Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          2h41nbv1ZrIIvvgF1vauoF8bjlW27Klfd2rGuZcMuYE=
Subject key identifier:   38:0F:8D:3A:46:72:8A:72:63:D5:0F:88:83:2E:5C:FF:3E:B4:FA:D0
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       69BFC629CC9A81F5F865C8FEF644A709A81CEA86
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:03 +0000
ROA not before:           Thu 03 Mar 2022 18:47:03 +0000
ROA not after:            Thu 02 Mar 2023 18:52:03 +0000
asID:                     262393
IP address blocks:        2804:8c8:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:bf:c6:29:cc:9a:81:f5:f8:65:c8:fe:f6:44:a7:09:a8:1c:ea:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:03 2022 GMT
            Not After : Mar  2 18:52:03 2023 GMT
        Subject: CN=3082010A0282010100CB3B6B24E70BE9252FB9C1BAEE197CFE8A3EF36EACBE7C23DFB6CA8C9DBF941051B152CCCCCF6F055511AF96DA540226CEE89BDD0765EB6386D1827EC22B1BEEED703405C516A3EFBC82568AB8BFABE06A451E413A0A058A532AF75CB18F7FB459A4D2B03FBFB27367D3AD2CED7936FFA80766303AEAFF7BEB4E63F67BE998DE01CC5631EDEC9478D1ACF49CDDE1D106723349F22E9491C0483CD3A8C7F6F2BA1CFB161C115B96A08DF2B70723DF43D2E77072F88A2831046CF797A78E06355AC733CCF4B1DA5A1CD9EF8142CE8FF8E1155A43B33B9F648892BFF743716D4EDC6EA183A64466BDEB26BA57029B819C4FF8DE86901BB30E31A955ED8C26EB226D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3b:6b:24:e7:0b:e9:25:2f:b9:c1:ba:ee:19:
                    7c:fe:8a:3e:f3:6e:ac:be:7c:23:df:b6:ca:8c:9d:
                    bf:94:10:51:b1:52:cc:cc:cf:6f:05:55:11:af:96:
                    da:54:02:26:ce:e8:9b:dd:07:65:eb:63:86:d1:82:
                    7e:c2:2b:1b:ee:ed:70:34:05:c5:16:a3:ef:bc:82:
                    56:8a:b8:bf:ab:e0:6a:45:1e:41:3a:0a:05:8a:53:
                    2a:f7:5c:b1:8f:7f:b4:59:a4:d2:b0:3f:bf:b2:73:
                    67:d3:ad:2c:ed:79:36:ff:a8:07:66:30:3a:ea:ff:
                    7b:eb:4e:63:f6:7b:e9:98:de:01:cc:56:31:ed:ec:
                    94:78:d1:ac:f4:9c:dd:e1:d1:06:72:33:49:f2:2e:
                    94:91:c0:48:3c:d3:a8:c7:f6:f2:ba:1c:fb:16:1c:
                    11:5b:96:a0:8d:f2:b7:07:23:df:43:d2:e7:70:72:
                    f8:8a:28:31:04:6c:f7:97:a7:8e:06:35:5a:c7:33:
                    cc:f4:b1:da:5a:1c:d9:ef:81:42:ce:8f:f8:e1:15:
                    5a:43:b3:3b:9f:64:88:92:bf:f7:43:71:6d:4e:dc:
                    6e:a1:83:a6:44:66:bd:eb:26:ba:57:02:9b:81:9c:
                    4f:f8:de:86:90:1b:b3:0e:31:a9:55:ed:8c:26:eb:
                    22:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0F:8D:3A:46:72:8A:72:63:D5:0F:88:83:2E:5C:FF:3E:B4:FA:D0
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a5:f8:ea:49:2a:b7:52:9f:ed:e2:c2:e7:2d:32:be:32:1b:1d:
         3f:2d:d4:cc:9d:e3:d9:cb:e0:05:d1:c1:91:25:7d:a6:25:0b:
         16:54:16:5f:a2:b6:08:28:2f:57:ab:5c:d1:35:4d:b5:45:a7:
         9a:d2:57:63:9e:15:e1:17:7d:2a:4e:a2:b4:21:3a:84:b1:75:
         77:43:bf:3d:90:96:ef:8f:6e:d5:2a:37:db:b1:4c:41:22:6e:
         39:d6:e9:07:6f:62:01:69:d9:7a:7f:04:c8:70:4f:a8:6c:29:
         53:8a:a5:ae:40:d3:16:67:d6:d3:79:58:14:39:4c:24:6c:19:
         d6:04:00:b7:c3:62:30:8b:d7:09:42:73:33:7c:7d:8c:e4:37:
         eb:d0:97:23:28:3d:78:21:fc:2c:9a:95:f5:32:a3:7a:b1:57:
         ad:0c:18:58:e5:2c:a2:c1:37:45:46:c6:a0:7b:45:e9:ad:af:
         0d:bc:35:c3:60:be:5d:f5:38:ee:c1:4b:03:4b:af:09:71:d7:
         f3:87:da:cb:22:0e:06:55:f8:5b:aa:b9:f6:f4:ef:54:2c:0b:
         f9:28:b6:c5:f3:a0:f2:e1:7c:95:f7:53:5f:ac:66:03:c9:67:
         bf:52:bd:7b:a4:ef:d6:d9:e2:dd:19:40:16:70:4c:00:33:ca:
         ab:10:8f:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org