Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/323830343a66633a3a2f33322d3434203d3e203238313432.roa
File:                     323830343a66633a3a2f33322d3434203d3e203238313432.roa (raw, json)
Hash identifier:          wUpXqzCeEJ7j5g4QeMP3neNtx3+XK/yb2it+PcL0AVM=
Subject key identifier:   46:8D:89:D5:F9:2D:14:EE:29:FC:50:DA:DE:0D:2E:41:C5:C8:CB:F0
Certificate issuer:       /CN=EB8CC30C6270FF4479D0FDE7CA28E30A974D124F
Certificate serial:       18833DA650FAD00322DFA01F990ED0FB0ED71E0B
Authority key identifier: EB:8C:C3:0C:62:70:FF:44:79:D0:FD:E7:CA:28:E3:0A:97:4D:12:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB8CC30C6270FF4479D0FDE7CA28E30A974D124F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/323830343a66633a3a2f33322d3434203d3e203238313432.roa
Signing time:             Thu 21 Mar 2024 16:44:22 +0000
ROA not before:           Thu 21 Mar 2024 16:39:22 +0000
ROA not after:            Thu 20 Mar 2025 16:44:22 +0000
asID:                     28142
IP address blocks:        2804:fc::/32 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:83:3d:a6:50:fa:d0:03:22:df:a0:1f:99:0e:d0:fb:0e:d7:1e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8CC30C6270FF4479D0FDE7CA28E30A974D124F
        Validity
            Not Before: Mar 21 16:39:22 2024 GMT
            Not After : Mar 20 16:44:22 2025 GMT
        Subject: CN=468D89D5F92D14EE29FC50DADE0D2E41C5C8CBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:cc:b7:ce:aa:d9:fa:14:a9:f3:46:7d:44:
                    fb:c8:b2:9c:9e:14:f8:f4:15:a2:ff:b5:3d:ae:0c:
                    4f:45:6b:77:53:0c:51:96:17:a7:f7:8a:87:ff:3e:
                    6c:6e:e9:15:85:86:48:79:64:ca:fb:07:66:6e:71:
                    94:ef:f4:2b:b1:d8:9d:ee:a4:c3:67:07:bb:e5:8f:
                    3c:18:3c:6d:83:fb:7f:c2:4a:8e:92:09:30:00:98:
                    f4:0b:01:37:69:d8:77:cf:33:8f:e9:54:8f:c2:0f:
                    91:0b:ec:ef:96:03:a4:1a:f0:32:cd:e2:e6:cd:47:
                    50:b1:dc:e9:dc:b2:d7:b2:bd:52:bb:7d:77:76:1e:
                    55:38:ac:91:51:2e:e0:57:09:36:cc:68:50:ec:da:
                    8a:70:7c:dd:f4:bb:44:dc:e4:5d:06:4b:aa:b1:11:
                    c0:57:18:70:cf:0e:00:47:ed:21:0f:3a:39:f8:2d:
                    48:00:7d:47:82:43:94:12:8e:de:00:cb:6e:9a:6b:
                    db:4c:53:4d:bb:06:4b:f5:0d:68:99:df:2c:97:bd:
                    77:77:e0:c6:23:00:6c:44:26:17:57:14:3c:ad:a2:
                    b8:42:ed:95:7c:32:b4:3c:8d:4b:e4:1b:f0:a2:12:
                    c4:8e:e5:dd:44:e6:cb:13:85:9f:88:57:a5:8e:55:
                    8c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8D:89:D5:F9:2D:14:EE:29:FC:50:DA:DE:0D:2E:41:C5:C8:CB:F0
            X509v3 Authority Key Identifier:
                keyid:EB:8C:C3:0C:62:70:FF:44:79:D0:FD:E7:CA:28:E3:0A:97:4D:12:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/EB8CC30C6270FF4479D0FDE7CA28E30A974D124F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB8CC30C6270FF4479D0FDE7CA28E30A974D124F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/323830343a66633a3a2f33322d3434203d3e203238313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:80:33:79:bb:84:70:27:f4:37:4c:84:44:e7:a1:ef:2c:ba:
         77:8f:3a:a6:55:90:a9:85:93:6b:ca:f7:f6:fe:84:3f:b0:05:
         32:af:e8:80:eb:09:42:43:e6:65:93:14:57:bd:9f:eb:6e:c5:
         05:ea:6b:e6:28:aa:7e:90:39:37:e6:d8:a9:93:33:67:21:c3:
         c3:47:14:c1:fd:d7:ff:7a:89:f2:af:ef:c6:b0:20:39:d2:99:
         9e:58:6f:fa:98:ff:77:a3:2e:ea:3c:c7:b4:ac:28:a5:48:ed:
         8b:ac:e1:c8:50:1d:de:b1:a2:b9:ba:1a:b4:4f:72:ea:e3:f8:
         46:87:d7:08:24:12:00:71:7c:02:ae:89:38:43:c0:c3:de:92:
         08:87:43:8b:5d:5d:5c:f3:58:06:af:26:89:04:32:f2:35:f1:
         b3:83:25:7d:de:c2:9b:c7:75:4f:1d:1b:ae:35:ee:3b:34:e7:
         63:c7:fb:9c:f9:55:ce:53:a3:dc:a1:b7:16:8f:a6:dd:c4:c0:
         88:43:cf:35:bb:42:1f:a9:21:20:53:60:db:e0:da:f6:d6:95:
         ff:34:2c:3d:a7:ca:cf:48:20:1c:90:98:d1:15:fe:e2:a0:c9:
         60:aa:e8:e0:03:ab:bf:6f:04:48:4b:81:57:4a:3d:a3:5d:0a:
         c3:b8:41:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org