Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/323830343a376361633a666630303a3a2f34302d3430203d3e20323731353131.roa
File:                     323830343a376361633a666630303a3a2f34302d3430203d3e20323731353131.roa (raw, json)
Hash identifier:          wWJyAhLb+xmzgTZeVtw+I/543xNDDHxKH6vxpjCgwI8=
Subject key identifier:   33:17:CA:91:67:37:07:64:D7:E0:87:DD:D3:3F:C5:D2:EA:C1:5F:A2
Certificate issuer:       /CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
Certificate serial:       506486255F4167EFF6CF7681D1A09268D230EA08
Authority key identifier: 5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/323830343a376361633a666630303a3a2f34302d3430203d3e20323731353131.roa
Signing time:             Thu 16 Nov 2023 22:24:00 +0000
ROA not before:           Thu 16 Nov 2023 22:19:00 +0000
ROA not after:            Thu 14 Nov 2024 22:24:00 +0000
asID:                     271511
IP address blocks:        2804:7cac:ff00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:64:86:25:5f:41:67:ef:f6:cf:76:81:d1:a0:92:68:d2:30:ea:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
        Validity
            Not Before: Nov 16 22:19:00 2023 GMT
            Not After : Nov 14 22:24:00 2024 GMT
        Subject: CN=3317CA9167370764D7E087DDD33FC5D2EAC15FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:70:84:49:19:c5:e8:27:06:d5:ae:ca:35:
                    5c:18:bf:d9:70:ba:3c:e2:aa:95:98:1b:98:6b:3c:
                    21:98:5f:23:88:51:c7:21:87:cc:f1:10:c8:7e:f6:
                    76:fb:57:14:ea:5c:7e:06:02:e6:2c:da:96:7a:40:
                    7d:ad:94:a3:75:b3:da:95:bc:2b:eb:b2:93:52:c1:
                    f4:d9:5d:7e:a6:4c:20:fc:53:10:ec:77:65:5b:45:
                    2d:46:7f:11:7d:54:19:22:19:b9:8b:20:c6:ea:68:
                    41:b1:33:52:79:e0:9c:cf:49:e7:03:13:8a:99:40:
                    24:98:f1:57:7e:63:1e:5e:c3:23:c0:51:6d:de:38:
                    28:64:82:c0:96:05:7e:7d:2a:ff:19:05:b8:5f:07:
                    66:b9:82:54:16:e8:ff:66:16:36:5c:5a:35:5a:f3:
                    6b:a1:40:ad:92:b6:49:cf:6b:1c:d2:20:2b:8c:0e:
                    e9:29:b0:ac:7c:f9:15:39:68:ca:83:31:af:f0:16:
                    d9:f1:b7:58:ff:a9:f3:f8:ec:f7:f4:ed:cc:25:36:
                    4d:9d:53:38:f0:e1:0c:4f:f7:47:21:47:04:3b:77:
                    76:9a:44:ad:5e:0e:64:e5:c2:4d:9b:f9:55:f5:43:
                    03:7b:25:9c:0a:bb:2b:5d:4c:4e:de:2b:7a:7c:de:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:17:CA:91:67:37:07:64:D7:E0:87:DD:D3:3F:C5:D2:EA:C1:5F:A2
            X509v3 Authority Key Identifier:
                keyid:5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/323830343a376361633a666630303a3a2f34302d3430203d3e20323731353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cac:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:eb:df:bb:15:fe:f6:81:01:89:c8:cb:9e:c3:a0:d3:74:b1:
         fa:07:30:2f:da:4f:07:fe:4b:ef:b8:21:74:5e:82:85:4b:6f:
         c4:a3:bc:54:78:60:04:e4:8c:51:91:b6:b4:75:f0:52:8e:15:
         74:f8:82:be:7c:da:6e:c1:7b:08:ae:41:fd:66:ea:4b:46:73:
         f6:bb:45:e4:62:f5:16:d0:95:fd:40:91:a6:cc:28:3f:46:20:
         a3:c8:6a:01:50:b4:36:5a:95:86:1e:e4:50:76:9c:b0:92:66:
         34:ce:0a:12:61:dd:ff:c4:43:b4:aa:15:5e:22:14:f0:0c:18:
         36:9d:59:93:c0:cd:23:d3:68:b9:b4:a5:0c:ad:23:0a:62:bc:
         14:0f:4c:69:b7:cb:2a:77:c1:a7:57:f1:7e:28:b5:ce:3e:82:
         14:84:96:ed:75:bd:18:c4:e8:c2:3a:3a:a6:67:bf:25:37:f2:
         00:c9:ff:65:d3:fd:88:3c:39:22:e4:99:f4:ff:23:92:da:85:
         d3:83:f8:24:5e:51:6d:8e:a4:d7:24:bb:b0:26:ed:98:38:35:
         57:b9:b4:62:f0:7c:fd:91:37:0a:7c:ba:f3:98:cf:88:77:6a:
         9f:0d:ec:06:04:84:d2:f2:7f:3d:b5:e1:64:b6:a4:6a:bc:bb:
         50:3e:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org