Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/323830343a376361633a656530303a3a2f34302d3430203d3e20323731353131.roa
File:                     323830343a376361633a656530303a3a2f34302d3430203d3e20323731353131.roa (raw, json)
Hash identifier:          MFDBCm+IE09NRb0YO9ZPiABluXiwjfAItmywdP3DZCY=
Subject key identifier:   90:3A:5E:20:9E:D9:A1:BB:F7:12:93:1A:AA:8A:B5:15:AD:35:A7:DA
Certificate issuer:       /CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
Certificate serial:       572C216508E588BB6C0560ECE2F3A1FDAD6C47CF
Authority key identifier: 5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/323830343a376361633a656530303a3a2f34302d3430203d3e20323731353131.roa
Signing time:             Thu 16 Nov 2023 22:25:27 +0000
ROA not before:           Thu 16 Nov 2023 22:20:27 +0000
ROA not after:            Thu 14 Nov 2024 22:25:27 +0000
asID:                     271511
IP address blocks:        2804:7cac:ee00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2c:21:65:08:e5:88:bb:6c:05:60:ec:e2:f3:a1:fd:ad:6c:47:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
        Validity
            Not Before: Nov 16 22:20:27 2023 GMT
            Not After : Nov 14 22:25:27 2024 GMT
        Subject: CN=903A5E209ED9A1BBF712931AAA8AB515AD35A7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:21:ad:55:1d:8e:59:cd:cc:41:bd:e1:c1:
                    c7:20:f1:62:66:3c:45:46:1d:dc:72:61:4c:d2:7e:
                    07:73:72:e6:f0:e9:c7:b6:f1:ad:0d:f2:8e:05:18:
                    45:0e:19:55:b5:95:06:3d:96:75:14:54:7c:0d:f5:
                    6d:1b:ef:2b:82:56:a0:30:3a:e3:60:54:41:db:95:
                    9a:f1:ea:12:03:d4:8c:d7:b6:b4:6e:0b:97:a5:97:
                    10:4a:e1:71:85:a6:2f:fe:f0:98:15:89:6a:87:77:
                    cf:65:11:96:d4:3e:90:88:65:02:30:8d:d8:15:b7:
                    8b:bb:ab:bc:59:08:94:6c:9e:ac:d8:95:e0:dd:78:
                    27:67:9c:89:fa:78:a6:02:25:29:8e:a2:e3:12:56:
                    59:4e:49:4c:2e:10:3b:c5:84:d0:e4:eb:b6:0a:a2:
                    2c:f0:a9:e4:e8:93:d6:02:d0:93:49:e7:38:1f:85:
                    96:a6:a1:70:c9:2e:5d:68:2e:d4:9d:75:66:ba:74:
                    d8:b4:9f:3d:04:c3:35:f2:34:94:8a:b4:c3:e5:2e:
                    e8:48:87:46:a1:74:0c:21:b0:38:6c:6b:d0:d4:97:
                    79:29:f9:f3:7d:3b:2c:f7:d0:ca:8d:84:39:20:1d:
                    28:af:03:99:03:61:41:ef:17:ee:39:ba:bd:12:90:
                    23:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3A:5E:20:9E:D9:A1:BB:F7:12:93:1A:AA:8A:B5:15:AD:35:A7:DA
            X509v3 Authority Key Identifier:
                keyid:5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/323830343a376361633a656530303a3a2f34302d3430203d3e20323731353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cac:ee00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:68:da:0a:c9:0b:a5:63:2f:4d:a8:e9:1f:b2:ab:6e:ff:e9:
         b0:81:25:48:c4:69:64:82:b7:da:49:54:7a:b0:6a:5d:dc:40:
         8d:97:35:f6:58:be:37:ce:3c:3f:e8:35:4d:56:a7:cb:95:2e:
         e6:fe:c0:b5:28:16:8c:3b:76:dc:f8:2b:f4:30:14:41:4c:87:
         64:2d:0e:fd:62:1c:f4:84:1b:75:32:69:2c:1b:ea:a2:c1:07:
         dd:87:7c:07:cc:58:02:02:09:ad:63:3e:3a:b3:dc:47:34:16:
         66:a6:d1:87:16:b8:2c:90:70:c5:74:be:1d:74:04:95:4c:ca:
         30:0f:65:b1:bd:ee:f4:2d:92:90:19:1a:ac:64:54:28:5f:29:
         6c:42:b7:e8:6d:48:a9:b5:ed:22:96:71:d8:a4:20:cc:1b:46:
         db:8d:e8:06:42:8e:9e:a4:dd:fb:51:bc:83:80:1c:29:ea:79:
         e4:0a:af:bb:1f:35:d4:46:52:75:e4:ce:be:fd:ce:30:f5:8f:
         6f:67:78:89:82:a1:c0:e0:d5:ad:b4:43:54:cb:42:44:54:0d:
         47:45:0c:4a:b5:b1:fb:6b:b1:3e:86:af:39:72:dc:c5:2b:59:
         48:6f:70:e0:dc:cf:36:6a:1c:02:51:1d:e9:17:55:5e:dd:4a:
         60:d9:84:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org