Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa
File:                     323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa (raw, json)
Hash identifier:          87YwOU7FD1uB+wFgv90YMpgRfk1y09IiGW0FvdZsOeo=
Subject key identifier:   93:CC:31:E4:66:A9:FD:3B:46:AF:F0:6E:5B:01:88:7A:6E:C1:F5:18
Certificate issuer:       /CN=057ED84860A4CE6FB5923E0903C9153590BFB516
Certificate serial:       5DA63454F2B8FBA0A01E5821538B98407B158524
Authority key identifier: 05:7E:D8:48:60:A4:CE:6F:B5:92:3E:09:03:C9:15:35:90:BF:B5:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/057ED84860A4CE6FB5923E0903C9153590BFB516.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa
Signing time:             Wed 17 May 2023 12:36:12 +0000
ROA not before:           Wed 17 May 2023 12:31:12 +0000
ROA not after:            Wed 15 May 2024 12:36:12 +0000
asID:                     266563
IP address blocks:        2804:3dec:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a6:34:54:f2:b8:fb:a0:a0:1e:58:21:53:8b:98:40:7b:15:85:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057ED84860A4CE6FB5923E0903C9153590BFB516
        Validity
            Not Before: May 17 12:31:12 2023 GMT
            Not After : May 15 12:36:12 2024 GMT
        Subject: CN=93CC31E466A9FD3B46AFF06E5B01887A6EC1F518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:29:da:22:fd:67:14:ad:7f:2c:f0:06:6b:
                    3a:1d:66:19:3b:c5:07:58:0a:b2:7c:20:0e:88:16:
                    a1:59:4b:25:38:ab:bf:49:e8:1b:3c:74:cb:71:fb:
                    8e:3a:d0:2b:02:db:68:f6:f5:0d:33:b2:48:d3:eb:
                    ad:86:54:d3:ea:b4:d7:97:47:65:c4:5f:17:a7:c1:
                    fa:9f:7c:b2:66:47:5d:3f:2e:1d:23:a3:55:6c:eb:
                    83:e9:5f:ac:b9:2e:d3:af:f3:4e:11:37:35:3b:f1:
                    5c:d3:ca:a4:8d:4b:be:c6:b8:6a:a9:1d:8b:a5:d9:
                    b2:d9:df:82:90:18:d4:b1:81:7b:d4:b8:58:43:fb:
                    81:e3:23:9c:8d:70:a1:b1:84:fe:9e:eb:42:9d:2e:
                    0b:d4:aa:3d:b5:f4:1b:37:d9:c9:80:da:3e:ba:ad:
                    c9:33:45:3c:6e:b4:93:45:f5:cc:57:cc:80:cf:d5:
                    ac:4c:14:54:e0:47:ef:2a:52:07:e4:46:f9:5b:35:
                    a1:69:84:06:44:2e:b1:0a:2d:3f:a1:5a:9f:43:10:
                    ac:09:25:88:ab:77:a7:91:97:7a:17:a4:77:56:9f:
                    8e:3b:22:17:da:fb:c1:98:36:8e:cd:0c:61:d9:8d:
                    fb:a4:e9:f2:b9:a4:85:1b:63:f2:71:2c:f6:a6:31:
                    22:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CC:31:E4:66:A9:FD:3B:46:AF:F0:6E:5B:01:88:7A:6E:C1:F5:18
            X509v3 Authority Key Identifier:
                keyid:05:7E:D8:48:60:A4:CE:6F:B5:92:3E:09:03:C9:15:35:90:BF:B5:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/057ED84860A4CE6FB5923E0903C9153590BFB516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/057ED84860A4CE6FB5923E0903C9153590BFB516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dec:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:45:4a:dd:81:6a:54:e9:10:30:d7:11:2b:0c:ee:36:7b:03:
         bb:0a:29:61:31:18:57:e1:fb:ee:f1:96:f5:bb:f9:7c:c5:4f:
         fa:15:e2:4f:f3:e6:1b:31:66:e1:00:7c:f3:31:ee:ac:12:1f:
         5c:b7:2d:fa:b5:fd:69:90:54:94:60:ae:8c:33:11:d2:cb:46:
         ff:ff:90:b4:33:62:c5:51:4e:35:ce:d8:78:9a:00:ce:9e:7a:
         ca:00:1c:f6:76:b1:89:29:bf:90:b1:be:aa:2c:2f:f9:89:57:
         6c:c7:a0:90:2f:9a:ab:45:90:87:77:e1:24:07:09:e6:b7:e1:
         17:a9:6a:af:c0:49:e4:01:36:8f:64:f0:93:a8:3c:de:94:34:
         ae:d9:7b:ea:0a:f8:c8:16:10:f0:09:37:ba:50:17:f8:99:65:
         3a:5c:34:98:25:2c:6e:eb:8f:d6:05:9c:9c:f7:de:34:7e:9d:
         6a:53:c4:e5:e8:c5:f5:b6:2c:da:df:bf:3d:93:a1:40:ed:c8:
         86:76:db:58:d4:c9:7e:f6:cb:1d:6b:ec:c5:77:7c:58:38:05:
         55:a5:2c:4f:2b:23:b6:19:44:e8:58:50:32:ae:0c:34:06:b1:
         06:ee:b9:bd:cb:49:f9:84:49:8b:54:34:03:45:29:e0:0d:f7:
         91:1e:88:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org