Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a383030303a3a2f33342d3334203d3e203238333630.roa
File:                     323830343a31343a383030303a3a2f33342d3334203d3e203238333630.roa (raw, json)
Hash identifier:          euu1NiNTvcI3gyF+GU0IdpR8cZ4DOPEscBjYiT8A2Vg=
Subject key identifier:   5E:B5:5E:C1:CB:39:51:51:C8:CF:C8:07:82:99:C2:FF:EA:47:14:75
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       24033303C5493AE22B94C9B0FB03DA6268538CB6
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a383030303a3a2f33342d3334203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:46:03 +0000
ROA not before:           Sat 06 Apr 2024 02:41:03 +0000
ROA not after:            Sat 05 Apr 2025 02:46:03 +0000
asID:                     28360
IP address blocks:        2804:14:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:03:33:03:c5:49:3a:e2:2b:94:c9:b0:fb:03:da:62:68:53:8c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:41:03 2024 GMT
            Not After : Apr  5 02:46:03 2025 GMT
        Subject: CN=5EB55EC1CB395151C8CFC8078299C2FFEA471475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:a1:1e:20:b4:56:d6:9a:00:3e:e7:fb:b3:
                    77:13:28:d3:e3:fa:c7:18:e9:f4:3d:10:0f:77:34:
                    e1:72:85:38:4f:04:f8:63:21:dc:ab:9d:e7:bd:65:
                    97:b9:9a:fb:c0:4c:0c:77:f4:c7:98:97:24:34:08:
                    d3:d0:5b:39:df:f2:ab:4e:0c:62:db:0c:4f:2b:91:
                    59:80:2e:f5:73:f7:06:68:3c:12:a5:36:33:b9:f9:
                    a3:01:98:d9:64:22:13:5b:fd:7d:34:20:cc:41:5f:
                    7d:ec:bf:19:d9:1f:2c:8f:ca:84:63:dc:e9:40:67:
                    c0:ed:74:f5:c2:26:fb:4f:9f:db:b1:9a:44:07:53:
                    a7:50:ce:02:a1:07:d0:04:44:b2:a1:27:31:1b:c2:
                    0c:78:cb:1e:54:b3:0a:aa:6f:2f:fc:59:7e:1f:01:
                    eb:38:53:65:b6:10:62:3e:a1:48:37:2a:79:55:bc:
                    6e:05:16:02:f5:5e:84:53:60:f9:09:72:37:c3:77:
                    84:33:f2:2d:2c:ec:3e:1c:ba:eb:9b:4e:d6:ba:40:
                    77:19:60:52:33:71:b6:71:0f:2a:a1:9f:6b:04:ad:
                    09:14:21:50:cd:58:97:5b:bb:e4:ad:f4:88:6e:00:
                    11:47:c8:ce:b2:8e:66:80:05:a5:0e:27:52:b2:15:
                    6c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B5:5E:C1:CB:39:51:51:C8:CF:C8:07:82:99:C2:FF:EA:47:14:75
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a383030303a3a2f33342d3334203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:f3:52:c1:61:08:65:28:57:8b:58:85:e5:a2:2f:09:a6:df:
         a1:06:4e:f0:a3:8a:8b:53:74:22:70:e7:d2:65:97:8f:a4:8a:
         9a:c5:b9:90:5c:91:35:47:ef:42:89:b2:6e:5a:ae:d4:a0:a8:
         94:b2:24:cc:87:ce:e1:c1:e0:3e:99:22:d9:70:b7:96:0d:f7:
         22:fb:64:b7:01:86:3c:44:5c:88:04:14:ae:68:bd:35:13:0a:
         df:43:ac:1f:fa:17:5c:c9:e4:42:15:e4:3e:34:fc:13:30:fa:
         7b:10:3f:8d:d2:9d:4f:f6:86:3a:e9:d7:9a:6a:92:f9:a3:9f:
         1f:e0:6c:93:fa:de:4a:89:a5:6e:b8:7d:a3:1a:01:72:3b:92:
         83:14:05:86:83:b9:a6:5e:69:92:7c:62:be:9b:13:bc:47:fc:
         dd:34:61:97:92:92:fc:f6:b7:f6:cd:a7:2b:53:a2:ee:05:2c:
         81:0c:81:6c:35:ae:82:a1:dd:9c:4f:63:9c:a2:2f:a1:1f:36:
         37:ae:64:5c:fa:c2:8b:a9:46:86:82:97:22:2b:8c:dd:e9:76:
         ca:bc:48:92:7a:ec:12:7c:d1:1c:a8:69:8b:01:07:08:47:7d:
         ab:b6:9b:b8:13:0c:42:ec:9d:cc:57:c3:c9:06:d2:b3:16:d2:
         aa:82:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org