ce:d4:a1:2d:49:d7:02:99:d9:b5:
                    43:cd:98:70:8c:ba:40:cf:17:39:70:a7:91:0e:07:
                    86:c3:e7:2c:78:13:ab:c3:98:00:1a:d1:f1:0f:eb:
                    a2:3e:ee:3c:5a:30:f6:58:de:96:44:de:b5:95:b1:
                    36:5e:56:e9:4c:4a:29:e6:83:fd:af:70:20:c6:85:
                    3a:f0:94:60:c9:61:b8:b6:98:bf:26:1d:83:6b:b5:
                    83:77:54:80:96:f9:ff:61:d8:d0:2f:b2:a2:15:c4:
                    d6:15:f1:d2:55:90:52:b3:68:e0:8b:e6:9a:52:fd:
                    d2:bd:47:c0:67:eb:8c:e0:e8:02:69:81:f5:b0:ed:
                    72:5b:57:af:75:b5:45:37:56:47:b5:91:9d:f2:e4:
                    e6:55:68:e6:22:39:0c:48:e9:f9:7d:49:d4:b4:2c:
                    96:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:75:73:0A:89:3D:86:25:BC:35:4D:A5:A0:66:90:F3:5A:70:BC:96
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a383030303a3a2f33332d3333203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:84:f8:48:87:12:5c:51:36:11:fc:b9:93:17:2b:78:4b:
         db:14:1f:16:b1:ac:71:8a:94:59:21:fa:14:8d:97:c0:40:8c:
         ce:7d:d3:1e:2b:f6:2d:7c:5f:86:2a:61:99:b6:a6:dc:e8:15:
         93:10:91:96:2a:9b:ff:a9:31:b5:43:c6:ff:e8:23:33:86:87:
         4d:39:60:3b:e1:8d:72:de:33:2a:23:d6:f7:6f:0d:ea:e1:42:
         f8:a1:52:28:df:32:a6:2f:7f:b9:d4:ad:ec:d1:db:85:d9:bc:
         c3:1e:ad:b5:fd:e0:b4:bc:3f:bd:18:5d:4e:33:be:97:6b:23:
         02:d2:a2:c6:0b:a7:a5:dc:3e:46:92:54:d3:2a:3e:6d:16:13:
         72:06:66:ac:12:6b:44:ec:42:69:18:cb:cc:1f:70:3a:8c:f0:
         da:d4:c7:e6:8f:c6:93:00:42:54:34:36:2d:63:47:a0:00:df:
         fb:d5:b1:53:ea:95:89:6f:db:8d:62:d2:11:38:1e:6b:64:82:
         8c:cc:25:a1:31:16:33:94:e4:d4:0f:d7:b9:84:f7:a4:a9:86:
         8e:ce:9e:87:b6:05:b0:5e:33:e0:64:57:0a:f4:df:ae:9a:a3:
         50:22:8f:8e:df:93:ae:a0:b9:07:46:84:08:15:18:97:d8:92:
         78:48:8c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org