Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a343030303a3a2f33342d3334203d3e20323635313430.roa
File:                     323830343a326233343a343030303a3a2f33342d3334203d3e20323635313430.roa (raw, json)
Hash identifier:          5TQRuszY6KOzrWyfMl/q2+BYVqO92NBQt7emdfIXR34=
Subject key identifier:   BB:58:88:43:9F:89:7A:C6:9D:DC:BD:F3:D9:D2:65:9B:7E:18:F4:91
Certificate issuer:       /CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
Certificate serial:       48DF2AFF8C911920A0A03DA140E405E6B0374895
Authority key identifier: 51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a343030303a3a2f33342d3334203d3e20323635313430.roa
Signing time:             Thu 22 Feb 2024 13:41:35 +0000
ROA not before:           Thu 22 Feb 2024 13:36:35 +0000
ROA not after:            Thu 20 Feb 2025 13:41:35 +0000
asID:                     265140
IP address blocks:        2804:2b34:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:df:2a:ff:8c:91:19:20:a0:a0:3d:a1:40:e4:05:e6:b0:37:48:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
        Validity
            Not Before: Feb 22 13:36:35 2024 GMT
            Not After : Feb 20 13:41:35 2025 GMT
        Subject: CN=BB5888439F897AC69DDCBDF3D9D2659B7E18F491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:a4:ce:e2:02:a2:70:c2:c1:78:13:d3:6b:58:
                    52:d7:50:7f:86:d8:bc:af:7e:66:78:05:43:0b:99:
                    57:b1:36:13:94:1f:c5:5b:89:5a:2f:d5:2f:25:f1:
                    49:ae:12:5e:ba:74:60:d4:61:55:b6:5d:df:80:42:
                    bc:20:f0:a7:f8:f4:af:e6:43:13:78:5b:11:c6:e8:
                    68:8d:1d:b7:53:13:3e:66:44:3c:df:8c:b6:4a:52:
                    97:b8:0d:c9:f3:1e:1b:05:18:e9:69:55:b7:1f:46:
                    72:66:5d:ed:c7:a9:ab:8e:5c:6b:6e:7d:6e:69:9d:
                    32:f1:26:c0:64:25:ed:4d:0c:aa:47:a1:07:aa:63:
                    3a:16:35:1c:71:8c:fd:ba:77:3d:a3:6e:4d:1f:cd:
                    27:4a:0a:37:5e:47:8d:76:ca:3b:89:31:7a:c2:6c:
                    4a:cb:40:1a:20:0a:22:be:df:b6:e6:ca:15:60:68:
                    ff:30:91:c6:b3:a5:a6:5b:a0:3d:7a:ad:9c:dc:f3:
                    24:2e:f6:31:11:80:03:18:1b:1f:cc:31:0f:ec:5b:
                    5f:4a:f5:14:ab:42:4e:4d:c9:c6:53:0a:a0:b9:ad:
                    b1:e2:18:9a:35:97:5c:fa:8d:0e:b3:f4:48:97:05:
                    9d:05:33:b6:6c:78:27:2d:61:4b:54:8e:e0:61:e2:
                    4b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:58:88:43:9F:89:7A:C6:9D:DC:BD:F3:D9:D2:65:9B:7E:18:F4:91
            X509v3 Authority Key Identifier:
                keyid:51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a343030303a3a2f33342d3334203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b34:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:26:8b:26:5d:b5:b3:dc:28:ae:d3:2e:bc:c5:5c:2e:9a:2d:
         91:fb:0a:f5:b1:72:20:ba:ca:d2:38:fc:db:7f:88:ed:95:2f:
         3b:fe:46:aa:34:62:ed:e7:08:70:be:80:04:d0:ee:57:b2:f1:
         4f:13:e0:c5:20:4a:71:b3:36:59:7d:c8:a8:fe:b2:82:5a:94:
         97:fb:5c:b7:cd:69:23:81:16:92:c4:59:56:43:d1:4e:f5:b8:
         ff:50:b1:a0:7b:b6:15:87:bb:d0:64:b1:4f:3d:11:e0:b0:6e:
         c7:f7:5b:b2:57:0e:91:78:a3:c7:54:df:70:01:69:b8:25:f5:
         95:12:f6:15:85:a2:fc:79:19:fc:83:99:c1:3b:8e:70:63:e4:
         19:02:38:9e:54:7b:69:f7:5b:bb:a1:ca:84:51:81:04:e2:d0:
         60:54:d4:47:1d:19:d5:16:04:b2:65:33:f2:b7:80:3c:51:1c:
         2c:27:a1:6b:3b:69:6a:b1:9d:df:9f:26:8d:47:d3:f3:d2:c6:
         5b:ba:25:85:56:c7:19:b1:94:8f:7f:62:c6:7c:37:26:a9:fa:
         b7:fd:1a:96:6a:b2:c1:65:db:03:f5:53:39:4c:e8:93:0f:a3:
         4b:8e:53:be:43:d3:e6:66:a3:31:26:cb:91:45:15:8c:65:82:
         ce:3b:63:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org