Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a3a2f33322d3332203d3e203532373635.roa
File:                     323830343a6235343a3a2f33322d3332203d3e203532373635.roa (raw, json)
Hash identifier:          pAVnOpkUPDqWvifMeo3rdb4SQ+cKNgF+cMQP3dZk/00=
Subject key identifier:   66:F6:FE:2C:0A:DA:85:73:0F:80:B9:76:1B:C9:2D:0E:7E:A5:5A:27
Certificate issuer:       /CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
Certificate serial:       4C674E4190B8A9A5FD93EF91B57B1FDC1C41CCC4
Authority key identifier: 4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a3a2f33322d3332203d3e203532373635.roa
Signing time:             Tue 05 Dec 2023 14:44:29 +0000
ROA not before:           Tue 05 Dec 2023 14:39:29 +0000
ROA not after:            Tue 03 Dec 2024 14:44:29 +0000
asID:                     52765
IP address blocks:        2804:b54::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:67:4e:41:90:b8:a9:a5:fd:93:ef:91:b5:7b:1f:dc:1c:41:cc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
        Validity
            Not Before: Dec  5 14:39:29 2023 GMT
            Not After : Dec  3 14:44:29 2024 GMT
        Subject: CN=66F6FE2C0ADA85730F80B9761BC92D0E7EA55A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:fa:b8:5a:77:b3:43:b4:73:d0:0b:4d:fc:
                    a5:a9:ab:76:e0:f9:05:fb:7d:62:bc:f7:eb:94:63:
                    50:9c:37:04:d6:f7:5e:b9:05:0c:6b:cc:eb:c1:e3:
                    51:19:bd:c2:d1:33:64:b0:b7:e1:29:63:c8:fd:cb:
                    78:f0:45:09:36:92:cd:a8:b2:6c:f7:94:2c:28:3d:
                    fb:b1:d7:7b:c9:88:5c:b6:a7:f2:a7:ce:58:9d:af:
                    21:01:ce:5c:21:0a:13:6f:71:c4:49:53:1a:c4:de:
                    d2:6f:c8:9c:3c:0f:49:40:1f:30:06:3f:a1:a4:b5:
                    e2:c3:e3:1f:7f:c2:0e:c7:22:f5:36:6f:c3:bf:29:
                    60:a6:79:b6:19:9e:8c:c7:e8:76:ac:95:1e:74:5a:
                    9c:9b:79:38:a6:cd:81:12:ac:bf:7c:e7:e4:e0:de:
                    94:a3:a7:49:9a:1d:94:e2:c6:8e:a1:48:aa:ec:17:
                    8b:fa:dc:bf:b0:39:df:13:41:7e:d5:90:c4:f6:67:
                    2a:0a:a3:cd:3b:ec:08:43:e8:cf:7c:fb:04:22:d6:
                    db:a2:34:57:f4:af:bc:67:d8:97:fc:e0:51:bc:34:
                    ef:fc:28:b9:91:ef:4a:b3:8e:5c:ae:77:c1:ee:6c:
                    14:c5:fb:ca:e0:f1:bd:da:38:d2:15:a0:1d:b0:c4:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F6:FE:2C:0A:DA:85:73:0F:80:B9:76:1B:C9:2D:0E:7E:A5:5A:27
            X509v3 Authority Key Identifier:
                keyid:4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a3a2f33322d3332203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b54::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:bc:71:16:5a:b2:57:1b:be:c2:34:14:ec:1a:38:2b:b1:34:
         3d:67:2a:3b:a4:1b:48:82:72:e4:5d:bf:6f:b8:03:7d:cd:41:
         2d:0a:ca:5d:2d:a0:09:9b:b1:54:66:c0:6d:9a:73:27:80:13:
         06:e0:6b:bc:39:3b:b6:dd:e9:5f:09:c5:19:8d:1b:33:24:47:
         7d:cc:fe:2f:51:39:e9:88:03:80:18:69:82:35:cc:39:71:5c:
         c3:9a:5d:fc:a7:35:d6:81:b5:bc:87:9d:5e:e0:92:8b:7d:22:
         6a:86:9a:9c:66:d1:70:67:3b:63:6e:09:ba:05:b4:b5:17:f0:
         e7:ee:b3:9d:a0:ae:96:de:37:bd:16:7b:97:8e:c5:88:df:ae:
         4e:54:5c:ea:ac:f2:27:ec:5c:51:fd:09:7c:a0:24:f5:8a:9e:
         6c:77:66:92:22:c1:0b:2e:a6:42:30:9c:d4:1f:1c:9a:65:fb:
         c5:32:b7:9e:dc:24:d0:e3:d1:7e:7f:94:1b:10:d8:2f:cf:bb:
         d1:be:72:37:d5:1d:90:dc:0a:b8:94:4f:a5:e4:df:fb:d4:82:
         62:90:cd:c9:5b:ad:80:34:21:b7:df:6b:1c:a6:0d:a8:51:b9:
         95:72:af:a7:c4:6e:31:77:6d:98:ad:8b:74:a8:61:5a:df:c1:
         ba:39:b8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org