Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          MnVFrMFojUmG9HjyJPbgbxyDJjBjymChTWxdZddipCo=
Subject key identifier:   7D:E6:93:17:8F:AF:0D:76:64:34:84:78:EE:CF:8F:67:C8:50:57:52
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       7B7182FE33A02031A1FB2C3F8555C68B9225B41B
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:01 +0000
ROA not before:           Thu 03 Mar 2022 18:47:01 +0000
ROA not after:            Thu 02 Mar 2023 18:52:01 +0000
asID:                     262393
IP address blocks:        2804:8c8::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:71:82:fe:33:a0:20:31:a1:fb:2c:3f:85:55:c6:8b:92:25:b4:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:01 2022 GMT
            Not After : Mar  2 18:52:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6c:f7:bc:50:da:61:cf:72:31:0e:32:8b:41:
                    95:5e:06:2d:03:2c:4a:c6:a3:b6:dc:ee:4d:70:94:
                    ad:90:9c:8a:e8:e4:77:db:f3:2d:4b:61:ef:b9:23:
                    9b:3f:46:00:5c:4b:2d:47:52:f0:9c:86:bf:87:3c:
                    97:e5:71:c6:10:c8:6c:83:58:38:d7:22:b8:1d:2e:
                    2c:85:73:c7:d6:fc:7d:8e:c6:72:d3:7f:16:58:94:
                    c7:17:b8:5d:ef:7d:7f:a7:0a:62:27:11:da:76:e9:
                    80:80:5f:e8:6d:a4:a8:74:b4:a6:7e:f0:fd:cb:19:
                    6d:99:57:d8:5b:6f:eb:48:bb:0d:1b:a9:dc:ec:81:
                    85:ab:e1:c1:8d:59:90:45:43:34:b5:5a:e9:14:ca:
                    dc:6b:32:92:9c:12:f0:18:72:53:8c:b2:e3:c1:16:
                    ec:45:6e:94:04:4e:6b:36:4f:e8:b2:23:5d:ad:90:
                    22:19:22:5e:e1:5c:9a:3f:01:5f:3b:e8:7b:c4:41:
                    c2:7b:0b:d1:f3:35:eb:25:a5:98:5d:42:4d:8d:4b:
                    7c:80:54:0a:be:27:6b:0e:5a:53:67:bd:11:9b:64:
                    62:24:a3:2b:94:d0:be:11:97:e2:a7:76:a3:e0:6d:
                    67:4c:b4:f9:5b:06:9c:be:d8:47:9f:b7:ad:b6:cc:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E6:93:17:8F:AF:0D:76:64:34:84:78:EE:CF:8F:67:C8:50:57:52
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8::/35

    Signature Algorithm: sha256WithRSAEncryption
         4f:d8:ab:91:7c:97:c7:86:b2:28:9b:3e:48:ee:d4:ee:82:99:
         80:7e:f0:0d:c9:a7:8a:24:30:ff:40:7b:e8:89:cd:e6:b4:79:
         1c:aa:a5:9c:32:5f:7b:c9:c3:f8:bb:07:7f:1e:67:42:ea:2c:
         4e:d7:8d:a1:94:f2:43:dc:42:bb:44:e0:ff:08:06:7c:60:89:
         d7:f7:01:1d:5b:02:85:4d:ad:7e:ea:1a:69:80:04:ce:24:ab:
         c9:ba:a4:b0:49:a3:8b:26:92:f6:de:89:8e:64:ef:c1:ad:cf:
         0c:1b:cd:09:55:f9:94:e2:69:cf:27:80:66:4a:b7:8b:6c:86:
         6a:cb:b5:cd:b2:cd:c3:f8:d4:f5:eb:ca:57:ae:c9:86:5a:42:
         53:fc:16:53:fe:b6:0d:b0:9b:7c:26:9b:67:b8:f8:3c:7b:29:
         c6:ca:18:7f:12:0f:ba:b1:0f:83:20:13:f3:67:16:de:fb:de:
         6c:9b:ad:d6:49:c6:84:a1:f5:95:61:b7:87:e9:3d:fb:75:7a:
         64:64:51:7f:18:7e:fc:2a:41:5f:73:ff:a9:4f:a9:ca:76:16:
         d6:ce:e4:bd:4c:ab:0a:ac:51:c2:25:76:9d:7a:93:61:9e:e8:
         1a:68:57:38:46:87:81:0b:58:1e:ef:ec:b5:d8:ff:da:78:6b:
         15:6a:05:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org