Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa
File:                     323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa (raw, json)
Hash identifier:          wQwmTl+3RrWlW64ydFFqywGePi4djED9cwKSg36FpSU=
Subject key identifier:   D6:C7:99:CA:DC:6B:90:FF:F5:34:9F:1A:0E:CF:B3:ED:4D:DF:53:23
Certificate issuer:       /CN=B5A102063C2AE1BF53C484AFA6107C8D380AE59F
Certificate serial:       109BB144975084414FCD25DE4E2C0663F39D7776
Authority key identifier: B5:A1:02:06:3C:2A:E1:BF:53:C4:84:AF:A6:10:7C:8D:38:0A:E5:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5A102063C2AE1BF53C484AFA6107C8D380AE59F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa
Signing time:             Wed 05 Apr 2023 20:50:40 +0000
ROA not before:           Wed 05 Apr 2023 20:45:40 +0000
ROA not after:            Wed 03 Apr 2024 20:50:40 +0000
asID:                     268707
IP address blocks:        2804:5984:ae00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9b:b1:44:97:50:84:41:4f:cd:25:de:4e:2c:06:63:f3:9d:77:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5A102063C2AE1BF53C484AFA6107C8D380AE59F
        Validity
            Not Before: Apr  5 20:45:40 2023 GMT
            Not After : Apr  3 20:50:40 2024 GMT
        Subject: CN=D6C799CADC6B90FFF5349F1A0ECFB3ED4DDF5323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f4:b6:18:65:dd:17:d9:a6:a0:1d:25:90:7b:
                    dc:e5:35:a8:c3:0d:f9:91:cf:ee:73:71:20:14:aa:
                    f7:7f:c8:d6:c4:59:c7:04:9f:d5:b8:9e:bd:a4:9a:
                    90:2f:c2:f3:47:84:42:e6:ae:9e:06:50:dc:2a:94:
                    99:3a:1d:88:b7:c9:59:1e:2c:6e:f3:dc:69:23:dd:
                    35:5d:76:38:5e:5e:86:28:1e:fa:a3:3f:b5:1c:ff:
                    1d:4b:22:f8:b5:43:c9:7b:19:8d:d0:12:67:2d:0f:
                    f1:ae:73:51:2f:7e:92:67:2c:86:62:17:82:76:2d:
                    41:f9:d1:55:c8:96:66:18:eb:83:ae:dc:16:a3:59:
                    35:08:eb:06:52:46:c7:e9:96:fc:8f:b1:09:49:27:
                    d6:f2:28:e5:d4:51:68:52:a3:f6:20:24:dc:13:6a:
                    3f:f6:d7:60:6a:e3:63:e2:57:7a:b8:af:94:aa:d2:
                    6a:fa:f6:99:6a:ef:81:71:d1:a0:60:22:cc:9f:2c:
                    dd:2a:02:79:ee:48:03:bc:1c:23:70:10:9d:7b:ec:
                    0b:c0:41:77:23:a9:9a:67:ef:a7:98:f9:85:a5:b2:
                    3c:95:82:e8:d9:19:ae:61:f9:ab:5a:62:11:1a:ed:
                    e7:e3:37:42:fe:63:6b:aa:22:36:ad:22:8c:16:07:
                    74:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C7:99:CA:DC:6B:90:FF:F5:34:9F:1A:0E:CF:B3:ED:4D:DF:53:23
            X509v3 Authority Key Identifier:
                keyid:B5:A1:02:06:3C:2A:E1:BF:53:C4:84:AF:A6:10:7C:8D:38:0A:E5:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/B5A102063C2AE1BF53C484AFA6107C8D380AE59F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5A102063C2AE1BF53C484AFA6107C8D380AE59F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:ae00::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:7a:d5:f2:c6:61:ee:f1:2d:77:51:c1:8b:65:af:af:ef:7e:
         dc:96:ff:33:f7:72:9b:3b:09:0d:dd:91:8d:5c:d6:69:85:c2:
         1e:41:a3:be:5e:85:5b:40:9a:ab:af:4e:47:b6:56:c4:65:c4:
         63:b8:15:bd:41:83:6d:d4:14:ab:9b:9b:c5:66:5a:52:cb:66:
         a8:34:97:e0:6e:48:2a:14:77:c7:ba:4d:9d:a9:08:f8:fb:7b:
         9b:1b:ad:59:db:ea:a9:2d:de:d2:e2:c9:b1:03:e9:72:cc:d9:
         c1:9b:d7:97:a6:4a:1d:27:bf:0d:2c:cf:3c:5c:79:8a:9c:a2:
         4f:bc:f0:74:bb:34:69:62:c0:27:30:e8:5c:d7:22:33:97:a3:
         b6:a4:5d:b6:e5:27:5e:1c:c4:68:e3:99:7b:2e:2f:33:7c:ff:
         bc:de:ea:79:98:d3:3c:98:f0:49:b8:3f:e9:66:34:0f:5f:8a:
         68:83:f4:9a:ad:fb:f8:e7:a4:e1:7d:b0:f1:c2:5b:6a:dc:96:
         4f:e0:01:18:2d:61:2d:9e:36:66:19:fd:a1:7b:9e:44:62:df:
         fd:00:ba:47:e5:af:6b:15:a2:f2:73:e8:dc:1c:aa:8c:08:89:
         87:6d:bc:32:1f:72:de:87:f9:78:41:24:62:27:d9:b4:3f:b7:
         c0:c8:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org