Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/323830343a376461303a3a2f33322d3332203d3e20323731353733.roa
File:                     323830343a376461303a3a2f33322d3332203d3e20323731353733.roa (raw, json)
Hash identifier:          WRmxfWsKsDXmHwF+hOG/wDz1AmIq8jFFMCAzA4BmQmY=
Subject key identifier:   BC:D6:EF:A3:5C:5E:B6:B0:2C:7B:FF:BC:55:A1:0B:36:04:D6:C5:0B
Certificate issuer:       /CN=5A3F0107992B5594AAC8127D2D4984343707D1A1
Certificate serial:       6D2D86527DBE2820337AE3155A0922BC67DB28B5
Authority key identifier: 5A:3F:01:07:99:2B:55:94:AA:C8:12:7D:2D:49:84:34:37:07:D1:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3F0107992B5594AAC8127D2D4984343707D1A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/323830343a376461303a3a2f33322d3332203d3e20323731353733.roa
Signing time:             Thu 04 Apr 2024 05:20:00 +0000
ROA not before:           Thu 04 Apr 2024 05:15:00 +0000
ROA not after:            Thu 03 Apr 2025 05:20:00 +0000
asID:                     271573
IP address blocks:        2804:7da0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2d:86:52:7d:be:28:20:33:7a:e3:15:5a:09:22:bc:67:db:28:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3F0107992B5594AAC8127D2D4984343707D1A1
        Validity
            Not Before: Apr  4 05:15:00 2024 GMT
            Not After : Apr  3 05:20:00 2025 GMT
        Subject: CN=BCD6EFA35C5EB6B02C7BFFBC55A10B3604D6C50B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:a8:ee:0c:4b:c0:11:3b:5c:4e:6c:0a:9e:
                    67:10:36:f8:2f:54:e0:e7:8d:1d:90:05:aa:03:04:
                    d9:a0:58:d9:bd:d0:6b:2c:b4:f9:4d:7c:50:22:f9:
                    ed:d6:27:a3:35:54:46:9c:fc:d4:0a:00:cc:2c:c7:
                    30:2c:3d:e9:50:82:5d:46:8d:46:c1:8a:13:ec:4d:
                    c0:90:b0:2f:ee:62:67:e5:9e:6e:cd:65:6a:1b:39:
                    c5:3c:db:81:bc:4b:2c:db:93:b5:0e:0c:27:18:48:
                    11:8e:80:f1:ce:84:46:1b:d6:42:f6:c9:88:4d:a8:
                    01:7d:3d:83:d2:09:fb:82:90:1a:09:5f:73:16:d8:
                    0f:5e:4e:73:06:9b:8d:49:d1:3f:42:db:92:ed:fa:
                    3e:1a:3b:06:8b:1c:31:aa:41:22:72:82:20:77:bd:
                    0f:e1:9f:ef:a3:1e:b0:b8:ac:c9:08:27:9a:31:a7:
                    66:d2:44:a8:74:f9:04:84:38:f3:10:35:38:9c:0c:
                    da:65:8c:47:90:2d:ca:c2:b6:04:38:ea:ab:13:c1:
                    87:ba:92:69:54:1e:f5:01:ae:19:cf:4f:ed:b3:ad:
                    ff:3b:93:ff:05:c7:5f:75:c4:56:09:84:b1:55:c2:
                    af:de:0b:5f:64:86:e4:f1:0e:93:eb:7d:fd:73:2b:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D6:EF:A3:5C:5E:B6:B0:2C:7B:FF:BC:55:A1:0B:36:04:D6:C5:0B
            X509v3 Authority Key Identifier:
                keyid:5A:3F:01:07:99:2B:55:94:AA:C8:12:7D:2D:49:84:34:37:07:D1:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/5A3F0107992B5594AAC8127D2D4984343707D1A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3F0107992B5594AAC8127D2D4984343707D1A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/323830343a376461303a3a2f33322d3332203d3e20323731353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:5e:5e:b1:2c:d8:2b:5e:f5:a2:e1:6c:db:8a:88:e1:fd:28:
         1c:e2:97:b0:08:bd:38:2b:b6:04:da:dc:0e:39:93:96:a1:fa:
         a6:81:d3:9a:83:08:9f:3b:14:69:f0:5e:dd:8c:cf:e2:c9:d4:
         ae:34:31:3f:61:c2:b6:98:49:89:cb:0b:a8:d0:92:03:a3:dd:
         8e:65:30:44:d3:e7:72:ee:bb:9a:25:4e:1e:30:0f:0c:ad:2d:
         ce:74:34:f0:26:0c:84:e4:fc:df:b2:f1:50:80:2f:b4:80:b3:
         a2:4a:99:83:11:19:4f:e5:f7:36:08:70:e0:11:6d:65:f5:de:
         71:98:1d:60:65:08:92:d9:e5:27:33:b0:8d:d2:f6:ab:9e:66:
         a8:55:d4:fe:fa:ea:1c:93:14:c1:d4:79:27:ce:b1:34:97:b4:
         d1:28:2f:d9:3d:c5:7f:6d:11:5b:c4:f2:4c:10:05:42:ab:7b:
         a9:b0:a6:b3:d0:18:85:33:88:39:68:d8:8f:a3:37:67:bb:c9:
         ad:96:36:c5:15:4e:c1:68:8c:78:c5:35:be:33:69:a4:b7:0d:
         3e:0e:82:27:54:e6:18:4a:05:74:27:c1:4b:2d:bb:09:f6:e0:
         d1:ad:ba:f1:65:05:d2:08:ca:7a:27:93:d4:cc:50:fb:05:ab:
         b1:a3:4c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org