Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a353a3a2f34382d3438203d3e203631363038.roa
File:                     323830343a383237303a353a3a2f34382d3438203d3e203631363038.roa (raw, json)
Hash identifier:          ghysmRDw1qfm4+o3t7QSUdQ3vpg/A7QaFtvez58nFio=
Subject key identifier:   54:A5:EC:4D:26:A2:E7:E6:D8:18:D0:8F:E3:08:23:05:0A:B0:CA:2E
Certificate issuer:       /CN=4400296416BB5FE1B6E540C3273ADBF56ACD2119
Certificate serial:       2927B5B1103F03B5D324D4A88E77888D1EC9D155
Authority key identifier: 44:00:29:64:16:BB:5F:E1:B6:E5:40:C3:27:3A:DB:F5:6A:CD:21:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4400296416BB5FE1B6E540C3273ADBF56ACD2119.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a353a3a2f34382d3438203d3e203631363038.roa
Signing time:             Thu 16 Mar 2023 21:07:35 +0000
ROA not before:           Thu 16 Mar 2023 21:02:35 +0000
ROA not after:            Thu 14 Mar 2024 21:07:35 +0000
asID:                     61608
IP address blocks:        2804:8270:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:27:b5:b1:10:3f:03:b5:d3:24:d4:a8:8e:77:88:8d:1e:c9:d1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4400296416BB5FE1B6E540C3273ADBF56ACD2119
        Validity
            Not Before: Mar 16 21:02:35 2023 GMT
            Not After : Mar 14 21:07:35 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:46:cb:a2:95:9f:55:19:d8:55:0d:08:da:0b:
                    8b:a9:75:32:47:23:71:c2:a2:03:19:a4:66:52:b0:
                    af:22:4f:a6:75:25:2f:53:8d:80:77:08:8f:c6:69:
                    72:1e:2e:ba:54:ba:46:ac:93:96:51:b8:86:c7:1e:
                    c6:1b:5d:9c:b9:c9:d6:03:28:b4:3a:2b:fe:16:1b:
                    36:d1:f7:62:02:03:5f:b2:66:94:3c:1e:6f:58:fe:
                    20:25:85:c6:d6:96:2d:34:89:49:44:10:6a:d4:e1:
                    dd:54:58:34:f8:76:8a:a4:d5:19:0a:81:bd:57:e0:
                    d0:e8:cb:12:e0:7f:a3:c4:f7:34:a7:8f:d0:a5:2a:
                    63:76:4b:a3:99:77:61:93:e3:31:0d:13:de:7e:92:
                    f8:9f:37:4b:d3:22:3f:9d:22:8f:23:89:c8:38:ce:
                    c2:6c:f2:00:fa:8d:88:9c:44:d3:d6:63:39:c3:43:
                    d1:6d:76:20:c6:79:d2:d7:a4:ba:e0:41:09:c9:52:
                    31:ef:89:fe:82:9f:b1:b6:a0:a1:ba:4d:7e:77:b4:
                    42:e1:e5:e8:49:dd:8b:32:b1:4c:a0:fb:43:dd:82:
                    9c:19:84:08:08:58:42:0d:01:70:95:a3:b8:8b:0c:
                    b9:98:aa:d1:a4:d2:7f:8a:24:59:0e:94:c2:98:37:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A5:EC:4D:26:A2:E7:E6:D8:18:D0:8F:E3:08:23:05:0A:B0:CA:2E
            X509v3 Authority Key Identifier:
                keyid:44:00:29:64:16:BB:5F:E1:B6:E5:40:C3:27:3A:DB:F5:6A:CD:21:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/4400296416BB5FE1B6E540C3273ADBF56ACD2119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4400296416BB5FE1B6E540C3273ADBF56ACD2119.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a353a3a2f34382d3438203d3e203631363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8270:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:d6:13:8b:1b:c7:df:0f:19:ac:92:1a:4e:60:31:3d:6f:01:
         25:33:7b:03:95:51:78:27:c7:a4:a8:a5:70:78:40:70:e1:4a:
         08:c3:d5:61:37:57:a8:c3:8f:48:dd:49:9e:1d:71:45:7d:21:
         e8:86:25:08:9d:c5:f4:11:50:1b:32:45:91:4e:1e:66:09:d0:
         46:cd:d3:fe:0d:6a:b4:a4:a2:51:32:38:1f:f8:9b:45:84:d9:
         34:e8:27:d1:84:70:51:51:b3:c5:d7:37:c3:c1:e0:a1:a4:c2:
         b3:3a:84:e4:7c:e9:08:dc:99:87:b9:d0:98:74:01:e1:fc:d5:
         8e:bc:c2:45:86:bd:51:77:a9:91:3a:4a:d4:de:8a:c2:74:21:
         98:60:54:35:4d:73:0a:83:b0:7c:e0:00:12:0b:34:f1:1c:35:
         47:78:c3:29:2f:5f:46:29:3d:1a:a7:08:c1:94:3b:11:c2:6a:
         54:c5:69:39:55:c7:eb:7e:86:02:33:a2:13:10:02:c4:5b:8c:
         ce:78:3d:bb:98:22:b5:15:b9:ff:61:41:74:41:b4:92:4b:07:
         cf:8a:9b:4e:52:d0:6e:99:ef:40:1e:9c:ae:5c:ed:98:da:a1:
         7d:eb:45:8a:84:e2:df:cf:f0:49:bb:65:4f:a0:57:51:73:94:
         8d:e4:42:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org