Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/323830343a6363343a31303a3a2f34382d3438203d3e203532353531.roa
File:                     323830343a6363343a31303a3a2f34382d3438203d3e203532353531.roa (raw, json)
Hash identifier:          GPcZUrO1jsn0yYVw8RbRDhuWVPQrF2cTn8fPbVlNkpI=
Subject key identifier:   EF:5A:74:BD:20:45:A9:F7:CA:22:67:CB:F3:4F:09:A5:42:E1:4D:29
Certificate issuer:       /CN=2EDDA86030532DE49CB7043239B46E667884503B
Certificate serial:       2D1D0A9B1E36199A3C6777DA059C22B86E44F2CA
Authority key identifier: 2E:DD:A8:60:30:53:2D:E4:9C:B7:04:32:39:B4:6E:66:78:84:50:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EDDA86030532DE49CB7043239B46E667884503B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/323830343a6363343a31303a3a2f34382d3438203d3e203532353531.roa
Signing time:             Thu 17 Aug 2023 21:50:09 +0000
ROA not before:           Thu 17 Aug 2023 21:45:09 +0000
ROA not after:            Thu 15 Aug 2024 21:50:09 +0000
asID:                     52551
IP address blocks:        2804:cc4:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1d:0a:9b:1e:36:19:9a:3c:67:77:da:05:9c:22:b8:6e:44:f2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EDDA86030532DE49CB7043239B46E667884503B
        Validity
            Not Before: Aug 17 21:45:09 2023 GMT
            Not After : Aug 15 21:50:09 2024 GMT
        Subject: CN=EF5A74BD2045A9F7CA2267CBF34F09A542E14D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fd:56:e0:a9:96:91:8b:56:eb:e0:62:c0:64:
                    7f:2c:ca:02:16:bc:ec:fd:90:05:83:18:10:77:e3:
                    10:cf:d2:84:04:97:e2:67:47:25:c6:ce:e7:e9:e8:
                    95:0a:7c:22:eb:7b:48:ff:f6:3c:49:b3:77:78:da:
                    39:a6:7e:2f:ac:58:68:71:5e:b9:b8:bb:21:e5:65:
                    f7:c5:0f:b6:78:a6:d1:89:1a:b6:9b:ac:01:2e:ba:
                    52:ff:3f:09:2f:6f:bc:c3:fa:98:0c:27:d2:43:fa:
                    56:62:c6:80:02:26:21:92:1c:4d:8a:12:93:a0:14:
                    f1:6f:d2:45:b9:c4:80:3a:8d:ea:ce:ae:57:54:10:
                    1b:31:69:eb:f9:44:d4:3e:97:64:97:58:20:23:8e:
                    ab:42:14:c9:dc:13:c9:cb:04:8e:f8:c7:62:8a:42:
                    8f:99:ba:cc:2b:24:32:d9:69:77:34:c6:1e:9e:4a:
                    24:d3:83:f2:e9:90:8c:7a:96:09:c5:52:0f:ed:ac:
                    61:5a:ef:72:7a:ca:e3:49:f7:dd:47:d5:87:5d:6b:
                    41:72:e0:a1:20:89:99:51:26:7a:e5:da:16:b6:dd:
                    34:83:8f:b6:b1:ca:c8:22:b7:e7:56:07:9e:3d:c1:
                    3c:af:7f:0f:6d:0c:55:14:64:6d:dc:0b:d4:b4:12:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5A:74:BD:20:45:A9:F7:CA:22:67:CB:F3:4F:09:A5:42:E1:4D:29
            X509v3 Authority Key Identifier:
                keyid:2E:DD:A8:60:30:53:2D:E4:9C:B7:04:32:39:B4:6E:66:78:84:50:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/2EDDA86030532DE49CB7043239B46E667884503B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EDDA86030532DE49CB7043239B46E667884503B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/323830343a6363343a31303a3a2f34382d3438203d3e203532353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cc4:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:36:8a:71:2c:0a:36:84:39:07:ac:af:35:f1:e6:0b:a6:c4:
         ba:3f:a9:cf:92:59:e4:58:df:0c:dc:89:20:e3:0d:fc:26:0f:
         c3:d3:a1:01:31:a2:db:1c:46:f2:99:21:a2:c5:e7:44:9d:ba:
         d8:eb:ab:a3:a5:10:3a:58:9e:6c:73:72:a8:3f:29:3c:2b:0c:
         f7:25:5c:50:43:91:fc:1f:67:64:38:5c:41:77:b7:66:d2:51:
         dd:ad:ac:92:01:1e:41:89:c7:e0:fd:21:f9:c0:56:61:28:ae:
         25:48:28:d7:25:b7:ef:2c:b9:57:6a:af:2d:95:2e:d3:f6:7d:
         de:7c:b0:9c:af:f3:20:e9:a2:cb:e3:79:07:2b:3c:88:41:54:
         7b:fa:39:3d:aa:f4:d3:6b:6f:96:f4:77:af:57:b5:01:ae:fe:
         ff:51:eb:3d:db:ce:b2:30:64:f5:95:8f:41:a7:c5:04:a5:bb:
         10:d9:7d:f9:fb:79:e6:cf:ff:41:6f:4a:24:10:72:04:f9:33:
         3e:3a:86:9d:cd:7d:63:e9:f8:3d:a8:0a:56:ca:f7:ab:59:c7:
         52:f7:2d:e5:f6:e4:93:63:38:d7:b1:9d:c0:1d:8d:8f:5e:b2:
         17:b9:7e:e5:78:46:2f:ba:d7:e4:75:9f:cb:a5:08:76:55:00:
         fe:f3:b9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org