Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/323830343a353463383a3a2f33322d3438203d3e203631353935.roa
File:                     323830343a353463383a3a2f33322d3438203d3e203631353935.roa (raw, json)
Hash identifier:          Vj7jVfXaVeQdTBfkGJGj16veaVJForefbRIiXylQtSY=
Subject key identifier:   C4:9A:F3:A9:C8:58:AF:9D:01:87:0C:CA:EF:75:FF:49:5D:DD:32:67
Certificate issuer:       /CN=74095406777C3BC0D9D7B0005026B8A7919DB649
Certificate serial:       15B4B308681936BE5C4C592F8C518A276CA22996
Authority key identifier: 74:09:54:06:77:7C:3B:C0:D9:D7:B0:00:50:26:B8:A7:91:9D:B6:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74095406777C3BC0D9D7B0005026B8A7919DB649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/323830343a353463383a3a2f33322d3438203d3e203631353935.roa
Signing time:             Thu 14 Sep 2023 20:17:52 +0000
ROA not before:           Thu 14 Sep 2023 20:12:52 +0000
ROA not after:            Thu 12 Sep 2024 20:17:52 +0000
asID:                     61595
IP address blocks:        2804:54c8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b4:b3:08:68:19:36:be:5c:4c:59:2f:8c:51:8a:27:6c:a2:29:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74095406777C3BC0D9D7B0005026B8A7919DB649
        Validity
            Not Before: Sep 14 20:12:52 2023 GMT
            Not After : Sep 12 20:17:52 2024 GMT
        Subject: CN=C49AF3A9C858AF9D01870CCAEF75FF495DDD3267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a8:de:4b:aa:0a:47:3d:92:5f:35:e9:a9:e4:
                    e1:1f:5f:36:fa:63:7d:cb:2f:ed:09:ad:d2:6f:df:
                    75:9d:b1:2f:2e:76:d7:ba:92:fd:24:81:dd:b0:c4:
                    8b:d8:45:f1:2f:84:8d:aa:86:a6:b8:72:9c:22:3f:
                    3c:87:62:f0:6b:80:ff:00:4c:19:a4:e8:7b:bc:07:
                    ff:4c:a9:99:49:20:b0:69:02:32:f3:c8:7c:17:1d:
                    19:66:48:50:e0:c5:23:76:93:57:c9:f8:fa:27:66:
                    03:2e:a4:45:00:08:bb:ec:f0:0c:da:ff:dc:86:54:
                    0e:e1:59:0f:aa:7e:0d:bb:8f:da:65:cc:25:7a:82:
                    08:d5:d8:c4:9b:8b:80:12:e2:16:c0:bf:78:fd:80:
                    fd:cc:eb:a3:29:12:9f:bf:57:b9:b8:95:42:c0:d8:
                    89:bd:64:ad:28:6c:02:14:02:09:b5:80:57:c8:fa:
                    fe:88:e6:67:98:60:8c:63:90:22:5a:b1:15:fd:85:
                    84:61:5f:7b:22:ae:97:72:d0:68:40:34:3f:9f:5e:
                    ac:f8:be:52:40:e2:5d:ac:81:75:d4:21:55:8d:ff:
                    83:79:34:e9:b4:c9:41:32:d9:ff:be:c1:59:23:2e:
                    1e:46:06:ae:2d:44:07:73:4b:01:09:9c:c0:7a:7f:
                    92:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9A:F3:A9:C8:58:AF:9D:01:87:0C:CA:EF:75:FF:49:5D:DD:32:67
            X509v3 Authority Key Identifier:
                keyid:74:09:54:06:77:7C:3B:C0:D9:D7:B0:00:50:26:B8:A7:91:9D:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/74095406777C3BC0D9D7B0005026B8A7919DB649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74095406777C3BC0D9D7B0005026B8A7919DB649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/323830343a353463383a3a2f33322d3438203d3e203631353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:29:fd:cf:e1:54:b2:22:97:72:ff:6e:40:57:88:ae:92:2d:
         3a:7d:7c:c2:99:2d:6c:97:52:e1:eb:1a:80:c2:dc:93:15:40:
         1e:33:24:9b:4e:1e:fd:99:f8:16:48:13:9a:f6:a8:2e:9b:a8:
         55:94:5b:a3:77:3c:12:ca:b5:38:1a:98:c2:c9:c9:39:fb:12:
         67:62:a1:6d:d7:2a:8c:1e:a8:01:28:72:8d:bc:30:58:23:71:
         85:56:98:8b:62:71:e0:0a:41:b0:e0:af:fd:95:e9:0d:96:ed:
         3b:bc:d2:6b:fe:e2:57:5f:de:a5:b3:e9:be:f4:b3:82:08:16:
         17:c3:f5:2c:2b:83:4e:46:2f:dc:70:8a:05:b1:97:2e:ef:fe:
         6d:5d:c0:f7:e8:a1:7a:8b:a5:6e:2f:f0:f5:46:dd:a6:09:f8:
         50:9e:b6:15:16:0d:4d:ea:ae:94:71:e4:7d:06:84:fc:8f:89:
         4b:03:a6:ae:8f:00:38:63:13:e4:a9:dc:43:cc:18:74:42:7d:
         d8:98:b4:3b:e5:9e:3d:da:8d:95:2c:44:59:ce:e9:4e:4e:30:
         93:61:06:47:db:c4:71:f7:a5:4e:b8:12:2b:3e:67:13:8c:ca:
         91:c3:f1:c0:3a:b9:2b:80:2f:16:48:6f:5f:1c:77:51:d2:0a:
         f2:3a:db:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org