Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/323830343a376361633a656630303a3a2f34302d3430203d3e20323731353131.roa
File:                     323830343a376361633a656630303a3a2f34302d3430203d3e20323731353131.roa (raw, json)
Hash identifier:          g6hAIBABpaJ93UOaWV8BrL1wYKt41Oktt6xpqDvRh5I=
Subject key identifier:   37:9A:3F:C7:40:C0:89:92:FD:D2:05:33:64:53:A7:5E:18:BA:44:02
Certificate issuer:       /CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
Certificate serial:       2371B824842F8D2C98C0E2B03B6C4DB4CF39F644
Authority key identifier: 5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/323830343a376361633a656630303a3a2f34302d3430203d3e20323731353131.roa
Signing time:             Thu 16 Nov 2023 22:23:59 +0000
ROA not before:           Thu 16 Nov 2023 22:18:59 +0000
ROA not after:            Thu 14 Nov 2024 22:23:59 +0000
asID:                     271511
IP address blocks:        2804:7cac:ef00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:71:b8:24:84:2f:8d:2c:98:c0:e2:b0:3b:6c:4d:b4:cf:39:f6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
        Validity
            Not Before: Nov 16 22:18:59 2023 GMT
            Not After : Nov 14 22:23:59 2024 GMT
        Subject: CN=379A3FC740C08992FDD205336453A75E18BA4402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:3c:e9:11:ad:19:2b:3d:cc:1c:fb:5d:57:
                    de:1d:29:1b:d5:28:84:f1:f6:2c:bc:2c:94:6b:1a:
                    3d:11:5f:3d:a9:cd:02:5b:66:b0:ea:7b:28:a4:02:
                    e1:8b:60:a2:89:6b:bd:19:a2:99:1e:5a:24:e4:18:
                    c5:42:40:cc:5b:11:88:0f:1e:61:73:7c:47:1e:96:
                    05:5a:f1:bf:03:4f:a1:fb:ae:26:88:82:c0:56:33:
                    7f:83:35:33:7f:ac:54:0a:c2:e2:67:85:a5:f4:02:
                    7f:81:7c:88:e9:5f:8f:5b:94:9e:81:8e:5c:47:2d:
                    89:b3:ca:e3:72:15:83:32:d6:cd:22:89:a1:c4:83:
                    5d:4b:89:60:10:d6:30:92:66:be:0c:ad:54:f0:0a:
                    4a:83:2b:35:f0:f8:0d:1b:07:fb:06:aa:98:49:79:
                    3d:e4:3d:06:10:2c:ee:2f:e5:13:3d:43:6d:01:f7:
                    f4:5a:4f:89:ab:cf:76:cc:0a:31:af:4c:59:fb:39:
                    f9:f1:ab:68:f6:86:2c:39:1f:13:87:03:0a:3c:8d:
                    76:d6:70:68:8c:2f:e4:e9:9b:f3:7a:c4:25:2d:9c:
                    3d:30:94:f4:30:b5:70:3c:4d:ad:7e:c2:36:3b:21:
                    32:eb:d3:f4:9d:fd:0b:22:90:cf:8e:17:be:02:34:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9A:3F:C7:40:C0:89:92:FD:D2:05:33:64:53:A7:5E:18:BA:44:02
            X509v3 Authority Key Identifier:
                keyid:5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/323830343a376361633a656630303a3a2f34302d3430203d3e20323731353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cac:ef00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:da:f1:2a:20:e6:26:9c:71:90:cd:83:49:ad:69:c4:56:04:
         f3:b0:eb:2c:91:0e:48:76:95:7b:60:e1:ff:38:b5:4a:2b:67:
         98:e1:22:77:ac:a8:e0:21:91:aa:69:2d:76:ae:96:87:4d:70:
         d4:5f:21:2c:0f:78:af:0f:49:a7:34:d2:2e:a2:fc:68:b0:20:
         d3:e1:60:66:d5:bd:c9:b2:40:c3:ce:09:40:29:a7:21:31:97:
         78:80:3d:81:0d:7b:da:ed:9b:27:08:ef:07:70:ec:66:bf:19:
         33:ac:ec:07:70:3f:10:71:2c:61:9f:60:5e:12:67:9b:f8:77:
         85:b2:c5:bf:1b:75:9d:72:a1:9d:58:8b:f3:0b:ac:c6:bb:07:
         25:8d:37:2d:8f:61:2c:53:6c:47:ec:16:92:98:0a:76:5b:81:
         61:01:06:ea:30:b8:17:ac:21:36:95:00:a8:66:96:41:c4:6a:
         cb:9a:05:57:1c:48:9b:46:50:c1:42:85:3e:09:2e:e2:d9:ff:
         99:b1:b9:54:f3:35:32:8d:f3:16:eb:02:0c:cc:55:bb:1e:77:
         52:f9:f4:28:34:6f:1a:15:d7:22:c1:bb:78:3b:5f:53:c6:bd:
         ef:21:c3:5f:2f:1b:a1:64:80:46:bb:fc:94:84:7d:8d:d9:55:
         c7:74:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org