Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/323830343a356230633a3a2f33322d3334203d3e20323638383135.roa
File:                     323830343a356230633a3a2f33322d3334203d3e20323638383135.roa (raw, json)
Hash identifier:          och0xnQdsZcxz+KW0l0LvPAgncI2g6y66hmpqzqdx+c=
Subject key identifier:   5B:5C:D6:74:FC:A2:06:5F:6D:A5:7C:D0:B2:AF:4D:7F:48:F7:86:E1
Certificate issuer:       /CN=B20BC48E96C8E43F0D835FCFDAB01DF17F7A90B8
Certificate serial:       3E4C754AB130C60130601D94E01C2F68BC50ED79
Authority key identifier: B2:0B:C4:8E:96:C8:E4:3F:0D:83:5F:CF:DA:B0:1D:F1:7F:7A:90:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20BC48E96C8E43F0D835FCFDAB01DF17F7A90B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/323830343a356230633a3a2f33322d3334203d3e20323638383135.roa
Signing time:             Wed 22 Nov 2023 18:42:00 +0000
ROA not before:           Wed 22 Nov 2023 18:37:00 +0000
ROA not after:            Wed 20 Nov 2024 18:42:00 +0000
asID:                     268815
IP address blocks:        2804:5b0c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4c:75:4a:b1:30:c6:01:30:60:1d:94:e0:1c:2f:68:bc:50:ed:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B20BC48E96C8E43F0D835FCFDAB01DF17F7A90B8
        Validity
            Not Before: Nov 22 18:37:00 2023 GMT
            Not After : Nov 20 18:42:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:7a:ca:4a:f8:57:ad:7d:87:70:6a:83:86:
                    fd:e9:52:c2:12:c3:e4:5b:e4:d7:4c:de:fd:b8:6f:
                    2c:1f:e7:93:80:50:47:28:71:3f:43:e9:06:29:fe:
                    7e:62:40:78:4b:42:80:98:02:e7:ff:83:37:9a:d0:
                    db:8b:a9:8b:a6:f8:8a:42:36:be:6e:82:dc:c1:b4:
                    ee:07:42:74:3e:f0:d6:39:45:50:29:56:f3:68:9e:
                    2a:b9:0d:be:1a:74:76:0c:ae:19:91:28:6c:ac:ef:
                    ce:dd:74:14:72:1d:36:e6:c6:f1:a3:d5:6d:4b:62:
                    9d:67:14:f5:6d:2b:fa:da:f0:44:5e:38:37:e9:04:
                    53:51:dd:b5:c8:38:1b:45:c8:d6:46:97:c4:38:1b:
                    50:7c:34:90:c7:75:ae:10:16:57:96:62:81:12:9e:
                    59:ce:82:0b:ca:bc:88:77:b9:64:ca:34:70:49:e2:
                    30:5e:99:ad:8a:5e:35:a0:dd:14:d7:19:90:a4:7e:
                    79:5a:05:dd:db:63:ac:ea:d0:47:67:71:3d:a5:f6:
                    d0:0d:aa:49:8e:56:17:0f:27:4e:c6:c2:af:95:10:
                    99:f1:47:3a:c2:eb:aa:91:62:ea:22:1d:b6:d8:07:
                    07:e8:d2:f5:bd:08:16:d4:07:47:44:63:1b:60:20:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5C:D6:74:FC:A2:06:5F:6D:A5:7C:D0:B2:AF:4D:7F:48:F7:86:E1
            X509v3 Authority Key Identifier:
                keyid:B2:0B:C4:8E:96:C8:E4:3F:0D:83:5F:CF:DA:B0:1D:F1:7F:7A:90:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/B20BC48E96C8E43F0D835FCFDAB01DF17F7A90B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20BC48E96C8E43F0D835FCFDAB01DF17F7A90B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/323830343a356230633a3a2f33322d3334203d3e20323638383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:cd:cd:01:85:de:32:2e:4a:29:3b:6f:9f:2a:d7:6d:f3:de:
         3d:de:4a:2d:72:de:56:f1:9f:2a:cd:e6:fa:ce:f6:0e:5d:09:
         cc:c0:56:bf:85:77:16:d3:11:18:41:8c:a8:a3:29:66:9b:49:
         9e:10:ba:a7:ef:6d:0b:55:57:e2:d4:60:9c:97:fc:41:d4:f6:
         45:42:5f:12:7c:5f:e9:12:38:1d:9e:f7:b4:84:15:15:93:34:
         5f:d2:99:58:46:c5:50:e2:c0:52:43:8c:1d:e9:71:6e:bc:04:
         fc:90:a7:a0:3d:b7:13:35:c9:ae:d6:f5:2d:ed:5c:27:91:5f:
         bd:a1:00:d4:98:3e:ad:84:d7:27:9e:89:cf:79:82:da:4a:08:
         1f:8e:e1:83:97:b4:55:7e:b3:82:92:88:a6:43:2c:e9:86:f6:
         52:a0:44:02:a5:92:d4:23:29:06:20:8c:d6:ef:23:24:e2:f2:
         67:8d:cf:8c:ad:a6:36:7e:3d:32:55:11:49:bf:e9:70:85:2d:
         80:e4:45:c4:5d:9a:6b:a4:30:7d:64:24:c4:6c:73:6f:33:f1:
         ab:45:87:97:93:ae:5a:03:cb:48:0d:5f:6d:e2:6d:dd:f7:38:
         98:1b:6d:e7:a3:5d:d4:b9:72:97:f5:0f:08:3b:7f:08:38:77:
         76:1f:90:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org