Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a6535303a3a2f33322d3438203d3e203533303637.roa
File:                     323830343a6535303a3a2f33322d3438203d3e203533303637.roa (raw, json)
Hash identifier:          48bPvGUit/7KsuBb3wBt6TNR6fApW/5Bn5JjwgKvV3A=
Subject key identifier:   D8:F6:E0:AC:68:42:41:AB:9B:07:4D:83:61:15:0A:01:41:3C:45:8F
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       2257434E5554E4B0935BD1AAB181F767E768EE36
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a6535303a3a2f33322d3438203d3e203533303637.roa
Signing time:             Sat 20 Jan 2024 18:40:41 +0000
ROA not before:           Sat 20 Jan 2024 18:35:41 +0000
ROA not after:            Sat 18 Jan 2025 18:40:41 +0000
asID:                     53067
IP address blocks:        2804:e50::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:57:43:4e:55:54:e4:b0:93:5b:d1:aa:b1:81:f7:67:e7:68:ee:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:35:41 2024 GMT
            Not After : Jan 18 18:40:41 2025 GMT
        Subject: CN=D8F6E0AC684241AB9B074D8361150A01413C458F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:bc:30:e1:3a:fb:cc:62:16:a3:d2:92:87:
                    d1:18:7f:4b:98:2c:22:45:a7:68:74:9d:e2:3b:79:
                    b0:bc:f4:d8:57:32:31:ea:7c:1c:72:12:86:f6:a0:
                    00:29:52:31:6c:1a:47:e9:e4:f7:aa:0b:da:fa:dc:
                    a9:ca:ac:84:9d:0a:59:b7:e3:da:a8:e4:df:dd:1b:
                    76:00:35:28:b8:dd:b0:82:53:84:c3:99:f3:b9:8b:
                    ee:ed:50:96:f7:56:13:20:f0:8e:89:ac:af:27:d2:
                    f4:56:7e:b1:20:f8:58:4c:41:a2:6c:7d:7c:7a:10:
                    c6:a1:3b:bc:aa:fb:9a:c9:47:69:c0:e1:78:81:e5:
                    f6:5f:fb:c2:b7:d5:b9:10:88:fb:8e:1a:00:99:99:
                    50:25:07:b5:eb:f0:ed:6f:3d:f9:d2:af:b7:e2:ec:
                    d9:83:e8:78:94:c6:4d:2d:aa:46:78:6a:b2:4f:ce:
                    6e:54:a4:22:78:f6:59:98:67:52:d0:c7:1f:5d:77:
                    1a:83:a2:9d:b9:f8:0d:e0:b7:f1:0c:25:9d:f7:d4:
                    95:5d:f7:9c:aa:2e:c4:b6:2a:04:ec:c8:2f:fb:c6:
                    7c:63:a8:9a:e7:15:39:dd:1d:a2:ab:62:12:8a:b6:
                    6f:e9:e8:6a:4b:e2:7d:91:7e:70:7a:1d:fc:4e:cf:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F6:E0:AC:68:42:41:AB:9B:07:4D:83:61:15:0A:01:41:3C:45:8F
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a6535303a3a2f33322d3438203d3e203533303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:39:7d:98:1b:74:57:92:b8:b2:62:f2:c0:87:54:bf:71:e9:
         a1:b3:e7:32:a7:d4:6a:b8:0d:89:3f:a3:0b:1e:94:93:62:c2:
         80:86:06:b6:d5:47:2d:4b:0a:2f:f7:e5:1d:8e:d1:1d:12:bf:
         a0:d5:18:1b:f5:3a:4b:f8:ee:52:40:1d:7e:79:8e:2e:c1:2f:
         36:19:33:66:90:64:68:87:af:19:0f:ea:21:41:d1:25:6a:7c:
         c8:3f:8a:af:d2:52:0d:b8:a3:05:e3:d1:9c:83:96:dc:dd:25:
         42:7b:14:b6:9a:a3:d3:8d:8d:4e:49:d5:8f:c8:c7:d9:2d:ee:
         50:0e:27:94:37:0a:c6:c6:c4:83:93:c0:a2:1f:37:0c:29:8b:
         48:54:27:30:f3:f1:6f:f5:38:b3:63:f0:b9:99:94:c4:ce:f1:
         d9:c6:35:95:4f:f0:30:0b:33:05:0c:4c:1b:b8:62:a3:e9:65:
         d0:9b:49:71:ae:68:16:6a:6a:93:fd:76:49:16:b1:f3:72:82:
         ed:98:1b:92:9a:4a:90:a3:65:72:86:39:3f:e6:3a:34:a2:71:
         c0:21:8d:27:9f:e4:2d:88:9e:5d:a0:f6:c9:91:fb:a2:01:9f:
         72:86:e7:96:08:e1:24:91:c7:0a:51:61:36:c1:99:ea:b3:95:
         2b:5f:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org