Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/0/323830343a6362303a3a2f33322d3438203d3e203532373432.roa
File:                     323830343a6362303a3a2f33322d3438203d3e203532373432.roa (raw, json)
Hash identifier:          jk5BSr1EdYzNEcjq0HgC90RidggQp3IFL2f3bjitBP0=
Subject key identifier:   7B:F3:47:AF:A6:32:44:AF:82:C9:D3:8D:E8:E1:D1:21:11:E6:0F:A1
Certificate issuer:       /CN=5E949731D7EF929D5DA84BEE40B64F54667860B9
Certificate serial:       666E998C8C25A714CD40C7E5AA1CA74750E6363A
Authority key identifier: 5E:94:97:31:D7:EF:92:9D:5D:A8:4B:EE:40:B6:4F:54:66:78:60:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E949731D7EF929D5DA84BEE40B64F54667860B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/0/323830343a6362303a3a2f33322d3438203d3e203532373432.roa
Signing time:             Fri 16 Jun 2023 19:21:24 +0000
ROA not before:           Fri 16 Jun 2023 19:16:24 +0000
ROA not after:            Fri 14 Jun 2024 19:21:24 +0000
asID:                     52742
IP address blocks:        2804:cb0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6e:99:8c:8c:25:a7:14:cd:40:c7:e5:aa:1c:a7:47:50:e6:36:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E949731D7EF929D5DA84BEE40B64F54667860B9
        Validity
            Not Before: Jun 16 19:16:24 2023 GMT
            Not After : Jun 14 19:21:24 2024 GMT
        Subject: CN=7BF347AFA63244AF82C9D38DE8E1D12111E60FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:15:4a:e9:09:c3:33:26:67:6b:a6:4d:e9:
                    f7:c9:b6:f9:a0:55:33:68:16:c3:b0:e6:6e:52:41:
                    55:b4:16:96:0d:4c:92:06:f4:40:9a:ff:1a:b1:f8:
                    aa:1c:ca:d3:ba:98:b8:ce:d3:8e:3c:d7:b2:ad:37:
                    a2:a1:b3:af:87:10:7c:06:2a:d3:c9:bd:7e:b1:62:
                    a0:1a:d2:a5:b8:3f:f9:91:e0:72:8d:04:70:81:39:
                    df:56:10:a1:71:10:df:e4:e6:3b:ef:7e:6f:2d:43:
                    06:d7:ac:61:6a:f2:4b:10:b9:eb:cd:b6:cc:39:7d:
                    44:75:12:34:6f:a1:a9:45:83:d1:d3:9d:e4:c1:f5:
                    33:f4:ff:5c:c3:b4:b7:7d:7f:2a:e4:b0:26:09:8e:
                    79:26:cb:b7:3c:2d:bf:01:b8:68:2b:34:5b:b1:52:
                    71:24:09:1e:8d:6b:82:f6:38:64:92:6e:b8:d5:b8:
                    5d:84:81:a5:55:00:28:8c:55:e0:f2:5f:55:e4:ee:
                    2a:1c:98:7b:27:ba:02:ef:6b:03:b9:c4:82:e9:2b:
                    0d:16:f8:1f:2e:b2:89:b3:8c:77:b8:31:f3:40:d6:
                    b6:08:66:07:e7:3d:54:1a:08:d3:f2:7b:61:68:cf:
                    7a:c0:17:90:c8:12:40:eb:d8:6d:89:67:40:b4:bb:
                    93:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F3:47:AF:A6:32:44:AF:82:C9:D3:8D:E8:E1:D1:21:11:E6:0F:A1
            X509v3 Authority Key Identifier:
                keyid:5E:94:97:31:D7:EF:92:9D:5D:A8:4B:EE:40:B6:4F:54:66:78:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/0/5E949731D7EF929D5DA84BEE40B64F54667860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E949731D7EF929D5DA84BEE40B64F54667860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/0/323830343a6362303a3a2f33322d3438203d3e203532373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:7c:3b:11:d6:02:ef:97:25:31:f9:86:9f:7f:1c:66:f5:1d:
         86:2e:db:37:2c:fd:af:14:02:d7:c3:69:81:54:dc:89:be:c5:
         cd:29:69:96:90:a6:92:14:82:c6:3d:61:e5:99:14:12:aa:17:
         36:69:6d:b3:59:f0:dc:ca:e3:ac:be:ad:7c:cc:dd:36:a6:1b:
         2a:0d:cf:32:95:49:13:ba:3f:27:37:4f:fd:70:cc:e0:8d:e7:
         b7:d4:0d:bd:0c:e3:e8:50:ac:a9:13:6d:44:0c:23:32:16:5d:
         d6:10:1c:e3:dc:f7:5a:30:95:14:be:75:b2:05:db:7e:c0:c4:
         81:ae:19:5e:36:c8:62:d2:13:6a:a7:b4:5a:e6:da:dc:70:c3:
         18:df:37:b8:10:b7:9b:6b:7c:b5:a6:f1:22:7e:0c:cf:78:ca:
         58:2e:db:60:37:5e:d2:a0:7c:59:d2:c9:9a:e8:41:f7:e5:c2:
         ac:88:d0:8f:17:50:4d:fe:7f:49:bb:b6:fc:b3:ca:ad:b2:b4:
         05:19:b7:d9:da:ab:31:57:b0:b3:da:fe:0a:6a:39:51:ac:e4:
         c2:2d:97:80:0b:80:60:52:82:24:8d:b3:85:2f:d0:a4:5c:a1:
         90:3d:5c:38:bb:e0:47:f2:0f:6b:2b:e0:61:17:a5:d2:03:35:
         85:fb:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:51 2024 by rpki-client on console-ams.rpki-client.org