Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a343030303a3a2f33342d3334203d3e203238363130.roa
File:                     323830343a6463303a343030303a3a2f33342d3334203d3e203238363130.roa (raw, json)
Hash identifier:          YBZgwuhV/Rb+dyKGkpWhiywCWUC2WjCtHwKC9SjyrrQ=
Subject key identifier:   0C:85:04:49:C5:16:15:09:C0:C2:E0:66:3C:B2:C5:15:D3:6A:D3:FA
Certificate issuer:       /CN=E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A
Certificate serial:       51D5D5BDCFEF92F94BCC2B7EC438267C9C21B2DD
Authority key identifier: E3:0F:23:C8:79:2C:39:E2:DA:52:F7:E0:AD:9F:88:64:F1:3B:5E:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a343030303a3a2f33342d3334203d3e203238363130.roa
Signing time:             Wed 27 Dec 2023 17:35:17 +0000
ROA not before:           Wed 27 Dec 2023 17:30:17 +0000
ROA not after:            Wed 25 Dec 2024 17:35:17 +0000
asID:                     28610
IP address blocks:        2804:dc0:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d5:d5:bd:cf:ef:92:f9:4b:cc:2b:7e:c4:38:26:7c:9c:21:b2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A
        Validity
            Not Before: Dec 27 17:30:17 2023 GMT
            Not After : Dec 25 17:35:17 2024 GMT
        Subject: CN=0C850449C5161509C0C2E0663CB2C515D36AD3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:8c:af:22:d4:48:ff:f8:ee:3b:ea:7a:84:
                    12:7f:a6:bc:8b:4c:bd:36:3a:1c:0e:5e:77:10:1e:
                    a0:e6:2f:84:68:84:16:0d:44:59:e7:ff:38:2b:86:
                    d1:b9:01:67:f1:1a:76:96:21:ec:ee:b9:00:e4:02:
                    4f:85:8a:90:14:20:6d:36:84:96:82:4c:a0:f2:ba:
                    f9:d0:fe:97:e9:dc:4d:be:b2:82:cf:96:15:05:7a:
                    1c:51:6a:d0:3a:84:20:75:b2:77:e3:2c:b3:1a:ee:
                    bd:f0:87:88:50:b5:f8:d5:df:9e:08:e4:90:b4:65:
                    b2:78:99:be:35:ab:7f:23:54:98:13:59:ad:30:00:
                    0f:f1:ed:2c:11:c7:c7:fe:6d:8c:a8:95:55:75:3b:
                    d8:59:f6:83:a7:9a:c4:18:65:35:26:a0:ef:18:aa:
                    5d:41:fc:bd:01:f1:a6:89:13:69:fa:4e:3a:4f:18:
                    b7:60:43:54:b8:0c:9b:2d:0d:7c:8c:96:84:de:94:
                    29:f2:38:e5:97:2e:a9:40:92:87:c1:92:03:70:48:
                    fc:ed:8a:50:d2:2a:a7:02:9b:b9:25:00:5c:13:27:
                    cc:c5:09:7d:2c:52:08:36:47:ff:fc:bc:cf:d7:61:
                    22:0d:0e:e6:c9:c4:31:e5:ef:ed:47:e1:b7:cc:4b:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:85:04:49:C5:16:15:09:C0:C2:E0:66:3C:B2:C5:15:D3:6A:D3:FA
            X509v3 Authority Key Identifier:
                keyid:E3:0F:23:C8:79:2C:39:E2:DA:52:F7:E0:AD:9F:88:64:F1:3B:5E:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a343030303a3a2f33342d3334203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dc0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a1:30:c4:4c:9d:68:70:ea:f7:bb:a9:2b:bf:3e:04:bc:f6:41:
         96:ff:81:c2:32:a2:e6:59:62:f7:ef:18:bc:16:fb:28:64:15:
         ff:1d:14:6f:c1:57:1b:55:53:05:6f:26:a7:7e:ca:30:44:42:
         0f:33:1c:84:21:b4:42:db:03:9f:f7:f3:d5:ff:34:39:f1:dd:
         ca:72:db:93:82:12:9a:f9:59:1e:65:ce:e3:bb:05:b8:04:1e:
         04:80:e6:80:33:32:30:51:be:38:dc:b2:94:3d:1b:95:de:8a:
         da:b4:1a:3d:59:b2:7b:53:3e:d5:aa:4c:b4:c8:6e:9a:73:d9:
         5e:6e:6c:9d:0a:5b:de:01:7a:9c:15:d2:8e:9f:8d:68:55:a5:
         e3:58:f1:0d:b9:4e:93:f0:dd:9e:32:68:2e:60:49:77:8b:28:
         2d:5a:a7:9f:a1:c3:d7:88:37:6a:3c:ba:27:aa:30:6b:b2:b0:
         15:82:9a:6c:4a:04:b0:29:1d:db:db:7d:ba:1e:70:d3:66:c0:
         f3:0d:94:53:51:1a:8d:6e:3a:05:6b:bf:18:29:70:1b:9d:5d:
         3d:74:0e:de:03:c0:73:34:b3:32:be:2c:dd:ff:80:4a:80:1c:
         1d:78:dd:f2:e8:96:01:8c:0a:03:bd:dd:4a:24:8f:17:58:81:
         d8:86:a7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org