Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/0/323830343a366163633a3a2f33322d313238203d3e20323730333539.roa
File:                     323830343a366163633a3a2f33322d313238203d3e20323730333539.roa (raw, json)
Hash identifier:          sebyq5MY786qlHnpr67htVm6fkbwUfHlpZFD19X9nFI=
Subject key identifier:   FA:DD:0C:17:75:05:4A:24:03:7F:57:CC:BF:1D:B9:4D:25:EF:A3:9A
Certificate issuer:       /CN=5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F
Certificate serial:       1947BE6FEBC575AACC53997FE4BFD05E92A13D22
Authority key identifier: 5B:6D:5C:BF:98:9F:F7:09:25:E7:05:8E:AB:7D:DA:28:16:E1:6F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/0/323830343a366163633a3a2f33322d313238203d3e20323730333539.roa
Signing time:             Thu 01 Dec 2022 23:14:58 +0000
ROA not before:           Thu 01 Dec 2022 23:09:58 +0000
ROA not after:            Thu 30 Nov 2023 23:14:58 +0000
asID:                     270359
IP address blocks:        2804:6acc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:47:be:6f:eb:c5:75:aa:cc:53:99:7f:e4:bf:d0:5e:92:a1:3d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F
        Validity
            Not Before: Dec  1 23:09:58 2022 GMT
            Not After : Nov 30 23:14:58 2023 GMT
        Subject: CN=FADD0C1775054A24037F57CCBF1DB94D25EFA39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:69:31:21:03:78:b1:ad:3c:e7:6f:f6:51:d7:
                    ce:76:e0:4d:f9:1f:05:b4:52:86:db:dc:ec:94:d4:
                    72:2b:50:e6:13:41:f1:77:5f:11:39:e5:dd:ae:f2:
                    53:6b:b2:2a:22:ad:84:57:02:db:88:37:12:9f:a5:
                    4e:e5:30:81:6a:05:9c:be:16:12:89:d8:cb:13:63:
                    d5:3c:0b:cb:28:41:1d:ee:cc:ce:8b:6b:dc:62:4a:
                    de:e0:87:03:fe:12:1a:78:f4:c7:2b:de:d1:b9:2b:
                    fb:e0:77:0a:31:9a:8a:f9:f4:40:17:0b:6c:19:61:
                    dd:a0:e2:d0:33:ce:7d:ee:89:28:92:78:ff:16:74:
                    31:3c:a3:e6:e1:0b:4f:1c:35:00:e5:a1:83:3b:63:
                    31:e8:a5:66:d7:40:ed:2b:06:cd:49:ec:1f:9d:37:
                    20:9c:e6:77:d0:0b:13:fb:19:7e:0d:f6:1a:45:c1:
                    cd:e5:49:c3:80:cd:ce:e6:de:48:c4:5d:fc:b9:d5:
                    cd:53:21:ba:3d:00:62:9e:7c:e0:76:58:92:a2:27:
                    b5:e7:f3:1d:02:e8:c2:86:aa:9a:0a:98:aa:4d:52:
                    b4:a9:c9:cb:bc:69:ef:ce:8d:02:66:64:97:3f:eb:
                    3c:63:77:bc:57:18:37:99:a7:b1:7a:85:b3:2a:5d:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DD:0C:17:75:05:4A:24:03:7F:57:CC:BF:1D:B9:4D:25:EF:A3:9A
            X509v3 Authority Key Identifier:
                keyid:5B:6D:5C:BF:98:9F:F7:09:25:E7:05:8E:AB:7D:DA:28:16:E1:6F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/0/5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/0/323830343a366163633a3a2f33322d313238203d3e20323730333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6acc::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:34:04:8f:1d:8b:14:24:91:b0:45:68:06:d1:94:46:38:96:
         91:2e:25:c9:05:ca:7a:bd:2d:52:40:63:2b:39:8e:7b:b0:d5:
         fb:39:12:6d:ae:6d:6f:1b:b1:23:09:2e:f7:9d:8d:01:46:e3:
         04:45:96:b7:4b:10:b0:fa:f7:86:78:7d:78:d3:94:f4:21:a4:
         28:5c:b0:68:d6:22:39:e8:20:8f:27:fd:0d:70:a6:71:ce:2e:
         a7:ae:8b:8a:83:37:c0:ea:23:81:d7:d7:3b:1c:39:43:87:b4:
         52:1f:4f:c3:4a:f7:0b:f9:d6:e5:69:0c:13:f3:a6:eb:d8:c2:
         c5:62:d3:44:1f:bc:4e:24:b8:99:b6:90:c1:75:10:07:10:d1:
         aa:52:51:0c:ac:7d:ca:52:e0:4f:e9:27:7b:67:d1:3e:51:ad:
         d1:2c:7d:26:cc:fd:5d:64:c3:a2:db:c1:f0:ec:f8:e8:35:84:
         ef:b4:af:a2:94:6c:6c:68:b7:e7:27:52:d4:3d:89:da:7f:04:
         c3:e8:e8:c0:67:16:04:7a:0f:a8:d8:7e:11:04:7d:ce:d9:4b:
         51:15:a1:8f:8f:78:07:66:3c:63:26:26:42:f9:b5:59:3a:15:
         3e:d7:fd:b8:27:78:0f:9f:b5:e4:c9:e9:24:ef:a8:9e:bd:00:
         de:a5:29:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org