Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a3535343a3a2f33322d3438203d3e203533313433.roa
File:                     323830343a3535343a3a2f33322d3438203d3e203533313433.roa (raw, json)
Hash identifier:          wl+J7MGn6iTw3vOx5on3X21duezXxGYdlmzRvU59GWE=
Subject key identifier:   F7:54:6B:AC:B3:FB:5E:3C:AB:AF:AD:5F:31:85:3E:CF:DE:F9:AA:FE
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       7C24F8A4D0B38988041EC0FBE6B074F6115173FB
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a3535343a3a2f33322d3438203d3e203533313433.roa
Signing time:             Sat 20 Jan 2024 18:35:23 +0000
ROA not before:           Sat 20 Jan 2024 18:30:23 +0000
ROA not after:            Sat 18 Jan 2025 18:35:23 +0000
asID:                     53143
IP address blocks:        2804:554::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:24:f8:a4:d0:b3:89:88:04:1e:c0:fb:e6:b0:74:f6:11:51:73:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:30:23 2024 GMT
            Not After : Jan 18 18:35:23 2025 GMT
        Subject: CN=F7546BACB3FB5E3CABAFAD5F31853ECFDEF9AAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:13:04:f6:9f:0e:c7:49:24:a4:73:03:56:
                    91:02:98:1b:b2:1c:b1:7b:1b:fa:40:4b:cc:6d:a7:
                    16:74:a4:d6:25:e3:b9:60:c8:24:88:be:be:93:0b:
                    86:50:d5:00:07:af:a3:40:3c:28:69:7c:e4:1d:e0:
                    2e:59:25:57:6a:c6:b9:9a:ef:94:83:11:19:20:40:
                    99:a4:7f:b9:6a:94:ad:cd:95:72:05:83:fe:a9:0b:
                    24:29:b4:a8:49:bb:9a:84:13:24:ca:24:c2:e3:20:
                    3f:ba:3d:e6:6a:83:f1:f8:a2:1c:43:f2:cf:11:06:
                    5a:12:3c:9f:23:74:0c:d2:3c:db:5f:e5:fb:9b:f0:
                    a1:99:63:a8:5d:ce:ad:c6:35:b2:9d:3e:66:59:4a:
                    ad:ca:34:57:fa:50:07:9c:d3:eb:56:c6:87:e7:55:
                    54:73:4f:18:61:ea:a9:d9:ec:ee:4a:81:3b:32:c5:
                    9c:75:8c:34:0f:bb:e6:27:7b:22:4e:fa:9c:79:99:
                    8f:39:53:c3:32:e8:99:66:ab:10:be:df:3f:b2:52:
                    c0:70:b5:62:ab:b5:a7:75:5a:7d:ed:57:66:7a:dd:
                    26:aa:62:98:d0:db:9f:67:20:89:34:ed:a5:d8:b4:
                    ed:fe:b4:c7:5f:df:fc:e7:07:b5:4d:ac:65:de:98:
                    ba:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:54:6B:AC:B3:FB:5E:3C:AB:AF:AD:5F:31:85:3E:CF:DE:F9:AA:FE
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a3535343a3a2f33322d3438203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:554::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:41:47:d6:00:a8:df:56:ef:97:0d:83:56:14:13:1e:2d:2d:
         de:1d:ac:02:e2:8f:00:d6:d1:16:3c:bb:fd:7d:f5:a3:ee:25:
         d9:c2:34:63:e0:b9:0f:d5:82:84:36:39:2a:3d:3d:2a:4b:49:
         59:64:6c:b5:95:59:c2:c6:59:f2:88:9d:6b:d1:20:1b:e9:c5:
         08:89:78:a4:25:25:41:82:56:1a:e7:d4:aa:ad:12:7f:28:61:
         ff:f2:25:99:61:69:73:47:d6:80:3d:96:f2:90:35:38:ae:f5:
         0c:1d:22:36:df:75:f0:5d:bc:20:c0:e2:e0:b3:5b:4c:3a:2c:
         cb:ed:53:49:14:05:5b:e9:4d:9e:44:4e:43:0a:a7:85:17:bb:
         b5:24:f5:c0:3d:1b:38:89:1e:0b:ef:01:69:ff:2a:04:77:ee:
         83:44:a6:d3:d9:e9:ca:dc:b0:7c:6e:08:1f:2f:90:2b:c1:3f:
         44:ff:35:b0:57:69:9f:8c:31:bb:65:ef:86:76:00:89:e6:7f:
         1e:47:d6:5a:f2:32:a9:d8:21:b9:2b:23:09:6b:e6:c9:96:0e:
         f2:50:9c:69:05:c4:89:8a:c0:68:11:31:dc:66:18:b8:01:50:
         db:6d:18:93:77:e1:c9:c0:e5:3a:d1:d3:4b:99:47:17:94:a4:
         a6:08:22:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org