Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a383030303a3a2f33332d3333203d3e20323730363032.roa
File:                     323830343a366538343a383030303a3a2f33332d3333203d3e20323730363032.roa (raw, json)
Hash identifier:          Gck+wQRORqZNJcWEvq+f5jqnFxpnmlXy74P5RYk/WFQ=
Subject key identifier:   2A:94:C9:82:FB:18:BA:2A:4E:16:6A:02:74:12:E5:C6:94:B3:F3:17
Certificate issuer:       /CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
Certificate serial:       3CCED3D2F1EE710297617307F9CD878E355CBD62
Authority key identifier: EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a383030303a3a2f33332d3333203d3e20323730363032.roa
Signing time:             Tue 21 May 2024 14:32:38 +0000
ROA not before:           Tue 21 May 2024 14:27:38 +0000
ROA not after:            Tue 20 May 2025 14:32:38 +0000
asID:                     270602
IP address blocks:        2804:6e84:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ce:d3:d2:f1:ee:71:02:97:61:73:07:f9:cd:87:8e:35:5c:bd:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
        Validity
            Not Before: May 21 14:27:38 2024 GMT
            Not After : May 20 14:32:38 2025 GMT
        Subject: CN=2A94C982FB18BA2A4E166A027412E5C694B3F317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:72:c6:1d:02:78:82:21:49:f7:03:fe:02:
                    4d:e6:2b:48:e2:b1:11:ff:5e:b2:d0:32:92:51:e8:
                    f5:be:53:3d:4b:94:b1:0e:00:18:bd:92:da:5b:6a:
                    f5:b8:75:af:68:f6:bb:b6:a1:4a:ac:f8:c2:7e:d1:
                    18:2f:06:15:2a:cb:db:68:f1:62:73:a7:0e:e9:1e:
                    db:ad:b5:9f:96:63:02:74:a5:7d:0e:85:f2:7c:fc:
                    55:e7:58:bc:44:43:b9:8a:d8:6e:5a:f4:0b:13:fc:
                    44:d3:f5:0d:8b:f6:22:f0:ff:97:1c:b2:19:5a:a3:
                    59:4e:f2:79:3e:e2:11:a6:62:e7:dd:0a:fd:f8:20:
                    85:f4:cb:5f:2b:33:9c:68:97:a8:22:0e:29:be:a1:
                    78:fc:37:ae:60:b0:19:c5:37:ec:d5:c8:86:de:ae:
                    97:ed:f4:77:55:1c:58:b8:7e:bf:eb:96:a3:44:59:
                    0f:94:8d:c5:8b:4c:07:63:8a:6b:96:ce:a7:b2:46:
                    17:b1:88:eb:d5:42:58:04:97:f1:4b:e4:fb:04:be:
                    6c:03:60:76:6a:f2:22:5d:30:69:27:45:3c:c5:f1:
                    15:26:f0:e7:7b:f9:78:6a:58:8f:61:ba:e2:a7:8a:
                    69:d4:df:c0:85:29:eb:73:9a:62:bb:1a:3a:93:84:
                    37:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:94:C9:82:FB:18:BA:2A:4E:16:6A:02:74:12:E5:C6:94:B3:F3:17
            X509v3 Authority Key Identifier:
                keyid:EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a383030303a3a2f33332d3333203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e84:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9b:8e:ec:43:0c:a1:88:70:68:10:c5:fa:0b:bc:e4:bf:cb:79:
         65:5c:61:b7:9b:31:12:7f:e2:36:29:6c:3b:d8:8f:39:4a:73:
         a0:e6:e9:8b:54:46:cb:2e:8a:a7:1c:e3:92:7b:52:34:1d:87:
         7a:00:da:ed:8d:42:79:fd:b2:6e:26:a4:36:ad:99:0a:63:ec:
         87:0b:b4:37:c8:6e:21:83:26:60:e7:2d:4e:ab:af:62:2f:ea:
         ce:9b:54:d9:41:9b:a2:c4:30:29:56:7f:41:09:31:1d:4b:37:
         23:6c:8d:b3:45:84:f9:69:17:30:92:1c:1d:3f:cf:32:63:f4:
         b4:09:59:f7:f7:58:2a:a6:d0:72:22:38:0e:af:5b:c0:66:13:
         ae:39:d8:5a:99:9f:99:6d:0c:0b:d2:4d:92:0f:1b:06:b4:39:
         2b:1e:77:4b:ba:8e:5f:3e:7d:cd:86:90:94:05:ad:67:86:9f:
         49:19:30:99:31:15:ce:a8:24:61:c0:23:54:7b:72:cd:19:d5:
         78:02:12:1b:59:7e:76:80:fe:f7:93:84:f3:a8:09:1d:65:f8:
         ca:63:c6:a4:ba:07:d2:9b:d3:b8:ab:e5:2a:a0:2e:b1:91:90:
         0d:83:b6:19:ff:74:9c:c8:67:13:ea:d2:86:6a:7b:95:79:43:
         d9:c4:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org