Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3333203d3e203238333630.roa
File:                     323830343a31343a3a2f33322d3333203d3e203238333630.roa (raw, json)
Hash identifier:          DFpD42Wyoz/9HJOfelq8OBCzvOEfNblPpuw+vdUB+W4=
Subject key identifier:   FB:45:11:7B:4E:24:B5:16:13:BD:93:D2:B9:C8:16:DA:D1:23:2F:12
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       4A6525DC7F41C3B4F3BA5849F8CD3A17D912976C
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3333203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:08:27 +0000
ROA not before:           Sat 06 Apr 2024 03:03:27 +0000
ROA not after:            Sat 05 Apr 2025 03:08:27 +0000
asID:                     28360
IP address blocks:        2804:14::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:65:25:dc:7f:41:c3:b4:f3:ba:58:49:f8:cd:3a:17:d9:12:97:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 03:03:27 2024 GMT
            Not After : Apr  5 03:08:27 2025 GMT
        Subject: CN=FB45117B4E24B51613BD93D2B9C816DAD1232F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:e6:4c:f6:e2:af:b1:27:14:06:9d:6f:13:
                    36:bd:2e:90:1f:1d:90:78:32:ad:1e:8a:6b:af:23:
                    0f:e9:2b:6c:2b:a5:c7:5a:60:1a:68:c4:1b:6b:3a:
                    78:3f:74:d5:20:be:14:b9:6c:b6:c2:11:9e:3c:f3:
                    39:13:bd:3a:df:d9:f6:2b:30:86:97:ce:cb:9a:59:
                    74:f4:f4:6c:6c:1a:fa:52:9d:66:89:4b:4c:c3:7a:
                    74:22:14:ad:83:bb:6b:ea:0f:77:48:1a:d6:d5:f0:
                    dc:de:c3:9a:01:34:5e:43:4a:de:0d:86:7f:9e:60:
                    37:e2:2e:48:59:00:2e:f3:be:e0:aa:55:14:fc:4e:
                    d0:08:30:53:d7:4a:f9:98:24:6d:14:d6:4b:e1:0e:
                    24:a5:4b:07:96:b0:49:75:0e:b7:93:a0:c5:df:05:
                    10:61:5b:9b:33:bc:1d:1f:e0:24:60:14:db:0c:a3:
                    e2:d4:c7:f8:02:4f:5f:56:2c:bd:34:0f:05:f4:2f:
                    f8:77:c0:2b:11:0b:c4:48:37:6b:81:68:38:6c:4e:
                    35:97:5e:bc:d4:76:57:1f:6e:38:5f:db:1e:3a:6a:
                    b8:d8:f6:9d:40:90:2e:6e:d5:7a:d6:19:65:ea:e3:
                    4d:f3:e7:02:e6:e6:10:a3:51:3a:ec:67:31:32:be:
                    e2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:45:11:7B:4E:24:B5:16:13:BD:93:D2:B9:C8:16:DA:D1:23:2F:12
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3333203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:4f:49:66:93:fc:85:e9:cc:9a:83:fe:94:ce:90:85:11:01:
         cd:dc:99:5b:71:d8:60:1f:d6:6a:af:6b:b0:35:82:ee:9e:d5:
         4a:44:9c:d9:58:71:9f:04:5c:c5:a5:77:40:85:50:ea:97:dd:
         a5:d0:75:57:d6:92:be:25:57:79:23:6a:b3:a3:10:a2:94:1b:
         d1:b6:03:6e:aa:79:fe:d2:47:70:f0:50:7b:4e:bd:49:75:8d:
         3f:8d:00:9d:57:12:bf:e5:27:38:e8:91:2f:fe:4b:6d:d0:9d:
         68:f2:68:a2:06:a4:d3:9d:c0:0c:04:40:e5:42:40:43:92:7d:
         11:df:f7:31:e6:3a:53:bf:00:0b:c5:f6:16:8a:02:72:6b:15:
         39:e0:7a:8a:25:70:ac:6e:30:43:70:14:7a:f2:a7:76:32:0c:
         ff:1e:92:cd:f9:29:e9:72:16:c9:6f:08:00:5e:09:31:f2:48:
         6a:9b:1f:8d:ee:93:34:f4:75:77:01:5e:30:36:4d:9b:e6:10:
         28:ea:b3:9e:7f:43:de:84:56:97:3e:ff:1d:ff:c7:78:e5:0a:
         d9:b7:b0:d8:64:ec:cd:87:76:28:84:e4:92:8c:7e:3b:0b:1f:
         0f:1d:de:b0:31:1a:cd:4e:8b:d5:64:19:a6:8f:04:63:91:6f:
         50:0d:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org