Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/323830343a336137383a383430303a3a2f34382d3438203d3e20323636303931.roa
File:                     323830343a336137383a383430303a3a2f34382d3438203d3e20323636303931.roa (raw, json)
Hash identifier:          tFGcdUYrZBYm+cKCe0orHfpG8S6UW6/MqoWLdBANOQU=
Subject key identifier:   DB:41:27:BD:A1:BE:08:0F:9E:D8:A3:A6:69:93:EC:A0:71:C7:30:C5
Certificate issuer:       /CN=5450FAFA57000D5AA61AEF7BE39D21C01883EA85
Certificate serial:       0B99A91A7393D0261D16F454971AA32E1AED0572
Authority key identifier: 54:50:FA:FA:57:00:0D:5A:A6:1A:EF:7B:E3:9D:21:C0:18:83:EA:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/323830343a336137383a383430303a3a2f34382d3438203d3e20323636303931.roa
Signing time:             Wed 28 Feb 2024 14:11:11 +0000
ROA not before:           Wed 28 Feb 2024 14:06:11 +0000
ROA not after:            Wed 26 Feb 2025 14:11:11 +0000
asID:                     266091
IP address blocks:        2804:3a78:8400::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:99:a9:1a:73:93:d0:26:1d:16:f4:54:97:1a:a3:2e:1a:ed:05:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5450FAFA57000D5AA61AEF7BE39D21C01883EA85
        Validity
            Not Before: Feb 28 14:06:11 2024 GMT
            Not After : Feb 26 14:11:11 2025 GMT
        Subject: CN=DB4127BDA1BE080F9ED8A3A66993ECA071C730C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:14:e1:7e:af:66:ea:80:d5:8b:c8:e3:c3:9d:
                    39:6f:f5:16:60:cf:98:11:9c:df:de:f5:0a:a3:0e:
                    94:7f:fa:f7:11:cb:6d:9e:60:5f:b3:e4:a7:98:71:
                    02:30:ef:a7:93:50:28:95:10:24:85:6f:3e:b0:22:
                    98:26:90:d2:b6:92:8b:a4:fd:41:63:b1:f5:23:f7:
                    b0:b8:04:57:b3:8a:fc:35:fe:9b:e0:48:d1:ad:df:
                    5e:18:7d:ec:a3:60:a3:39:93:05:78:89:7e:d4:6a:
                    cf:4d:b5:e5:ad:11:84:8d:d1:47:a8:33:59:f3:06:
                    0c:a2:73:14:6e:79:d5:13:d2:ac:1d:61:18:9d:67:
                    93:53:d0:64:08:ab:6a:a6:d7:51:d7:99:fb:da:67:
                    34:db:66:d9:7a:aa:66:74:3b:c0:68:98:9b:fa:53:
                    b8:ab:2f:5f:0d:c2:5a:3a:0c:de:b5:e6:86:2e:c9:
                    90:0e:72:80:fc:00:c6:4e:18:be:38:97:3a:f6:cf:
                    82:e8:80:77:f4:f1:45:9b:40:25:85:de:81:0d:df:
                    7c:5b:79:20:4b:d2:a2:06:ed:2d:b7:73:13:9f:d9:
                    ac:53:39:fc:e4:ad:c5:fc:ac:22:8f:10:10:38:e9:
                    0c:7a:c8:37:96:70:22:18:77:4f:fb:3d:1a:d9:bb:
                    ab:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:41:27:BD:A1:BE:08:0F:9E:D8:A3:A6:69:93:EC:A0:71:C7:30:C5
            X509v3 Authority Key Identifier:
                keyid:54:50:FA:FA:57:00:0D:5A:A6:1A:EF:7B:E3:9D:21:C0:18:83:EA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/323830343a336137383a383430303a3a2f34382d3438203d3e20323636303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a78:8400::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:5b:2f:3e:f3:cf:da:ef:35:15:09:84:3e:28:29:5d:2d:12:
         dd:ab:51:17:ad:cb:1c:b4:1e:d8:a3:06:8a:19:73:47:eb:27:
         c5:4e:8f:c1:ca:6d:40:b0:16:c9:39:44:1e:90:ce:48:f3:65:
         f0:3e:b3:ac:62:73:f3:de:ad:09:c2:36:04:28:a6:27:fd:98:
         88:6b:48:10:e5:f5:04:b8:18:c3:fa:c7:76:42:93:b3:f2:29:
         ed:f5:08:b0:90:8c:70:66:38:b2:bb:9b:4e:52:9e:ef:0b:a9:
         cf:4d:99:bf:aa:f4:52:80:f6:7b:93:ae:f9:db:f0:c2:82:9e:
         0f:e3:4f:0f:85:a3:70:31:dc:c2:ec:75:08:74:6d:02:da:4d:
         02:96:16:3d:d5:a9:96:c3:51:44:08:c2:76:0d:5e:28:1f:44:
         e6:dd:db:a6:45:36:de:58:a6:af:01:ba:38:8e:d2:8e:b2:b4:
         66:9b:5f:24:77:3e:64:eb:6a:4a:69:d3:2d:77:60:6c:f6:7d:
         50:ce:38:a6:a1:c8:6c:f1:71:76:41:e3:0a:11:5a:39:a7:0b:
         fc:18:89:2e:93:d1:fd:5c:13:cd:ef:ac:fb:9c:be:3b:89:c6:
         93:21:e8:67:fd:ba:6e:bc:5c:e2:23:d2:ce:37:0a:bc:c3:ad:
         06:81:76:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org