Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a323230303a3a2f34302d3430203d3e203532373635.roa
File:                     323830343a6235343a323230303a3a2f34302d3430203d3e203532373635.roa (raw, json)
Hash identifier:          RfczIXv7LGNhRZgIdzmcTk/2qPcnyyXa6QOWGtQsUq4=
Subject key identifier:   34:A6:45:C9:36:8A:B2:CF:8C:BF:68:3D:DF:29:A1:43:05:13:0E:58
Certificate issuer:       /CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
Certificate serial:       05F8577BA86E594257687303156BDC2C4092B024
Authority key identifier: 4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a323230303a3a2f34302d3430203d3e203532373635.roa
Signing time:             Tue 05 Dec 2023 14:44:29 +0000
ROA not before:           Tue 05 Dec 2023 14:39:29 +0000
ROA not after:            Tue 03 Dec 2024 14:44:29 +0000
asID:                     52765
IP address blocks:        2804:b54:2200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f8:57:7b:a8:6e:59:42:57:68:73:03:15:6b:dc:2c:40:92:b0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
        Validity
            Not Before: Dec  5 14:39:29 2023 GMT
            Not After : Dec  3 14:44:29 2024 GMT
        Subject: CN=34A645C9368AB2CF8CBF683DDF29A14305130E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:95:44:2e:e2:c1:fb:06:ea:95:c3:0c:3d:0c:
                    fd:32:05:9a:44:11:4b:23:94:49:fc:d4:7c:78:e1:
                    d3:f1:27:36:21:11:8f:83:1b:1b:c6:e9:ae:37:64:
                    21:87:3e:5c:e6:12:c2:f9:2d:e4:cb:0c:62:ec:fc:
                    9e:ec:0f:52:5a:f3:2b:d4:f2:16:f3:cf:ad:1a:19:
                    10:8a:86:44:b0:68:22:2f:37:68:b1:85:28:15:de:
                    f8:dc:11:32:3e:f0:40:d1:65:95:40:90:fe:2d:a8:
                    37:d6:c8:eb:14:ef:9b:f7:01:6c:83:f6:b5:ee:59:
                    b7:33:00:5c:9a:49:fd:ec:0e:85:d3:ec:d5:ae:d5:
                    50:b9:52:56:84:de:28:f5:f8:01:6b:0a:0a:d2:ef:
                    57:95:ac:3b:d8:b4:e6:0f:ec:95:c2:50:98:5e:13:
                    2a:b9:b3:dd:f9:fd:99:f1:97:e1:5d:7e:d8:b3:3a:
                    02:31:12:fc:d1:c1:c1:c2:18:4d:99:53:fe:51:c4:
                    49:a2:d5:74:61:7e:f8:91:cc:d3:82:84:70:63:96:
                    bf:ce:a1:bc:09:ad:da:96:e2:7d:1a:5a:9a:02:5e:
                    3d:b4:f2:d7:92:e3:5e:a7:8b:80:0f:49:98:47:0e:
                    d2:20:26:16:42:51:6c:e3:a3:54:de:cc:64:82:d5:
                    cd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A6:45:C9:36:8A:B2:CF:8C:BF:68:3D:DF:29:A1:43:05:13:0E:58
            X509v3 Authority Key Identifier:
                keyid:4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a323230303a3a2f34302d3430203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b54:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:48:ac:10:bc:33:2d:fd:24:b0:dd:63:e1:d5:36:cb:5a:
         46:c3:c2:cc:1c:36:5e:1b:40:8a:49:ff:60:51:d3:e3:17:72:
         ef:dc:4a:8d:9d:4e:84:4b:e5:51:7a:f1:e6:12:9e:b7:d3:3a:
         1f:5b:9f:66:7e:cd:d7:47:90:15:cc:bc:08:b8:8b:65:21:1a:
         3a:7b:fe:ed:a8:30:cc:7d:d6:47:94:c0:82:7a:b6:09:22:0e:
         83:82:9e:db:38:4c:f5:4e:2e:e1:be:53:46:73:fa:28:29:09:
         b8:71:75:84:3f:60:a8:9d:7e:6d:79:31:2b:91:9d:e4:92:3d:
         4a:60:2f:73:ea:5b:e2:65:b2:a3:e9:b8:ba:d3:42:cf:95:de:
         62:d4:95:dd:84:3e:30:d6:62:a8:f3:93:e4:a7:47:06:02:6e:
         74:63:6b:cb:bc:63:7c:57:93:7d:b8:b2:02:dd:0b:9e:00:34:
         6e:5d:10:75:7d:1a:f2:5b:8a:47:1f:91:13:84:51:2d:b1:68:
         20:dd:f9:4c:25:9b:ba:59:0d:22:c3:7b:b7:85:7e:f5:ca:7b:
         1a:f8:90:a7:ef:99:28:ee:88:dc:fd:c5:15:18:fc:f3:0b:25:
         52:06:d3:89:60:92:97:a8:c3:37:af:14:04:0c:3d:f7:07:71:
         ee:52:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org