Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a613930303a3a2f34342d3434203d3e20323638373037.roa
File:                     323830343a353938343a613930303a3a2f34342d3434203d3e20323638373037.roa (raw, json)
Hash identifier:          nGQAhHoZE2VCxdcwaJ6gb7ibm0WAYYUW3zohNwYAkEY=
Subject key identifier:   BF:8C:29:8A:9E:DC:9C:AE:DF:81:DD:35:75:93:3F:A2:32:4C:46:68
Certificate issuer:       /CN=B5A102063C2AE1BF53C484AFA6107C8D380AE59F
Certificate serial:       535615FDFDBE3DBD086F387A625D575B5F558285
Authority key identifier: B5:A1:02:06:3C:2A:E1:BF:53:C4:84:AF:A6:10:7C:8D:38:0A:E5:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5A102063C2AE1BF53C484AFA6107C8D380AE59F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a613930303a3a2f34342d3434203d3e20323638373037.roa
Signing time:             Wed 05 Apr 2023 20:50:39 +0000
ROA not before:           Wed 05 Apr 2023 20:45:39 +0000
ROA not after:            Wed 03 Apr 2024 20:50:39 +0000
asID:                     268707
IP address blocks:        2804:5984:a900::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:56:15:fd:fd:be:3d:bd:08:6f:38:7a:62:5d:57:5b:5f:55:82:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5A102063C2AE1BF53C484AFA6107C8D380AE59F
        Validity
            Not Before: Apr  5 20:45:39 2023 GMT
            Not After : Apr  3 20:50:39 2024 GMT
        Subject: CN=BF8C298A9EDC9CAEDF81DD3575933FA2324C4668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:67:02:e4:a9:fb:38:3e:1b:89:85:27:f5:
                    3a:a0:dd:22:9c:45:9c:ed:d9:5c:c1:67:8d:a0:b2:
                    9f:8c:36:8b:5d:5a:76:bc:2b:d0:a2:ea:9c:81:01:
                    2c:49:8a:55:0d:d1:19:29:0c:d6:26:b1:76:ac:69:
                    6a:cb:58:fe:e0:55:8c:2a:ab:31:cc:b7:af:dd:26:
                    60:97:40:1a:7b:52:d1:30:df:e1:83:47:bb:31:9b:
                    5b:59:ee:bb:c2:1c:68:36:ab:ff:23:b0:cf:c3:9e:
                    f2:44:93:df:97:35:e2:2e:9d:7e:b8:38:59:64:04:
                    98:c9:57:bc:4a:3b:b2:f1:09:70:3a:72:57:f1:d6:
                    d9:60:06:aa:a3:7f:ec:81:97:01:3e:a5:18:47:a3:
                    7e:10:ed:ce:92:cb:1d:d1:9a:11:67:0c:2f:4b:40:
                    2b:5b:ff:50:37:ed:0c:92:ac:b0:a9:f9:30:6f:aa:
                    19:eb:ed:d8:29:60:f8:6c:19:bc:98:39:85:9b:80:
                    43:0d:ba:d4:ca:8e:2f:c5:30:28:66:db:76:36:b1:
                    7b:91:57:74:58:f8:75:1e:ea:82:e1:61:b0:de:8c:
                    ef:9c:59:5b:68:f6:2d:a3:8b:f8:2f:8a:3d:37:e3:
                    dc:49:b6:83:0d:0c:8a:59:96:c9:28:d0:14:70:5d:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8C:29:8A:9E:DC:9C:AE:DF:81:DD:35:75:93:3F:A2:32:4C:46:68
            X509v3 Authority Key Identifier:
                keyid:B5:A1:02:06:3C:2A:E1:BF:53:C4:84:AF:A6:10:7C:8D:38:0A:E5:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/B5A102063C2AE1BF53C484AFA6107C8D380AE59F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5A102063C2AE1BF53C484AFA6107C8D380AE59F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a613930303a3a2f34342d3434203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:a900::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:1c:52:26:d9:6c:37:82:f7:05:bc:19:09:94:e2:6b:69:fd:
         23:4d:64:10:4e:75:2b:e2:93:13:c7:42:86:f4:a7:87:73:ec:
         96:ef:54:d6:41:f1:f8:09:8b:b8:1e:c2:e7:c9:fd:8b:9f:a0:
         6b:b2:09:cd:5c:a2:57:39:83:1b:81:43:84:14:4a:ab:77:cc:
         7c:56:11:83:d4:19:ed:e4:26:f1:90:8e:30:36:b7:09:a1:51:
         a3:49:e5:fc:aa:34:b7:5b:d2:68:d8:46:3d:f3:a4:ea:d6:97:
         0f:4c:4b:f3:63:a7:2b:b1:14:ea:bc:44:73:f6:64:ef:92:84:
         62:dc:b1:a2:c9:53:57:1f:b5:c3:0e:6e:89:a0:e4:d5:51:a9:
         56:36:c7:2a:23:bd:c0:e4:ba:98:2c:ff:5e:c1:c5:f1:d8:91:
         57:90:81:a3:64:ab:72:74:3c:29:d9:60:80:f4:1d:12:a7:b5:
         a7:39:5c:b7:95:1a:33:9b:35:13:f3:60:d3:fb:60:b3:82:fa:
         4e:61:9d:29:eb:01:be:45:6b:5a:ec:fe:06:b9:28:18:9a:a7:
         2c:2c:e6:2b:0f:ae:a6:78:e8:7c:8b:41:e1:3e:df:db:ce:c2:
         a8:55:96:7c:8c:04:22:55:f2:26:a7:1e:74:9c:1f:26:71:07:
         76:d7:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org