Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a626162613a3a2f34382d3438203d3e20323637353934.roa
File:                     323830343a343364383a626162613a3a2f34382d3438203d3e20323637353934.roa (raw, json)
Hash identifier:          PIYD6N6pS6vjWoCfnM3wdkSzyMWsdbM6xRlImYH4DnU=
Subject key identifier:   C5:38:18:2A:CF:47:13:7B:36:A4:E2:08:BA:99:80:35:49:75:69:D2
Certificate issuer:       /CN=5EF0E2598B718F5793DF38CEF3A68EE38E017C06
Certificate serial:       7ADC315D8305661C95F54E2BF4F218E2ECA41AF4
Authority key identifier: 5E:F0:E2:59:8B:71:8F:57:93:DF:38:CE:F3:A6:8E:E3:8E:01:7C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a626162613a3a2f34382d3438203d3e20323637353934.roa
Signing time:             Fri 24 Mar 2023 01:47:11 +0000
ROA not before:           Fri 24 Mar 2023 01:42:11 +0000
ROA not after:            Fri 22 Mar 2024 01:47:11 +0000
asID:                     267594
IP address blocks:        2804:43d8:baba::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:dc:31:5d:83:05:66:1c:95:f5:4e:2b:f4:f2:18:e2:ec:a4:1a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF0E2598B718F5793DF38CEF3A68EE38E017C06
        Validity
            Not Before: Mar 24 01:42:11 2023 GMT
            Not After : Mar 22 01:47:11 2024 GMT
        Subject: CN=C538182ACF47137B36A4E208BA998035497569D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:12:3d:a8:ed:2f:94:7c:5d:ae:1c:46:14:
                    43:9e:b4:f6:c8:97:a2:c3:60:9a:9b:0a:20:dc:8c:
                    c5:f4:43:82:59:56:f3:b8:84:7e:80:48:5f:cb:81:
                    a0:3b:e3:03:61:bc:82:6e:44:94:f5:81:d1:42:a6:
                    4d:67:00:47:f5:c0:d2:44:c9:11:26:33:fa:e1:b8:
                    42:66:3d:45:91:78:01:88:ec:d3:b9:b3:a4:ed:35:
                    26:f2:da:fc:fa:3d:7c:58:a4:2d:4f:3b:c8:51:ea:
                    7f:31:9e:f7:ae:6f:f0:0f:0e:09:5e:47:b3:f4:9e:
                    d2:61:db:16:d3:b3:8a:33:9d:16:aa:dc:cb:2f:96:
                    d3:fa:10:cf:b2:2b:f4:ec:21:a7:53:f4:0b:38:8f:
                    7c:5f:55:dc:51:85:39:00:2a:9c:c2:9b:5b:bc:98:
                    af:9c:8a:c6:99:4b:c7:b5:ec:57:42:a5:2b:7b:26:
                    ce:93:ca:2f:fd:7d:46:7f:8a:e7:ea:02:99:54:53:
                    29:8f:88:2d:8f:1c:36:65:c6:fd:8f:fb:99:12:36:
                    89:a3:a5:bc:9f:e7:78:e4:2e:80:24:79:6d:91:1a:
                    32:45:2e:53:c9:49:3a:75:0a:86:ec:56:72:73:ec:
                    8c:ca:6d:7e:bc:31:7c:c4:f5:e7:d9:47:dd:ce:28:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:38:18:2A:CF:47:13:7B:36:A4:E2:08:BA:99:80:35:49:75:69:D2
            X509v3 Authority Key Identifier:
                keyid:5E:F0:E2:59:8B:71:8F:57:93:DF:38:CE:F3:A6:8E:E3:8E:01:7C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a626162613a3a2f34382d3438203d3e20323637353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43d8:baba::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:79:82:48:f4:f5:6e:25:ec:3b:db:af:6e:db:7f:42:dd:f4:
         35:89:2c:31:74:87:9b:fa:85:af:1f:7a:22:a3:c2:0e:87:f0:
         1c:e9:d0:1d:cf:02:79:35:30:9f:04:10:ab:73:9f:54:b4:94:
         e5:64:76:22:f0:e5:00:cd:34:ae:53:9b:f7:af:ba:88:d2:bc:
         ed:40:07:46:8c:85:04:98:99:7f:0c:78:7c:d3:dc:14:73:60:
         97:2e:db:27:8e:c9:f9:eb:30:ce:d5:f8:9a:35:44:2f:7d:ec:
         7a:48:8b:fb:eb:b3:2d:be:d6:62:7c:9a:f2:d7:b7:39:79:68:
         89:06:44:fb:d8:d7:fb:d8:b6:98:e5:0d:9a:c3:b7:7c:f8:82:
         16:24:bf:c9:96:57:dc:f3:bd:0c:06:c7:bb:a3:51:d3:77:6f:
         b1:f7:dc:f4:02:4d:1e:cf:5f:1c:53:40:06:6a:62:f3:cf:0a:
         3a:b1:2e:ae:b8:d2:15:62:e3:12:33:d2:67:02:3a:28:6a:19:
         e0:06:3c:a9:0f:17:9a:33:d1:22:21:c5:ee:9b:38:9b:a0:4a:
         75:3c:0b:df:7e:de:c9:31:b5:c1:e5:04:64:a1:c5:ef:a2:dc:
         9d:fd:fa:e7:f1:8e:64:43:ce:4d:be:2c:e7:07:bb:e4:ac:cd:
         e9:bc:b2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org