Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a386430303a3a2f34302d3430203d3e20323638373037.roa
File:                     323830343a353938343a386430303a3a2f34302d3430203d3e20323638373037.roa (raw, json)
Hash identifier:          vcb7sMEiwi8SCQSkVxEimq8XPHgu91fcYpJS/7MKEMA=
Subject key identifier:   0B:15:48:E9:CE:40:2B:DF:B1:B0:5F:46:71:88:62:D2:20:F7:94:44
Certificate issuer:       /CN=5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643
Certificate serial:       72FE4D15C4BC2B1AAD9664F9957C72DD89D8D30A
Authority key identifier: 5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a386430303a3a2f34302d3430203d3e20323638373037.roa
Signing time:             Tue 26 Mar 2024 13:32:05 +0000
ROA not before:           Tue 26 Mar 2024 13:27:05 +0000
ROA not after:            Tue 25 Mar 2025 13:32:05 +0000
asID:                     268707
IP address blocks:        2804:5984:8d00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fe:4d:15:c4:bc:2b:1a:ad:96:64:f9:95:7c:72:dd:89:d8:d3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643
        Validity
            Not Before: Mar 26 13:27:05 2024 GMT
            Not After : Mar 25 13:32:05 2025 GMT
        Subject: CN=0B1548E9CE402BDFB1B05F46718862D220F79444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:3b:6e:ef:1a:d2:23:54:df:ab:01:3b:7a:
                    1a:43:a0:87:18:43:40:b7:fd:bf:41:43:0d:bf:bd:
                    8e:46:0b:e6:4a:fb:77:55:2f:0c:ff:70:5a:79:45:
                    32:43:91:d9:fb:99:c1:0f:1d:59:3a:64:1d:13:4f:
                    d6:49:6c:b4:be:f0:3e:92:b5:e7:4c:9b:31:ff:a7:
                    cf:89:1d:f6:bc:56:ca:60:a1:57:59:47:f8:78:33:
                    24:67:e4:5c:95:92:48:98:aa:e5:5d:94:5b:9c:33:
                    29:41:e6:a8:5c:5c:53:d7:b4:ec:97:01:f0:51:1f:
                    91:e3:91:31:8f:50:18:7d:36:69:b5:00:35:1c:ac:
                    6d:38:a5:39:30:54:ad:c3:77:69:17:75:a5:07:bf:
                    85:9f:fd:46:d6:02:12:bb:97:65:57:fe:cc:c6:f9:
                    44:c0:27:84:b2:f1:a3:36:e3:c2:7b:28:5c:27:44:
                    5e:18:ea:2a:52:c6:f2:a0:c8:f4:5a:45:4e:8b:0d:
                    bc:16:be:e7:1a:b9:5b:1a:25:15:89:1d:fa:17:4b:
                    11:35:52:7e:44:41:c7:29:5c:0a:89:d5:b2:4d:e8:
                    af:f8:5f:02:ee:f3:55:53:b5:89:35:bf:43:6d:81:
                    97:6c:a1:7d:4b:b7:b1:26:63:3e:04:ec:72:f2:2c:
                    9d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:15:48:E9:CE:40:2B:DF:B1:B0:5F:46:71:88:62:D2:20:F7:94:44
            X509v3 Authority Key Identifier:
                keyid:5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a386430303a3a2f34302d3430203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:8d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c8:2f:c7:d1:e1:ea:a3:91:26:6d:0a:f8:ef:14:69:49:da:57:
         e1:d2:67:42:63:f7:10:81:6c:1e:b5:e9:c4:e4:48:9f:71:e6:
         1f:39:e3:89:06:e8:ce:d1:ed:07:ab:65:7d:be:83:5e:d8:f7:
         57:1d:d7:87:a1:cf:81:b2:da:8d:24:30:cc:12:25:bd:bf:71:
         cf:60:f5:64:0f:5c:e0:61:c1:b8:e8:4a:ce:ba:1a:8f:6f:47:
         b9:44:c8:07:72:2d:d4:85:4d:0d:36:c9:ec:b8:48:94:06:c9:
         89:b6:cb:91:f3:da:2d:73:7f:d7:e8:ab:5d:a8:0f:ca:4b:12:
         94:51:b0:76:cc:8e:cd:1f:c8:89:f1:48:de:ec:d5:ff:4b:bb:
         a5:53:94:31:35:85:a4:4b:07:b6:8c:ac:c5:70:2c:3c:1e:3c:
         be:a1:5b:91:b0:bd:d1:15:9a:7d:81:ed:5f:66:db:2a:ea:53:
         36:cb:1a:ee:14:85:45:ef:3a:e9:19:a3:d8:aa:b4:d3:dd:df:
         8e:5e:ff:ad:47:89:16:68:43:92:9e:41:1d:af:f9:b5:39:ad:
         1f:a8:18:d6:8d:32:bc:f2:5f:7b:42:a2:ed:a3:04:2e:e6:91:
         f1:5c:eb:cf:90:c7:85:cd:76:de:19:0b:d8:59:2f:f2:6b:26:
         34:09:f5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org