Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a663830303a3a2f34302d3430203d3e20323635313430.roa
File:                     323830343a326233343a663830303a3a2f34302d3430203d3e20323635313430.roa (raw, json)
Hash identifier:          HRrp8eMjBUX7SHJZiJgrZmjTTBp8QHIE6x1tnJaS2/Q=
Subject key identifier:   BF:08:84:62:B5:1A:EA:F6:47:39:72:4F:F6:9A:1B:C7:7B:DA:6A:B3
Certificate issuer:       /CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
Certificate serial:       20AFCE1BB947472B441A2F88F59E77C81734EAE6
Authority key identifier: 51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a663830303a3a2f34302d3430203d3e20323635313430.roa
Signing time:             Thu 22 Feb 2024 13:41:46 +0000
ROA not before:           Thu 22 Feb 2024 13:36:46 +0000
ROA not after:            Thu 20 Feb 2025 13:41:46 +0000
asID:                     265140
IP address blocks:        2804:2b34:f800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:af:ce:1b:b9:47:47:2b:44:1a:2f:88:f5:9e:77:c8:17:34:ea:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
        Validity
            Not Before: Feb 22 13:36:46 2024 GMT
            Not After : Feb 20 13:41:46 2025 GMT
        Subject: CN=BF088462B51AEAF64739724FF69A1BC77BDA6AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:0f:11:44:98:65:90:1e:ed:6e:03:27:16:
                    ba:ae:dd:62:0e:50:24:9e:e5:a0:a8:80:e1:b5:d5:
                    45:6a:55:0b:50:12:be:1b:7a:fb:38:26:d5:22:9a:
                    89:73:89:ad:ec:19:27:2d:ab:9f:a5:22:10:f3:c2:
                    dc:38:91:00:b3:d9:8d:49:bd:6b:c5:7d:f6:54:fe:
                    df:ff:55:2f:46:44:97:65:02:ef:d6:c0:a2:4d:72:
                    02:cd:e5:5d:27:90:a9:da:3b:9c:42:6e:5b:21:38:
                    30:7e:b5:1b:8d:dc:78:89:33:a5:a3:62:b5:c9:4e:
                    99:e6:19:bd:48:4c:33:19:0c:9c:9b:67:86:1c:08:
                    3b:90:07:87:43:2b:c0:82:81:92:bd:d9:a9:51:58:
                    bd:f0:39:16:51:02:11:d0:11:ed:6f:3c:c2:47:a9:
                    e7:0d:23:0a:75:16:1e:80:21:08:3a:f0:76:ab:08:
                    72:e2:7f:9d:25:fc:5b:e2:e5:f7:b0:d5:84:b4:ca:
                    b3:14:e5:aa:00:a1:55:c4:3a:66:04:08:50:37:af:
                    ca:b0:50:40:84:cc:d0:31:ab:92:21:f8:3b:42:c2:
                    39:35:ad:9b:fc:dc:02:35:f9:46:71:7a:e5:e1:a2:
                    cf:f4:0a:a6:ea:5f:fa:30:13:21:be:65:cc:c5:05:
                    9c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:08:84:62:B5:1A:EA:F6:47:39:72:4F:F6:9A:1B:C7:7B:DA:6A:B3
            X509v3 Authority Key Identifier:
                keyid:51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a663830303a3a2f34302d3430203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b34:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:8b:b5:a6:ce:06:c4:cb:83:b0:95:1e:c3:e1:51:6f:72:96:
         3e:dc:60:52:b5:32:d8:11:88:aa:6d:b4:96:40:f0:21:e1:21:
         72:de:db:f1:9d:85:d1:d8:f5:79:86:be:a7:05:d0:bd:af:7f:
         44:39:84:15:62:7b:d7:c2:10:b6:cb:c5:88:26:de:bf:93:3f:
         53:bf:6f:90:1d:f7:f3:dd:c7:dd:aa:f7:db:55:4b:38:4c:03:
         64:53:4a:0d:db:34:d0:5b:af:37:9a:db:9a:fe:9f:36:34:5a:
         73:bb:86:28:f9:97:01:a3:ee:bd:60:1a:40:70:71:45:60:e1:
         cb:07:f4:ef:92:75:fa:d5:b8:00:14:25:cd:51:28:e1:9f:32:
         8e:5e:a9:99:35:b9:46:4d:49:61:70:8d:5a:80:f3:c3:7f:0a:
         a8:a0:45:42:9d:f9:61:9f:e7:df:8f:f3:00:00:2a:6f:77:ff:
         7c:9f:ea:d0:45:49:74:7e:b4:ed:3e:16:6b:36:4a:07:a9:3e:
         92:79:62:7d:55:14:b5:65:58:4c:6c:83:6d:6e:66:5b:f2:ef:
         d3:a5:0b:9f:4e:a4:fc:48:db:55:0f:af:e0:6d:74:d6:44:5c:
         94:20:6f:12:71:6e:1a:e6:2c:37:bf:4b:29:56:d6:ad:fd:d3:
         bc:9a:f0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org