Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a653030303a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a653030303a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          Kw2HftRQ3JtCaVxPZXT0D9e93CCZkPmhReKGFdiYD1Q=
Subject key identifier:   DC:20:3B:B5:43:9C:9A:33:B3:8C:66:71:D7:B3:E6:E5:E0:62:26:86
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       1C0946D556FD8BCFE8612D998127D66A65B7C26B
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a653030303a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:03 +0000
ROA not before:           Thu 03 Mar 2022 18:47:03 +0000
ROA not after:            Thu 02 Mar 2023 18:52:03 +0000
asID:                     262393
IP address blocks:        2804:8c8:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:09:46:d5:56:fd:8b:cf:e8:61:2d:99:81:27:d6:6a:65:b7:c2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:03 2022 GMT
            Not After : Mar  2 18:52:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:06:43:1b:ee:d3:1e:c3:c1:86:43:33:fe:
                    a2:85:a2:77:b0:f5:94:52:53:fd:57:dc:3a:88:2d:
                    8f:bd:e6:5e:54:c8:34:25:dd:8b:66:e1:da:14:ba:
                    91:16:8e:c6:22:7a:99:8a:d4:6a:ab:33:6b:50:fc:
                    6f:fd:94:66:05:a7:87:e9:b2:7b:26:d2:7a:b7:f7:
                    ae:f7:3b:81:ca:ba:6b:fa:c6:d1:f9:f9:79:0a:47:
                    8b:0e:66:81:50:48:78:f1:6a:b5:77:de:9f:7d:68:
                    70:37:ef:62:f2:d5:75:ae:d9:e7:15:ea:34:10:d1:
                    d4:ee:34:f0:4f:9f:cd:5e:c4:66:65:8a:9d:9b:4d:
                    54:b0:5a:b0:c0:5d:66:42:c5:ec:e8:e5:77:a8:88:
                    e8:3e:b2:7c:b3:75:8a:19:42:9f:20:cc:a3:7d:56:
                    bf:48:f1:09:46:a0:e0:77:26:80:96:0f:fd:c4:61:
                    c1:c3:c3:22:6c:29:9e:2b:41:6e:8b:d4:56:1d:a7:
                    08:e6:7a:21:8b:e1:7c:6e:98:73:56:66:6c:47:c8:
                    2d:79:2d:e1:14:32:2b:87:d3:5a:3e:2f:6c:9f:fd:
                    a9:6f:80:b3:eb:c2:fa:76:64:ed:d1:8f:b4:e7:ab:
                    c5:5e:02:25:b0:82:88:f5:c9:86:e0:b7:9f:46:5d:
                    c3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:20:3B:B5:43:9C:9A:33:B3:8C:66:71:D7:B3:E6:E5:E0:62:26:86
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a653030303a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7c:71:62:61:af:67:8f:72:a2:6e:89:ac:34:2a:8f:ab:61:6e:
         48:34:43:2c:0f:cd:e5:51:08:4d:38:a7:57:59:3c:3b:1d:40:
         d8:88:52:81:b8:fb:71:63:eb:f4:f6:e0:01:e3:32:2e:3a:5c:
         b5:fa:20:68:b9:3b:38:9e:49:43:70:72:2b:a8:3f:cf:98:83:
         7b:40:fd:9f:d5:15:2d:89:08:46:fd:48:9d:7d:53:c6:6c:f4:
         d1:80:c0:60:ba:99:78:f5:a3:2c:f0:48:a0:fe:f1:39:7d:63:
         5b:d9:0b:51:70:7b:75:e4:7f:bb:2e:88:f0:75:b3:90:51:5c:
         85:62:ea:65:f6:ab:f3:18:57:eb:52:3e:56:25:63:11:5c:f7:
         7c:04:00:82:88:94:79:6e:b5:ef:25:7e:53:07:44:78:04:2c:
         75:3c:c6:0d:d6:ba:99:5a:2a:88:ac:db:b9:aa:80:41:0d:24:
         e7:4c:d4:d3:14:eb:40:1b:5d:51:7b:8b:a5:97:0e:99:14:56:
         c4:f9:8b:f7:1a:4c:bc:c1:79:28:f4:77:ff:11:89:8a:b3:6c:
         77:1d:71:45:a6:da:64:72:96:c9:9a:27:8e:9e:8e:24:2d:de:
         d1:ed:f2:50:d2:b7:eb:09:a6:65:be:78:f1:bc:0a:bd:30:6a:
         fe:65:b8:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org