Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/323830343a333362633a3a2f33322d3332203d3e20323635343134.roa
File:                     323830343a333362633a3a2f33322d3332203d3e20323635343134.roa (raw, json)
Hash identifier:          oAIi/QLzRwPg3K+mOt4Wr22ddo4CpByQ1MUD5TWgBV8=
Subject key identifier:   40:75:37:37:72:89:69:3B:1C:EA:A1:DF:88:F6:75:AA:24:D7:C5:E7
Certificate issuer:       /CN=C559E73AC49546C7651D4CF85CAD64308E9041D4
Certificate serial:       546B1D65CFE773604C856A89D2D87C2256D1FA12
Authority key identifier: C5:59:E7:3A:C4:95:46:C7:65:1D:4C:F8:5C:AD:64:30:8E:90:41:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C559E73AC49546C7651D4CF85CAD64308E9041D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/323830343a333362633a3a2f33322d3332203d3e20323635343134.roa
Signing time:             Fri 05 May 2023 18:04:05 +0000
ROA not before:           Fri 05 May 2023 17:59:05 +0000
ROA not after:            Fri 03 May 2024 18:04:05 +0000
asID:                     265414
IP address blocks:        2804:33bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6b:1d:65:cf:e7:73:60:4c:85:6a:89:d2:d8:7c:22:56:d1:fa:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C559E73AC49546C7651D4CF85CAD64308E9041D4
        Validity
            Not Before: May  5 17:59:05 2023 GMT
            Not After : May  3 18:04:05 2024 GMT
        Subject: CN=407537377289693B1CEAA1DF88F675AA24D7C5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:1d:15:c1:27:dd:3b:f2:cc:ce:0e:32:49:
                    2d:e5:ad:13:1d:72:6e:ff:ed:b5:a5:c1:7f:5d:58:
                    f2:81:98:af:39:32:8a:01:50:36:28:f1:4f:50:12:
                    44:4c:81:62:51:93:d3:4f:11:dc:a6:99:c2:72:f5:
                    36:c2:94:e2:1f:a3:d4:31:a7:a5:89:5e:77:78:9c:
                    f4:06:e7:0c:f1:d9:48:b2:6b:e3:60:1b:e4:51:e1:
                    01:8a:f5:b8:59:3a:98:9d:5c:c1:f5:b3:eb:7b:ab:
                    bd:65:be:52:a9:0a:cf:04:51:5c:fa:21:1e:00:70:
                    e8:ca:6e:88:78:bf:97:85:5b:47:d5:ba:40:95:0c:
                    3c:a7:c7:78:26:9a:42:00:43:eb:97:b1:00:e6:71:
                    37:68:cf:09:0b:f6:19:6e:33:e6:c7:a9:15:45:54:
                    9f:b0:ff:9c:2d:3b:3e:a8:46:4a:a3:c1:4e:b4:55:
                    4b:b1:e6:08:65:5a:0d:15:88:3c:10:3e:0e:20:be:
                    24:39:46:b0:71:b7:a3:f2:59:f7:3f:84:22:53:57:
                    ea:34:bf:49:02:d7:aa:14:d6:a5:ce:90:b2:7d:08:
                    7d:32:f9:da:e3:c7:42:f1:4c:92:d3:42:f6:0d:46:
                    3e:41:da:fc:1c:0c:7a:59:ad:3a:19:8e:6c:0d:27:
                    23:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:75:37:37:72:89:69:3B:1C:EA:A1:DF:88:F6:75:AA:24:D7:C5:E7
            X509v3 Authority Key Identifier:
                keyid:C5:59:E7:3A:C4:95:46:C7:65:1D:4C:F8:5C:AD:64:30:8E:90:41:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/C559E73AC49546C7651D4CF85CAD64308E9041D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C559E73AC49546C7651D4CF85CAD64308E9041D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/323830343a333362633a3a2f33322d3332203d3e20323635343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:97:3a:7a:67:15:3b:13:b0:6d:23:50:61:a9:3f:9f:2b:b9:
         d5:e8:90:39:ab:99:63:44:b7:a1:dc:fe:8a:3a:98:18:16:4d:
         6f:e4:38:32:5f:4b:f0:46:38:a0:1f:f2:e7:0b:88:fa:69:7a:
         5e:10:26:e5:81:cf:37:f3:72:e3:a7:31:8f:55:af:5f:33:0e:
         44:b1:9b:2f:79:fb:d6:f3:f6:f3:3b:7a:c5:05:29:a4:ba:0d:
         f2:b9:8f:fd:15:1d:ac:4e:d6:7d:ad:85:61:dd:a3:44:65:c0:
         e9:28:e5:9b:a4:1b:d4:ab:f7:c1:3d:67:a8:df:cc:f9:c2:3d:
         46:58:cf:0f:00:9a:f6:d5:5a:58:88:36:72:44:c1:da:df:69:
         36:13:ab:1f:7c:37:13:68:60:3b:ef:46:f1:af:c5:4a:ee:b9:
         0b:61:27:02:17:8d:ce:ba:25:5c:57:67:b1:a1:54:42:a8:57:
         42:7a:3b:27:95:7f:57:ce:de:ab:8f:c3:3d:64:12:9f:82:24:
         41:a8:c7:dc:20:82:16:2e:0b:16:08:e0:8d:25:7e:13:de:c0:
         99:8d:9b:85:1a:76:b9:cc:ef:3f:23:b9:e7:27:78:eb:9b:5b:
         f7:58:eb:e8:7c:09:a4:f8:5a:2f:b7:4d:99:ba:ae:58:35:d8:
         8c:91:bd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org