Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa
File:                     323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa (raw, json)
Hash identifier:          N5GHTTY2B0sgibeENC8xOKCnGdO974xE7wr4XT1ynpA=
Subject key identifier:   55:F1:34:79:54:91:6E:4C:9B:90:79:D8:15:B2:44:DE:A0:17:92:09
Certificate issuer:       /CN=5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643
Certificate serial:       7EA8FCA438D80E76117835F1B2BB95A8C559C92A
Authority key identifier: 5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa
Signing time:             Tue 26 Mar 2024 13:32:25 +0000
ROA not before:           Tue 26 Mar 2024 13:27:25 +0000
ROA not after:            Tue 25 Mar 2025 13:32:25 +0000
asID:                     270966
IP address blocks:        2804:5984:b400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a8:fc:a4:38:d8:0e:76:11:78:35:f1:b2:bb:95:a8:c5:59:c9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643
        Validity
            Not Before: Mar 26 13:27:25 2024 GMT
            Not After : Mar 25 13:32:25 2025 GMT
        Subject: CN=55F1347954916E4C9B9079D815B244DEA0179209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:9f:c9:c6:c7:72:fe:3b:3c:2f:83:90:9f:
                    ce:76:a9:5a:95:af:a3:1c:16:e6:34:ab:e7:27:db:
                    25:17:22:82:18:55:5e:30:2a:3d:0d:b0:81:42:72:
                    7c:6d:f6:58:d6:e7:c8:7b:f7:47:89:c0:9e:24:da:
                    e3:f1:c8:4a:d6:ca:ee:73:5f:c3:1e:fc:9a:85:27:
                    ff:24:d5:0d:30:67:84:bc:51:a9:e1:f9:38:ce:a4:
                    41:48:5b:a5:94:a3:5a:bd:2f:2d:ec:75:12:90:f9:
                    a8:27:11:e0:69:be:55:96:71:95:4b:a8:52:d3:50:
                    4a:8e:90:e5:cf:07:83:b4:8b:e9:b6:1a:76:c7:5d:
                    0d:e5:57:dc:bf:e7:75:93:cf:6e:0d:27:ec:ed:f5:
                    f1:64:9b:90:6f:f4:82:cc:04:bb:a2:e1:9f:e7:a9:
                    58:0a:1d:3f:f4:3c:c7:eb:f5:d0:d7:2b:29:62:c3:
                    57:03:63:0f:4f:e2:50:67:c2:d2:c4:2d:80:bd:01:
                    76:5e:78:d2:44:b6:9a:68:e0:57:4a:dd:e7:02:30:
                    79:95:f5:30:e7:a4:95:8b:0d:7a:62:fc:57:9f:03:
                    aa:0c:fe:3f:29:e7:bb:c4:31:de:a0:8f:77:e8:ba:
                    7f:f7:cc:33:f6:1b:63:58:a7:98:0c:62:d2:f4:10:
                    af:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F1:34:79:54:91:6E:4C:9B:90:79:D8:15:B2:44:DE:A0:17:92:09
            X509v3 Authority Key Identifier:
                keyid:5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:b400::/40

    Signature Algorithm: sha256WithRSAEncryption
         c5:06:f2:9a:b7:3f:21:57:d3:aa:6b:54:38:56:00:2e:31:ba:
         b1:eb:c5:f4:3c:ed:cb:e5:48:28:76:74:c2:2d:ed:03:ba:56:
         f3:6d:a6:09:a6:42:26:ed:c9:2e:02:9b:08:b3:f8:c2:ec:a9:
         6c:4a:4f:e3:28:29:a5:ab:a3:3b:61:d1:57:23:b7:fb:12:77:
         aa:ac:10:a1:ab:81:a7:7e:1f:48:8f:ba:30:11:c5:73:e2:f2:
         10:59:45:e3:8a:41:62:58:19:19:54:b3:96:ee:9f:eb:14:9d:
         8f:c1:4a:d7:81:da:c6:54:81:8a:c0:af:2d:c2:81:31:f1:03:
         b9:13:7c:06:00:dd:94:da:7e:22:4d:0d:c0:f0:58:9c:57:06:
         f0:f0:48:df:8c:7b:b8:04:ae:71:3d:a2:74:6d:57:45:77:5b:
         81:4b:89:f6:3b:64:e7:7f:a5:68:5c:9a:b1:46:8f:56:1e:0c:
         14:53:af:41:de:0d:98:97:f6:14:14:cd:ef:9f:95:f0:f3:7f:
         63:7e:48:41:4d:d8:15:d5:b2:12:af:ad:98:1c:67:86:7c:91:
         b5:ef:f6:e1:ff:c8:7f:2f:3e:d2:70:11:27:5f:4b:92:f1:8c:
         2b:2b:77:b8:b0:c6:ea:11:76:f7:0f:de:d3:98:a1:28:15:8c:
         88:e6:ec:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org