Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a383030303a3a2f33342d3334203d3e20323730363032.roa
File:                     323830343a366538343a383030303a3a2f33342d3334203d3e20323730363032.roa (raw, json)
Hash identifier:          2FZzSmvEP5qdPw1fMZNhYopZDPgUBl1hEEUcx5oPf0I=
Subject key identifier:   9E:CD:57:38:76:23:AF:79:6A:B4:8C:B5:33:EB:40:6E:EB:75:7E:9B
Certificate issuer:       /CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
Certificate serial:       4E81DC2921E7A89E16FDAB9435394DAECB4E3EA3
Authority key identifier: EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a383030303a3a2f33342d3334203d3e20323730363032.roa
Signing time:             Tue 21 May 2024 14:32:32 +0000
ROA not before:           Tue 21 May 2024 14:27:32 +0000
ROA not after:            Tue 20 May 2025 14:32:32 +0000
asID:                     270602
IP address blocks:        2804:6e84:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:81:dc:29:21:e7:a8:9e:16:fd:ab:94:35:39:4d:ae:cb:4e:3e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
        Validity
            Not Before: May 21 14:27:32 2024 GMT
            Not After : May 20 14:32:32 2025 GMT
        Subject: CN=9ECD57387623AF796AB48CB533EB406EEB757E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:eb:e7:93:b2:9d:72:24:e5:9f:ea:71:32:
                    4c:45:45:a1:3b:24:96:ff:f4:51:7a:b8:05:48:50:
                    ea:00:ad:4d:71:89:e4:7d:35:40:cf:b4:8f:84:c9:
                    36:ec:3a:57:3e:29:a8:b1:9b:9d:e9:75:fe:e1:5c:
                    f6:15:a9:03:40:23:f9:54:74:55:21:09:b2:27:d6:
                    db:ec:1e:eb:47:fa:8a:6f:2c:91:66:c5:72:71:a5:
                    4b:d3:47:cb:fe:f9:d8:03:03:97:82:86:cc:4a:3f:
                    a0:55:77:87:f6:ed:0a:f9:75:7b:1f:68:8a:46:69:
                    b3:78:a3:1c:8d:eb:3d:02:7c:96:b1:cd:75:01:5f:
                    f1:b1:d2:37:4d:f5:3d:36:22:fd:20:11:3e:67:0a:
                    3a:17:07:52:ce:59:c4:2c:32:23:c4:7f:96:47:35:
                    8a:d7:09:fc:45:2c:13:60:bc:93:46:28:f5:d5:3a:
                    2d:39:b5:90:aa:f8:d0:bb:87:29:ec:0b:4a:bc:19:
                    9e:f0:2a:e9:d7:6b:a2:09:da:f0:d3:c2:c1:bb:b0:
                    54:e8:fb:3d:c3:86:2b:a0:94:3e:fb:a0:c1:82:1f:
                    2b:32:ea:a4:25:09:5d:34:84:c0:78:ae:06:79:02:
                    88:38:6b:83:7f:eb:82:6e:e0:ad:26:d7:10:5d:2a:
                    f7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CD:57:38:76:23:AF:79:6A:B4:8C:B5:33:EB:40:6E:EB:75:7E:9B
            X509v3 Authority Key Identifier:
                keyid:EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a383030303a3a2f33342d3334203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e84:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:db:3a:3d:65:fa:34:d6:c6:12:ab:3b:22:ba:59:9c:c9:88:
         fd:44:d5:4b:72:ef:82:d9:ba:5a:fe:b4:4b:8d:cd:4e:5a:c5:
         90:e3:bd:be:c2:77:04:2c:4a:1c:9b:46:34:72:03:99:3f:82:
         6c:5b:6c:51:0c:97:c0:16:0a:95:e1:39:62:53:89:7f:92:84:
         15:d9:5a:a4:67:31:ee:a2:57:bf:74:65:ef:26:1c:ea:f9:ac:
         a7:86:b0:f5:94:c6:47:3e:60:23:5e:16:73:19:96:be:69:3c:
         c6:88:3c:96:3b:76:70:f6:d2:e6:15:31:fb:3a:8b:39:a9:f0:
         26:16:f3:ef:e9:b8:93:6f:5f:23:48:b8:96:d2:bb:bd:13:12:
         44:fd:f4:d7:fe:fc:85:b0:36:81:a5:ed:24:ff:e2:b3:f8:b2:
         7d:81:ac:b3:7d:fe:65:72:20:e9:e2:c9:87:3d:25:c3:2b:66:
         44:bd:a4:fb:36:c9:14:ba:aa:3e:c4:f5:55:90:68:43:82:fa:
         6b:db:f2:60:4a:84:86:1d:4d:7e:d7:9e:0c:14:2c:10:50:c7:
         55:54:36:9b:4f:73:4a:2b:65:1c:00:52:5f:a5:4e:f6:81:3f:
         65:68:88:ec:85:e5:7c:b2:05:8a:75:45:a3:ff:27:61:e1:f5:
         58:76:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org