Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030313a3a2f34382d3438203d3e203533303532.roa
File:                     323830343a326634383a343030313a3a2f34382d3438203d3e203533303532.roa (raw, json)
Hash identifier:          Ev3IldIOqgMFUIRTUceLcEBL8N4s3FE+RmqGWCi4TQU=
Subject key identifier:   B3:FA:E1:62:F8:1C:D8:0A:BE:2B:A8:78:8B:FD:1A:16:83:71:5F:DE
Certificate issuer:       /CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
Certificate serial:       5DE01F560447E742A3AD66A9BE1C7F673764BEDF
Authority key identifier: EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030313a3a2f34382d3438203d3e203533303532.roa
Signing time:             Tue 17 Oct 2023 11:17:53 +0000
ROA not before:           Tue 17 Oct 2023 11:12:53 +0000
ROA not after:            Tue 15 Oct 2024 11:17:53 +0000
asID:                     53052
IP address blocks:        2804:2f48:4001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e0:1f:56:04:47:e7:42:a3:ad:66:a9:be:1c:7f:67:37:64:be:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
        Validity
            Not Before: Oct 17 11:12:53 2023 GMT
            Not After : Oct 15 11:17:53 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:82:02:30:37:d1:dd:bc:77:19:4e:3e:ad:a8:
                    2c:98:92:9d:dc:5e:ad:c8:a2:fa:19:35:d3:b9:05:
                    8c:2a:3d:6f:30:5e:4f:3f:ca:ca:b7:5d:91:fe:84:
                    e2:4b:a9:dc:3b:ff:c3:5a:11:2d:bf:c4:eb:3d:dd:
                    1a:75:84:d7:88:48:a8:53:35:82:38:30:85:e9:ea:
                    b3:96:3a:3a:58:50:64:2f:ac:ce:75:81:a3:c7:25:
                    53:7a:d8:4e:19:1b:e8:bd:12:59:f6:be:d5:00:97:
                    e5:2a:e0:b3:c0:b8:d7:d1:ed:43:5c:3a:4b:0f:c6:
                    aa:ca:11:cc:64:8c:3d:73:39:24:21:7a:ff:29:63:
                    9b:31:2b:ef:b3:0d:78:71:4d:cd:c3:96:90:b6:94:
                    b2:29:be:68:fb:cb:40:04:08:8d:29:d3:92:31:af:
                    62:5a:37:0f:46:e7:90:40:4c:3e:5c:47:ab:50:7b:
                    ac:c6:97:4e:5a:d8:81:f7:38:5d:76:b8:9e:28:d3:
                    9a:be:a0:f3:f4:51:18:35:03:cc:2e:a2:57:dc:d8:
                    0c:a6:e2:77:6a:1c:eb:4f:e2:b4:b6:be:07:ff:1e:
                    a5:4f:ec:4c:54:1a:1f:47:5a:be:d4:dd:6d:6b:cb:
                    7a:92:7d:bc:59:43:fc:b7:49:ed:a7:46:64:88:6f:
                    fb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FA:E1:62:F8:1C:D8:0A:BE:2B:A8:78:8B:FD:1A:16:83:71:5F:DE
            X509v3 Authority Key Identifier:
                keyid:EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030313a3a2f34382d3438203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f48:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:8a:43:c2:34:ac:26:b2:28:fd:1f:63:34:38:cd:e1:b5:0f:
         b1:33:39:06:75:c8:2d:e9:ab:c4:2c:95:ab:6b:74:46:d7:09:
         54:06:7f:2c:f6:c6:19:1a:5b:c6:19:d3:2e:25:ff:a9:fc:d4:
         ab:5b:cf:30:4f:c5:47:d1:10:ae:c5:84:50:55:1e:62:a3:89:
         dd:53:22:18:f7:7e:fa:9a:8c:62:56:e0:0c:a3:a5:af:48:b9:
         98:3e:97:37:27:1d:8c:39:b2:c8:32:b8:54:c6:70:67:fd:7c:
         b8:a4:72:21:bb:bd:96:cb:e2:35:25:f7:80:e3:b0:f1:e5:50:
         36:52:29:80:8e:20:d8:08:da:6c:2f:2b:7b:e6:80:cf:29:fd:
         5b:3c:ce:27:14:f2:ad:6e:c9:b4:dc:40:4d:2e:e6:24:a5:b4:
         07:fd:a6:8b:20:f7:76:b4:b9:c5:1e:cd:23:fe:b7:15:df:5b:
         9b:c7:68:a4:4a:f5:1c:e2:e0:40:70:17:e3:d6:01:4d:97:0a:
         be:1f:c9:9f:06:44:dd:54:47:e0:d3:83:01:b1:26:7f:08:cd:
         46:27:6a:55:d9:de:aa:59:94:d1:a5:e6:b3:35:b9:c5:b9:c7:
         3a:ab:c8:38:0d:35:a7:c2:05:0b:17:1c:ad:28:ed:5a:a4:6c:
         75:bc:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org