Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3831303a3a2f34342d3435203d3e20323638303937.roa
File:                     323830343a353766343a3831303a3a2f34342d3435203d3e20323638303937.roa (raw, json)
Hash identifier:          du1YapRvk/U33KcovFxnTHOqkhaf5Xu4YINXDiIXiJY=
Subject key identifier:   6B:85:69:F4:25:62:E0:BE:DE:4C:1C:B0:02:65:70:44:1D:AD:17:2D
Certificate issuer:       /CN=B8A77988EAC7E76375143BCCA6FA803A833D4C0F
Certificate serial:       2ED41C35C6FAE9D35143E82101A75068A82AAE7E
Authority key identifier: B8:A7:79:88:EA:C7:E7:63:75:14:3B:CC:A6:FA:80:3A:83:3D:4C:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3831303a3a2f34342d3435203d3e20323638303937.roa
Signing time:             Mon 29 Jan 2024 14:36:21 +0000
ROA not before:           Mon 29 Jan 2024 14:31:21 +0000
ROA not after:            Mon 27 Jan 2025 14:36:21 +0000
asID:                     268097
IP address blocks:        2804:57f4:810::/44 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d4:1c:35:c6:fa:e9:d3:51:43:e8:21:01:a7:50:68:a8:2a:ae:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A77988EAC7E76375143BCCA6FA803A833D4C0F
        Validity
            Not Before: Jan 29 14:31:21 2024 GMT
            Not After : Jan 27 14:36:21 2025 GMT
        Subject: CN=6B8569F42562E0BEDE4C1CB0026570441DAD172D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:51:a7:c1:47:a5:82:c4:09:da:27:7a:d1:92:
                    8b:1a:ac:18:cf:a3:55:a7:59:22:a0:f0:38:98:b9:
                    17:d1:2c:de:56:f0:f7:43:bf:f4:40:91:17:1b:fa:
                    d2:ac:6d:ca:25:fd:86:b1:62:e1:ac:d7:8e:3a:47:
                    23:48:29:60:77:b0:5a:38:b8:2c:74:63:32:9a:ed:
                    d9:86:b5:19:ed:82:d9:79:f9:07:4e:77:5e:18:4d:
                    b9:ad:33:c9:08:92:db:f6:e5:2e:09:69:51:38:82:
                    a8:86:49:af:59:6a:fd:ef:c9:8a:56:c6:dc:9b:06:
                    73:6c:ce:67:c7:cd:02:43:de:04:14:d2:09:8f:c8:
                    33:ed:83:01:60:cc:73:16:5f:25:21:fd:86:43:82:
                    8b:5c:b6:fa:62:18:b2:35:3a:26:fb:86:b9:f3:7b:
                    d2:c1:60:ea:7e:82:98:31:8c:ef:19:51:c7:f8:0f:
                    28:b4:28:ba:c2:f1:0f:dc:68:ae:65:97:52:41:52:
                    0d:29:66:7f:75:8c:f6:4d:41:17:19:dd:24:ab:74:
                    19:25:5d:86:1f:f0:77:0a:72:32:bb:bc:cb:b7:a3:
                    35:51:0d:43:b5:70:2d:c0:7c:31:20:c4:92:57:43:
                    ef:27:75:34:ec:6b:d2:44:37:9e:98:3a:05:ed:2c:
                    bb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:85:69:F4:25:62:E0:BE:DE:4C:1C:B0:02:65:70:44:1D:AD:17:2D
            X509v3 Authority Key Identifier:
                keyid:B8:A7:79:88:EA:C7:E7:63:75:14:3B:CC:A6:FA:80:3A:83:3D:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3831303a3a2f34342d3435203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57f4:810::/44

    Signature Algorithm: sha256WithRSAEncryption
         b0:e8:67:68:07:ee:2a:f6:4c:5c:f5:e1:a3:75:61:cc:27:0d:
         c8:da:57:a3:01:aa:81:37:91:ac:7c:e7:9d:0e:60:e9:69:52:
         b8:5a:7f:8e:46:b7:66:97:57:04:ba:73:24:6c:b9:2c:eb:16:
         68:77:59:34:05:98:5a:a6:fa:78:83:5b:a3:0b:b9:6a:98:7a:
         9e:2a:6b:81:f1:44:a1:7d:ae:94:3f:af:cd:23:47:93:1f:ff:
         e3:16:ae:cd:db:2d:fe:45:15:66:91:53:e7:ac:2f:94:e7:01:
         56:12:9b:a7:32:b0:2a:60:4b:10:f6:2c:0f:c5:45:23:82:e9:
         b1:cc:28:ac:dc:2f:98:64:ac:26:6b:b9:e6:4b:4c:af:a0:91:
         6a:34:2e:e1:19:ff:1f:24:f5:50:fd:92:15:a9:b8:4e:eb:65:
         90:ac:02:35:66:e2:5f:ee:43:d7:a2:2c:77:0c:3c:e5:70:44:
         48:be:30:03:58:a7:e3:51:2c:68:a9:0d:88:32:a2:4f:00:7f:
         32:42:c7:14:0e:3e:0e:5b:ab:35:e2:97:70:64:ca:bf:43:34:
         59:70:81:6e:49:f4:7d:d5:aa:45:b3:ef:bf:3e:3d:b9:ce:31:
         d1:b8:7d:df:37:44:82:93:29:aa:03:bb:a2:a4:6d:5c:20:c4:
         8f:e2:3a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org