Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/323830343a316538383a633030303a3a2f33342d3334203d3e20323634343334.roa
File:                     323830343a316538383a633030303a3a2f33342d3334203d3e20323634343334.roa (raw, json)
Hash identifier:          vGns78FyIfDvTPg4Gr+eMhaJYj3PYqC96O7gAxGQtR8=
Subject key identifier:   18:E6:45:24:61:86:F4:75:9A:BB:18:05:55:AB:15:A3:1C:E8:76:CE
Certificate issuer:       /CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
Certificate serial:       5D9C45A9430A1827FB83056F7837453D61DFBF27
Authority key identifier: 5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/323830343a316538383a633030303a3a2f33342d3334203d3e20323634343334.roa
Signing time:             Wed 10 May 2023 13:28:27 +0000
ROA not before:           Wed 10 May 2023 13:23:27 +0000
ROA not after:            Wed 08 May 2024 13:28:27 +0000
asID:                     264434
IP address blocks:        2804:1e88:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9c:45:a9:43:0a:18:27:fb:83:05:6f:78:37:45:3d:61:df:bf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
        Validity
            Not Before: May 10 13:23:27 2023 GMT
            Not After : May  8 13:28:27 2024 GMT
        Subject: CN=18E645246186F4759ABB180555AB15A31CE876CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:e7:7e:37:da:17:ed:8c:50:79:ad:36:d5:
                    73:ea:69:1d:9b:9d:2f:4e:06:60:7a:59:1b:61:cd:
                    8d:5c:f1:e7:f4:f9:4f:13:a5:10:43:29:24:38:91:
                    1c:98:1d:98:a7:5f:80:7f:aa:8e:51:c1:53:f7:fe:
                    64:f3:a9:0c:cb:f2:b4:85:14:a3:6f:5c:07:c8:4e:
                    40:17:ae:5c:fc:1a:3d:09:8a:71:1d:f5:b6:dd:b9:
                    7d:0f:89:91:9e:d9:8c:8b:34:03:43:6e:97:53:9e:
                    8d:85:d0:b0:cb:b4:41:24:39:15:c0:e2:38:dd:2c:
                    cc:0b:4a:85:cd:e1:f9:3b:10:46:db:ee:57:4e:fc:
                    9c:4d:98:ca:cd:0d:a5:9f:c3:cc:72:c5:77:db:ae:
                    4d:6f:66:99:6d:bf:34:cf:62:a4:3c:ed:db:7e:ca:
                    5b:d8:5f:6a:0e:09:0b:9c:a0:58:b1:84:8c:9b:ad:
                    36:ef:2a:da:9a:31:51:b2:bd:27:f5:37:7d:6b:5e:
                    95:66:ae:48:58:18:6a:98:c9:aa:e2:e5:99:c1:b5:
                    c4:38:be:bf:1a:ec:9b:2f:11:09:fc:77:a5:a6:2e:
                    52:cc:af:d9:cd:5e:db:9f:7e:cb:30:37:7a:57:5a:
                    e3:71:45:a3:77:36:4b:bb:85:31:c5:9a:f3:2d:5b:
                    48:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E6:45:24:61:86:F4:75:9A:BB:18:05:55:AB:15:A3:1C:E8:76:CE
            X509v3 Authority Key Identifier:
                keyid:5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/323830343a316538383a633030303a3a2f33342d3334203d3e20323634343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e88:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         30:cc:af:d5:7b:f1:1e:f7:55:29:7e:86:90:10:e3:71:57:53:
         83:12:78:99:5e:a7:96:40:48:4e:05:68:7e:80:19:d5:64:66:
         a9:9a:94:20:ef:0c:c8:97:37:a0:0f:cc:cc:c0:14:33:2f:a4:
         66:ca:48:1f:3b:08:47:a7:66:db:e6:7b:0c:de:23:a5:2c:14:
         37:70:c1:f1:96:b0:86:6e:df:91:b1:29:3e:49:64:f9:b2:1e:
         f1:f6:44:6d:b3:84:a0:15:54:dd:6c:ae:d2:74:70:6b:67:44:
         3b:97:1a:b4:10:fe:f2:ca:87:6c:fc:dc:b5:26:29:97:e3:fb:
         67:9f:3f:dc:90:0f:08:19:9d:f6:0c:ac:38:cc:44:ab:f7:de:
         51:e2:89:3c:16:8b:65:9e:4f:32:dd:63:d6:4d:89:67:75:f9:
         e0:3b:76:82:9e:6c:22:7f:4b:69:db:01:7e:f7:14:56:c1:79:
         27:b7:6d:d8:55:ab:73:97:d3:4a:11:c5:94:99:0d:57:40:55:
         4f:fb:71:46:7a:27:cc:ba:2f:be:b8:14:76:01:5c:c8:ce:e2:
         66:de:49:94:8e:21:8c:f7:1e:52:83:eb:82:c2:7e:99:30:5d:
         5c:48:a9:24:13:39:89:c7:7b:4f:72:00:29:bb:e5:f0:b9:09:
         19:ed:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org