Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/0/323830343a313561343a3a2f33322d3434203d3e20323633343030.roa
File:                     323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (raw, json)
Hash identifier:          R2KWqpK6w63VvGvNl7dhMaevYGyTRaIVYy4+xsYSoVA=
Subject key identifier:   0B:7B:7E:A7:3B:91:AC:17:C5:F8:08:66:35:61:06:81:90:C7:ED:C2
Certificate issuer:       /CN=66BB468AD419CCD0B6DF4265467F9C63C74D974E
Certificate serial:       406F35FF17B9CF61985FE5A1D6CD105098D8DBD4
Authority key identifier: 66:BB:46:8A:D4:19:CC:D0:B6:DF:42:65:46:7F:9C:63:C7:4D:97:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66BB468AD419CCD0B6DF4265467F9C63C74D974E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/0/323830343a313561343a3a2f33322d3434203d3e20323633343030.roa
Signing time:             Mon 03 Jul 2023 17:35:24 +0000
ROA not before:           Mon 03 Jul 2023 17:30:24 +0000
ROA not after:            Mon 01 Jul 2024 17:35:24 +0000
asID:                     263400
IP address blocks:        2804:15a4::/32 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6f:35:ff:17:b9:cf:61:98:5f:e5:a1:d6:cd:10:50:98:d8:db:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BB468AD419CCD0B6DF4265467F9C63C74D974E
        Validity
            Not Before: Jul  3 17:30:24 2023 GMT
            Not After : Jul  1 17:35:24 2024 GMT
        Subject: CN=0B7B7EA73B91AC17C5F808663561068190C7EDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:89:a1:64:4a:ef:a4:e0:ce:b5:bc:16:51:
                    d1:c7:35:2c:b9:f3:4d:26:34:76:a1:e0:28:a8:e9:
                    2b:70:66:dd:59:40:70:92:77:0d:f1:eb:c9:b6:ac:
                    1e:6a:55:fb:d5:8c:d1:71:59:ff:dd:8a:cf:a6:36:
                    40:9b:a3:6d:69:51:a2:19:0c:3f:2a:f8:7d:18:be:
                    67:72:f2:c0:47:e5:84:01:2e:26:63:0e:ea:10:61:
                    bd:ff:f1:be:2b:13:bb:03:28:fa:d1:36:9b:b3:e9:
                    85:64:c6:72:99:36:88:e4:00:00:2d:51:80:92:37:
                    37:f2:ab:59:d0:bf:d8:d7:b5:20:80:3e:16:ad:f6:
                    e2:64:9b:c3:bd:6d:28:b1:ee:17:fa:30:4d:16:05:
                    d2:ac:67:cd:f4:1c:e2:64:c8:18:9f:a5:e2:ac:d2:
                    f5:f3:84:5e:3a:33:cd:e9:17:fb:f3:31:7d:d5:11:
                    bb:d7:85:0b:5f:02:37:1f:0a:f8:8f:01:08:8f:09:
                    bb:7f:3e:f9:f3:9d:82:54:07:14:06:04:d7:9d:86:
                    ef:d2:4b:83:73:06:80:59:b5:ef:3b:a3:98:03:67:
                    d2:ae:f3:78:ce:c7:19:20:28:bb:26:f3:a3:02:5e:
                    6d:f5:3c:3c:0e:21:ab:d0:4e:a1:ab:26:71:a0:19:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7B:7E:A7:3B:91:AC:17:C5:F8:08:66:35:61:06:81:90:C7:ED:C2
            X509v3 Authority Key Identifier:
                keyid:66:BB:46:8A:D4:19:CC:D0:B6:DF:42:65:46:7F:9C:63:C7:4D:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/0/66BB468AD419CCD0B6DF4265467F9C63C74D974E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66BB468AD419CCD0B6DF4265467F9C63C74D974E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/0/323830343a313561343a3a2f33322d3434203d3e20323633343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:25:1e:f9:e1:34:ab:d1:80:38:6d:5d:46:ca:e3:8e:e1:da:
         52:bb:bb:2f:e9:b6:a1:2a:b3:03:81:07:5a:2b:89:a3:fd:0c:
         7f:f8:f7:b9:82:c9:c7:ba:31:cc:27:c1:90:e1:c6:c2:df:75:
         35:7d:53:a6:33:dc:f2:89:b3:f5:b9:d8:87:99:02:34:43:6b:
         29:3c:46:6f:dd:2d:47:cf:ab:d9:58:3b:1b:b9:8a:ef:10:d7:
         a8:c0:62:b1:da:b8:8a:1b:cc:bd:86:0f:5d:44:46:41:44:38:
         27:64:2f:12:80:1a:0d:3e:8d:59:72:0c:ed:55:eb:df:9e:5f:
         8d:b9:bf:21:e4:d3:11:b9:fd:36:55:93:c5:17:9e:05:23:3a:
         5d:22:91:d9:1c:23:f0:e0:e2:da:b9:a0:3d:24:64:f4:4a:c2:
         65:62:32:d7:ca:95:1f:35:57:a9:0f:d0:6d:06:8b:47:20:41:
         e6:f1:42:fb:4d:d2:f1:f8:3e:32:82:bb:3b:c8:29:f5:d3:e1:
         07:12:b7:b9:61:1a:91:a6:f6:37:ee:94:88:d6:ad:fe:94:aa:
         65:dd:d5:bf:41:ea:fb:10:63:d0:1e:d9:ca:d8:1e:f1:00:2f:
         d4:3f:4c:0e:8d:ef:a7:14:b4:6d:96:a4:41:cb:7a:44:8c:64:
         a1:3f:9d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org