Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/323830343a6437383a3a2f33322d3335203d3e20323632343434.roa
File:                     323830343a6437383a3a2f33322d3335203d3e20323632343434.roa (raw, json)
Hash identifier:          Uh9dFZ7rgZiUrWOyqPR2Vp/40yTn3EdKfxIO47F8aW0=
Subject key identifier:   9A:1B:66:A4:AA:C9:A2:49:44:63:A7:D5:EF:C5:AD:0F:E1:C6:21:AA
Certificate issuer:       /CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
Certificate serial:       1B50759866E1E35F1B6FBF795456B9C36474EFDC
Authority key identifier: E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/323830343a6437383a3a2f33322d3335203d3e20323632343434.roa
Signing time:             Mon 14 Aug 2023 14:04:00 +0000
ROA not before:           Mon 14 Aug 2023 13:59:00 +0000
ROA not after:            Mon 12 Aug 2024 14:04:00 +0000
asID:                     262444
IP address blocks:        2804:d78::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:50:75:98:66:e1:e3:5f:1b:6f:bf:79:54:56:b9:c3:64:74:ef:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
        Validity
            Not Before: Aug 14 13:59:00 2023 GMT
            Not After : Aug 12 14:04:00 2024 GMT
        Subject: CN=9A1B66A4AAC9A2494463A7D5EFC5AD0FE1C621AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:d1:5d:f3:bb:a1:19:e5:5d:2b:a1:0b:24:
                    aa:c9:30:b6:70:24:9c:53:99:ef:8c:ae:fd:2b:88:
                    20:e0:7c:4c:6e:a8:a1:a0:c3:4f:c3:c6:dc:60:99:
                    fc:fd:90:6c:d4:6b:67:da:6a:71:ad:1a:b2:74:18:
                    9f:cb:b3:47:1e:bc:d3:b7:59:2a:b4:c8:5e:c5:bd:
                    f9:66:94:40:d6:32:8f:a1:49:7b:20:02:b0:85:61:
                    9e:f8:64:9d:6f:7e:94:9d:84:c5:7d:84:09:11:a7:
                    cf:40:eb:39:ac:e3:37:19:90:31:25:5a:f5:32:8f:
                    9a:92:2d:a5:41:25:bb:c6:a0:49:68:ff:15:23:4a:
                    5e:cb:78:2d:92:f0:c5:6e:fa:23:1e:32:a2:9b:ac:
                    89:6f:73:9e:14:61:4b:5e:eb:8e:b3:c7:fb:14:bf:
                    19:a3:a0:17:5a:29:70:54:5c:4a:c2:56:e7:f6:e0:
                    2e:61:bb:b4:75:a7:ad:2a:2c:64:92:7d:7c:38:64:
                    b7:67:c0:e5:c1:bb:a6:67:6b:aa:08:41:bd:b1:f1:
                    10:59:46:b4:b6:48:e4:d7:50:9e:4f:9f:45:fe:12:
                    39:a6:b3:7b:44:f9:69:54:78:e5:30:4e:c3:c8:a5:
                    00:29:8f:42:da:cc:29:95:07:a9:55:60:ee:2c:2b:
                    e4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1B:66:A4:AA:C9:A2:49:44:63:A7:D5:EF:C5:AD:0F:E1:C6:21:AA
            X509v3 Authority Key Identifier:
                keyid:E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/323830343a6437383a3a2f33322d3335203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d78::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:a7:04:7e:3d:c7:16:84:53:8b:69:d4:8d:7c:4b:88:e1:9e:
         ab:66:51:b1:50:09:77:3e:21:55:05:13:ba:b7:79:ea:5c:c9:
         ce:13:99:7f:7c:63:0a:18:6d:93:4c:07:9c:1c:ef:d2:12:33:
         93:46:b8:ff:d3:8b:4d:c6:5d:b8:c0:a6:55:73:f5:ce:4b:27:
         89:d1:f4:47:d1:db:25:69:dd:55:a5:74:08:ba:5d:06:e9:61:
         de:17:37:6e:0c:ce:5a:1c:76:62:82:a1:20:6b:9a:43:4d:d2:
         31:8c:2d:b8:44:9b:43:36:60:ed:db:da:75:1e:a5:3b:25:15:
         6a:8e:de:ce:58:17:8a:53:05:71:e4:aa:1d:85:8d:ad:9b:47:
         b0:de:4f:91:ad:7e:21:30:00:1b:7f:47:e9:cc:27:d1:fb:f0:
         9d:2a:98:3e:b4:ac:51:c5:3f:c3:82:1a:1a:32:a3:6e:46:e8:
         47:13:f5:30:e1:d1:d5:a0:a3:cb:2f:20:d4:a7:77:0f:06:76:
         79:2a:8a:cb:17:7b:a3:f5:22:3b:09:fa:2c:a8:2e:b7:63:3f:
         55:7c:0c:e5:97:32:79:f8:f4:79:66:a9:90:8b:d9:e4:a0:f3:
         c7:6e:f9:d6:e7:5f:3c:8f:93:fe:7f:5c:81:6f:f4:46:70:e6:
         89:78:02:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org