Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/0/323830343a6463633a3a2f33322d3438203d3e203238363338.roa
File:                     323830343a6463633a3a2f33322d3438203d3e203238363338.roa (raw, json)
Hash identifier:          A8fouIJWo9FOAIC9RI5iKGo0nKu1LdFPdD1skM3nenI=
Subject key identifier:   22:05:CA:81:74:36:DE:B9:95:26:C6:22:B8:66:CD:57:02:69:4F:D0
Certificate issuer:       /CN=EF8A59B19C1985F636BF3722F71EFE157CB13D39
Certificate serial:       0EF82C6C7F2D371BEB9D03AA4F9EAB8ECDDA3BCD
Authority key identifier: EF:8A:59:B1:9C:19:85:F6:36:BF:37:22:F7:1E:FE:15:7C:B1:3D:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF8A59B19C1985F636BF3722F71EFE157CB13D39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/0/323830343a6463633a3a2f33322d3438203d3e203238363338.roa
Signing time:             Thu 19 Oct 2023 09:12:16 +0000
ROA not before:           Thu 19 Oct 2023 09:07:16 +0000
ROA not after:            Thu 17 Oct 2024 09:12:16 +0000
asID:                     28638
IP address blocks:        2804:dcc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f8:2c:6c:7f:2d:37:1b:eb:9d:03:aa:4f:9e:ab:8e:cd:da:3b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF8A59B19C1985F636BF3722F71EFE157CB13D39
        Validity
            Not Before: Oct 19 09:07:16 2023 GMT
            Not After : Oct 17 09:12:16 2024 GMT
        Subject: CN=2205CA817436DEB99526C622B866CD5702694FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f1:72:ac:a0:50:51:09:c4:48:b6:38:fb:6d:
                    3a:2d:2a:6c:71:30:01:4e:75:5c:8d:69:c9:82:68:
                    17:94:e1:eb:e5:aa:b7:cf:b0:b6:02:8d:74:3c:b1:
                    de:53:ba:4a:0c:76:0a:32:04:c0:5d:79:80:2e:9c:
                    27:7e:a1:80:40:14:13:a3:81:7c:d5:1e:60:ad:e9:
                    d2:88:29:b4:e5:6d:14:34:9e:e0:23:15:d4:0f:a1:
                    e0:2f:60:d1:bf:f0:6f:b9:30:f2:19:34:52:9a:58:
                    ed:1d:19:1a:b7:77:d0:7e:17:54:1f:8f:04:3d:a0:
                    81:7c:21:00:3b:df:cf:3d:d4:ca:10:6f:ea:67:97:
                    98:2c:64:22:18:fd:88:73:78:3e:f8:ba:fd:ee:83:
                    a3:c0:5d:c3:46:95:ee:bc:83:e3:e8:0e:45:df:b4:
                    6a:d6:10:79:6e:de:28:cd:ed:2f:59:95:8a:52:e4:
                    f3:84:ef:38:61:ab:a7:ea:b2:45:c6:ab:80:a4:3b:
                    f5:9f:0e:11:e0:3d:af:c5:ab:b9:8d:0f:9e:82:3e:
                    80:cc:06:ad:bc:38:c8:88:d6:b3:57:21:58:85:07:
                    ff:bf:63:3c:c9:c6:4b:3b:39:b0:60:5e:99:a6:87:
                    67:42:ab:d5:ae:56:5d:15:b2:14:b9:06:82:bc:c8:
                    19:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:05:CA:81:74:36:DE:B9:95:26:C6:22:B8:66:CD:57:02:69:4F:D0
            X509v3 Authority Key Identifier:
                keyid:EF:8A:59:B1:9C:19:85:F6:36:BF:37:22:F7:1E:FE:15:7C:B1:3D:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/0/EF8A59B19C1985F636BF3722F71EFE157CB13D39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF8A59B19C1985F636BF3722F71EFE157CB13D39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/0/323830343a6463633a3a2f33322d3438203d3e203238363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:85:76:7b:e9:d3:a2:4c:24:c3:ff:a4:cb:f0:54:2f:74:ab:
         7e:aa:9e:23:c8:f1:21:e4:a9:28:c6:52:6d:69:09:c0:df:14:
         50:2c:db:1b:ae:cb:c6:d7:c9:b4:ad:ff:e9:28:75:30:67:b1:
         58:0f:a1:b4:7f:6d:4d:d2:6f:b4:05:00:0e:a7:b6:8d:ad:9c:
         9b:fd:ca:8b:2f:5e:b1:20:df:17:8b:2e:f4:fd:ee:b6:8a:c9:
         34:63:39:c2:d4:ed:ee:e2:c4:0a:f8:35:5d:3a:3b:89:85:ab:
         d9:0f:5d:e9:01:2c:0c:64:b6:86:00:ad:32:e2:58:49:b9:41:
         e1:1b:fc:a9:75:73:50:05:f3:ce:06:bb:f5:32:2d:25:35:05:
         db:70:3d:54:37:30:51:e2:ff:57:ca:8e:ad:c1:7c:73:69:27:
         60:64:a5:a4:c0:9d:52:72:b5:8f:0d:fd:5e:b1:20:18:5f:ae:
         91:89:15:75:aa:e1:da:3f:23:fe:24:e8:f3:b6:92:32:da:a8:
         17:f1:aa:2b:a6:96:b7:5f:8b:0f:4f:d3:77:47:df:32:0e:03:
         3b:47:49:56:dc:8d:be:b4:e5:6c:c4:37:c6:40:74:8d:a1:55:
         72:10:00:c7:ea:1a:79:5b:86:ee:ae:15:a3:12:54:05:e5:b8:
         79:34:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org