Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a383330303a3a2f34302d3430203d3e203532373830.roa
File:                     323830343a326539343a383330303a3a2f34302d3430203d3e203532373830.roa (raw, json)
Hash identifier:          zB93rI7pVSldojN+Ei9y0Fmk8dLpyfX4Ka3XxLk7uGc=
Subject key identifier:   65:D0:57:3C:A6:B3:19:6D:86:78:D8:0C:88:D4:E3:F6:6D:4B:08:90
Certificate issuer:       /CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9
Certificate serial:       20BAFB31D84B562206567339B678CEB8F17A4C0B
Authority key identifier: D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a383330303a3a2f34302d3430203d3e203532373830.roa
Signing time:             Tue 05 Dec 2023 14:44:32 +0000
ROA not before:           Tue 05 Dec 2023 14:39:32 +0000
ROA not after:            Tue 03 Dec 2024 14:44:32 +0000
asID:                     52780
IP address blocks:        2804:2e94:8300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ba:fb:31:d8:4b:56:22:06:56:73:39:b6:78:ce:b8:f1:7a:4c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9
        Validity
            Not Before: Dec  5 14:39:32 2023 GMT
            Not After : Dec  3 14:44:32 2024 GMT
        Subject: CN=65D0573CA6B3196D8678D80C88D4E3F66D4B0890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:67:4c:c7:43:ff:d9:ce:04:88:f6:e4:9c:7d:
                    22:71:c3:db:d2:d4:cf:ee:dd:b0:6b:0c:48:22:93:
                    80:8c:cd:54:a4:cd:ee:3c:7e:c7:0f:6f:24:15:18:
                    d9:36:18:6d:d8:09:73:ac:ad:fa:b9:99:56:16:e9:
                    9f:e7:40:52:33:88:bc:06:d1:d4:90:b3:d6:69:35:
                    62:78:11:1f:ae:95:6a:8a:ee:21:5b:1d:ae:bb:12:
                    b4:ee:5d:5e:85:7d:17:03:ec:8f:06:b5:41:4e:45:
                    4d:d3:18:d8:dc:07:44:c9:92:b4:a7:90:98:14:55:
                    1a:91:b6:49:53:d6:79:f6:82:b8:85:68:ea:5f:26:
                    1d:68:dd:4f:04:2a:7f:fc:b9:18:27:2c:f8:9e:93:
                    5f:3a:fa:16:c3:91:f7:ea:31:bd:ca:94:53:76:d1:
                    80:24:b7:7b:10:68:67:e5:9b:f9:b1:b5:d1:0e:c6:
                    ab:49:10:b0:d8:d7:7a:e8:11:9f:13:fd:fd:fd:ba:
                    8e:82:90:10:df:4d:48:9f:45:3f:6f:ab:c7:d5:3d:
                    fb:38:5a:67:75:7e:a4:a1:83:9c:19:2b:4d:46:fc:
                    a1:80:ce:e0:8e:a5:df:ae:73:ab:6f:2d:7c:c7:22:
                    56:90:af:2d:a5:04:52:6d:0d:eb:82:10:36:7f:89:
                    f3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D0:57:3C:A6:B3:19:6D:86:78:D8:0C:88:D4:E3:F6:6D:4B:08:90
            X509v3 Authority Key Identifier:
                keyid:D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a383330303a3a2f34302d3430203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e94:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:73:a1:b6:f9:ee:11:3a:c9:a4:04:5f:7d:f7:e2:86:39:4d:
         06:1f:0b:00:72:de:dc:e0:0d:35:cb:d6:2d:4f:3b:9f:fe:f6:
         f9:91:63:cb:f6:fd:78:79:fd:c0:35:69:f1:b3:9f:b8:0c:58:
         f7:a7:82:62:af:5f:c0:de:f0:92:57:c8:c9:43:d0:da:79:4c:
         ee:b4:2a:3e:6a:25:77:d0:15:b0:39:ff:e2:1d:d6:bd:4f:88:
         c4:b3:1e:9d:66:a9:15:bc:2b:76:03:2e:be:97:b8:ba:0c:07:
         4f:00:45:0b:d5:ef:98:74:9b:22:9d:d0:3a:7d:91:a1:23:d3:
         b1:bd:83:d8:09:8e:cc:df:85:29:54:11:cd:63:bf:7d:5d:fa:
         f9:40:11:71:e6:9a:35:ec:a9:90:30:b0:c7:5d:3d:5d:46:00:
         9d:77:3a:63:ac:2c:20:78:cb:64:38:9e:62:0c:92:33:05:b6:
         d1:7e:3f:c1:23:04:fb:0c:60:87:95:53:56:b3:67:97:3f:05:
         69:94:42:e0:00:71:79:71:7e:d4:d9:ea:b8:4c:98:b2:d0:42:
         ca:53:6a:b9:28:ce:f7:d2:c3:6f:a6:6a:d0:6f:ce:8c:ca:97:
         ef:54:72:55:47:03:6a:b8:45:22:4e:c1:f3:14:d9:01:cb:bf:
         ac:c8:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org