Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a383030303a3a2f33342d3334203d3e20323638353834.roa
File:                     323830343a353337303a383030303a3a2f33342d3334203d3e20323638353834.roa (raw, json)
Hash identifier:          1VuSjxnEWALf5e7Xst5sT4eKghsCxYvu8EfyUJHR6bw=
Subject key identifier:   B0:C3:61:2E:D3:7F:AE:46:CB:5E:0A:92:65:01:D8:FC:B6:22:98:B3
Certificate issuer:       /CN=4BD795F092B94300EC0509053A12492273477784
Certificate serial:       0CAA78CC0FD135A37C4F45F439EBBFBF4E61D5A9
Authority key identifier: 4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a383030303a3a2f33342d3334203d3e20323638353834.roa
Signing time:             Tue 02 Jan 2024 17:16:07 +0000
ROA not before:           Tue 02 Jan 2024 17:11:07 +0000
ROA not after:            Tue 31 Dec 2024 17:16:07 +0000
asID:                     268584
IP address blocks:        2804:5370:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:aa:78:cc:0f:d1:35:a3:7c:4f:45:f4:39:eb:bf:bf:4e:61:d5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BD795F092B94300EC0509053A12492273477784
        Validity
            Not Before: Jan  2 17:11:07 2024 GMT
            Not After : Dec 31 17:16:07 2024 GMT
        Subject: CN=B0C3612ED37FAE46CB5E0A926501D8FCB62298B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:6f:21:bf:98:39:bc:60:4a:a2:f6:e0:68:
                    5e:ee:d1:52:45:ef:40:13:c7:66:01:a5:35:90:d6:
                    72:28:27:bc:43:ca:a9:2a:75:3a:87:fa:88:b9:fc:
                    d3:c1:24:d6:ad:52:76:27:65:27:bb:8e:e4:7f:d1:
                    5f:f8:6b:66:66:14:dc:1d:ce:16:8d:8e:9c:e3:13:
                    5e:35:9b:e2:26:71:b1:97:5d:b6:83:42:56:61:8c:
                    c7:54:0d:4e:74:73:f3:d0:53:17:4c:99:45:6c:7e:
                    33:7f:aa:28:87:17:fc:e6:55:af:0b:e5:ca:e9:ac:
                    e5:85:ba:89:37:05:46:15:ae:ab:8a:07:29:50:fc:
                    7a:47:06:b7:a1:fe:f2:a0:c7:a8:e8:66:ad:42:0d:
                    29:14:c8:43:c3:f6:65:0b:ab:39:76:55:a9:cc:d1:
                    49:3a:28:c3:1d:b9:c4:5b:46:0c:ea:b6:15:6a:f2:
                    74:89:40:ea:da:a1:15:b7:7a:77:97:38:84:5b:e6:
                    9e:77:6a:fb:df:3e:36:86:5d:e1:88:77:70:17:9a:
                    f6:cb:e6:e5:67:32:17:08:09:a6:48:89:9f:e3:c1:
                    19:cf:12:ab:f5:8d:a8:65:c2:ff:6c:db:87:57:46:
                    1c:e6:20:2a:69:50:e8:8a:f9:75:9a:f5:a1:ab:d7:
                    9d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C3:61:2E:D3:7F:AE:46:CB:5E:0A:92:65:01:D8:FC:B6:22:98:B3
            X509v3 Authority Key Identifier:
                keyid:4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/4BD795F092B94300EC0509053A12492273477784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a383030303a3a2f33342d3334203d3e20323638353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5370:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         20:88:0f:05:9b:9f:cf:43:89:51:8f:f2:54:1c:7d:e3:19:44:
         eb:55:01:e5:37:8f:0d:4d:12:bf:fd:3c:7e:83:82:8a:dc:b1:
         1f:a6:d0:67:d2:ae:dd:29:c1:c0:3f:ea:f4:1d:2c:09:68:d8:
         9d:f0:46:b8:0b:e7:61:db:8a:e1:1d:3a:eb:05:0d:9c:9f:f2:
         04:a6:3f:fb:ed:4e:ac:05:0c:ba:4e:c9:3c:50:a4:ff:dc:7a:
         69:60:f7:77:42:d7:5f:e7:30:20:c2:f1:8d:78:ac:e6:40:7f:
         fc:72:4d:49:65:d5:a5:b6:0f:df:aa:d4:42:4e:cb:c6:5f:53:
         b7:81:24:73:5c:61:b5:13:4c:6f:5e:26:02:31:ea:c9:70:ab:
         49:01:13:f6:09:7f:47:f9:7f:91:50:e6:59:ec:bf:3c:15:1a:
         61:bc:8b:0e:5c:cf:a1:5a:77:bf:a3:28:f9:48:bc:4a:fc:87:
         d1:0e:5a:f9:ea:98:93:b1:97:7d:74:4a:52:40:d1:3e:fd:07:
         7e:3f:89:f7:a4:a8:58:e0:e6:dc:4b:f7:4a:7d:0f:09:92:07:
         27:e6:42:eb:b6:11:ad:99:d4:ab:32:43:98:31:5f:b8:ce:a7:
         79:7f:8a:33:d1:bb:c7:60:b7:6d:b5:7d:ff:b0:90:14:09:3a:
         a3:82:5a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org