Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/323830343a356238343a3a2f33322d3438203d3e203238333239.roa
File:                     323830343a356238343a3a2f33322d3438203d3e203238333239.roa (raw, json)
Hash identifier:          Fj5capGRohWHwdahpy7Ye+pADDOtrzbU4LEeptd0P7k=
Subject key identifier:   A4:F6:C1:F5:DE:78:E3:9E:DE:2D:BC:26:EC:A9:47:10:C7:AD:4D:B9
Certificate issuer:       /CN=6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E
Certificate serial:       6194B7598FE9F8E9A3C2FE382F0EE9C8A5ADF3A7
Authority key identifier: 69:44:C5:5B:F9:B2:E6:46:89:5F:4A:0B:34:0F:DB:CB:1A:D4:B6:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/323830343a356238343a3a2f33322d3438203d3e203238333239.roa
Signing time:             Mon 27 Nov 2023 18:00:01 +0000
ROA not before:           Mon 27 Nov 2023 17:55:01 +0000
ROA not after:            Wed 27 Nov 2024 18:00:01 +0000
asID:                     28329
IP address blocks:        2804:5b84::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:94:b7:59:8f:e9:f8:e9:a3:c2:fe:38:2f:0e:e9:c8:a5:ad:f3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E
        Validity
            Not Before: Nov 27 17:55:01 2023 GMT
            Not After : Nov 27 18:00:01 2024 GMT
        Subject: CN=3082010A0282010100DDEFCA7B2E5CF74C2E8EFB810293F46DF6D63239AFA1FAAED05739DD672831CCD882A825ED42B63EED77F40AE8891C7A04BDEE694BF9D8E6DC51179DF878B21F432E1A15CA7C41907C30316A39743E622FB9A5BFB4167EFB8056381084AC1B455730A8C7CCA354F413B342EB18A53BFEA94FD178A0536FC2CCE9F145E0D273890108AAAD271CCC54677C9D14B93FB6791C5BDBBA6C1F3EEE118900C05BD725FB9FD3917F9C8A9A866187E5BBA10967AF1DE6427936B9159254E358E721CB9E9B8C7342FD460E3802A580AA55AFC7DFDB2C0A24B73D37FACB86D8D5C92905B12558A65B407B553042F018E1284870BCED68EFF7B5F1804CF57400A4FA70F0F7590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ef:ca:7b:2e:5c:f7:4c:2e:8e:fb:81:02:93:
                    f4:6d:f6:d6:32:39:af:a1:fa:ae:d0:57:39:dd:67:
                    28:31:cc:d8:82:a8:25:ed:42:b6:3e:ed:77:f4:0a:
                    e8:89:1c:7a:04:bd:ee:69:4b:f9:d8:e6:dc:51:17:
                    9d:f8:78:b2:1f:43:2e:1a:15:ca:7c:41:90:7c:30:
                    31:6a:39:74:3e:62:2f:b9:a5:bf:b4:16:7e:fb:80:
                    56:38:10:84:ac:1b:45:57:30:a8:c7:cc:a3:54:f4:
                    13:b3:42:eb:18:a5:3b:fe:a9:4f:d1:78:a0:53:6f:
                    c2:cc:e9:f1:45:e0:d2:73:89:01:08:aa:ad:27:1c:
                    cc:54:67:7c:9d:14:b9:3f:b6:79:1c:5b:db:ba:6c:
                    1f:3e:ee:11:89:00:c0:5b:d7:25:fb:9f:d3:91:7f:
                    9c:8a:9a:86:61:87:e5:bb:a1:09:67:af:1d:e6:42:
                    79:36:b9:15:92:54:e3:58:e7:21:cb:9e:9b:8c:73:
                    42:fd:46:0e:38:02:a5:80:aa:55:af:c7:df:db:2c:
                    0a:24:b7:3d:37:fa:cb:86:d8:d5:c9:29:05:b1:25:
                    58:a6:5b:40:7b:55:30:42:f0:18:e1:28:48:70:bc:
                    ed:68:ef:f7:b5:f1:80:4c:f5:74:00:a4:fa:70:f0:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F6:C1:F5:DE:78:E3:9E:DE:2D:BC:26:EC:A9:47:10:C7:AD:4D:B9
            X509v3 Authority Key Identifier:
                keyid:69:44:C5:5B:F9:B2:E6:46:89:5F:4A:0B:34:0F:DB:CB:1A:D4:B6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/323830343a356238343a3a2f33322d3438203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b84::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:c1:ed:25:74:5e:fb:0f:f6:28:60:e0:02:67:a9:83:0f:69:
         a3:9a:41:52:cf:88:4f:08:ea:9f:5e:d8:24:fd:55:86:e8:e6:
         40:75:63:9e:ca:d3:3e:c2:ea:d7:83:9f:aa:ec:0d:62:a1:47:
         13:b6:bd:d6:26:31:19:24:8d:4d:92:60:5e:69:6d:d0:cb:5f:
         7b:5f:a9:e2:c2:04:85:4f:9d:b9:a8:3a:12:20:fa:69:99:c1:
         2b:7a:f6:62:69:24:11:5d:a6:84:fd:e8:51:8d:f1:03:87:2b:
         ed:1c:3c:7c:04:94:10:0a:a1:3c:b0:48:97:59:ed:1e:f5:b2:
         0d:2d:a9:d1:f6:0b:54:63:a7:5c:60:55:d5:8b:32:46:5f:87:
         a9:53:0c:dc:b9:59:a1:c2:2e:f4:1f:7a:e0:19:8f:b8:1e:a9:
         01:7e:fc:f7:de:b9:27:30:6f:d3:c7:e3:25:72:a7:83:c4:5b:
         3e:12:32:63:d9:03:62:17:80:43:60:3e:96:f2:54:8f:d1:ad:
         4a:61:6c:2e:9e:15:ca:b4:9a:a0:52:a8:0a:39:69:e3:cf:dd:
         f5:89:5e:86:b4:f7:02:d1:f5:31:c0:51:ad:73:f3:35:16:bd:
         a9:18:bc:c7:86:2e:cc:db:56:22:3b:2f:82:91:eb:fd:17:4a:
         59:09:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org