Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa
File:                     323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier:          AgRkG1WBy+M1Vj2RE9qt+zyWH19SCZq2e924tl0q2IQ=
Subject key identifier:   8B:F6:06:78:5A:DE:24:1C:CA:17:76:25:9A:DF:90:0A:A3:F0:A2:D9
Certificate issuer:       /CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
Certificate serial:       6F4E7C28E1C2EA3BF7CC3504851346178806E823
Authority key identifier: E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa
Signing time:             Thu 22 Jun 2023 11:21:32 +0000
ROA not before:           Thu 22 Jun 2023 11:16:32 +0000
ROA not after:            Thu 20 Jun 2024 11:21:32 +0000
asID:                     28202
IP address blocks:        2804:87c:9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4e:7c:28:e1:c2:ea:3b:f7:cc:35:04:85:13:46:17:88:06:e8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
        Validity
            Not Before: Jun 22 11:16:32 2023 GMT
            Not After : Jun 20 11:21:32 2024 GMT
        Subject: CN=8BF606785ADE241CCA1776259ADF900AA3F0A2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:43:38:3c:3b:b1:1a:ca:dc:0c:66:42:15:
                    31:cc:69:68:84:39:fd:13:c8:95:f8:01:29:7e:0b:
                    77:d3:5f:f1:94:9d:5d:5c:81:b0:cc:5c:1f:b0:92:
                    1d:1c:44:26:13:a2:1e:22:71:ad:36:cb:2c:9a:79:
                    b2:99:cb:a0:d5:5a:1a:6d:77:14:70:01:16:87:5a:
                    b6:51:72:94:97:38:ec:66:3d:d3:4a:74:9d:cd:f8:
                    95:9b:5b:42:af:07:f4:bb:b0:c4:8b:24:21:ba:ec:
                    da:9c:74:78:95:7c:9c:f1:ea:2c:39:eb:41:35:df:
                    a5:62:15:06:75:69:5b:09:72:e3:34:e3:1f:6f:12:
                    29:0a:e7:53:04:77:0e:bc:6f:b8:34:79:fe:fa:35:
                    93:e2:66:be:f3:6e:1a:c0:c7:b2:eb:b7:c0:69:54:
                    13:63:52:5d:10:77:0b:55:98:11:23:8a:05:99:68:
                    eb:77:a1:12:a2:85:22:be:ed:c2:47:92:67:e0:96:
                    ef:c9:3b:88:eb:77:8e:85:46:f4:77:34:4e:51:15:
                    67:2d:d2:3f:b1:3a:29:ee:04:ad:f7:39:34:95:a5:
                    77:77:10:cf:2b:79:39:31:62:d7:63:3a:6c:d1:2d:
                    1f:43:b1:be:07:0a:1f:29:65:85:21:e7:d2:ff:4d:
                    da:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F6:06:78:5A:DE:24:1C:CA:17:76:25:9A:DF:90:0A:A3:F0:A2:D9
            X509v3 Authority Key Identifier:
                keyid:E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:e6:bf:60:f8:9b:00:cf:38:52:a2:40:7d:97:ab:94:88:c1:
         b3:9a:8a:5d:02:7e:b6:be:ef:e5:2e:0f:61:1d:eb:e7:eb:94:
         72:7b:12:aa:06:ea:4a:7e:0a:d4:f1:5a:c9:f8:3e:4e:58:b2:
         bc:5f:c8:ed:a0:f6:77:94:3e:dc:9f:bb:84:2c:3e:fa:97:e9:
         dd:dc:3c:c1:af:8f:74:8a:e1:45:ee:d4:43:07:3f:cf:28:06:
         99:24:ae:a7:4f:a5:16:5a:62:a9:38:6b:c2:0e:7a:0c:50:c0:
         e4:db:50:a0:8c:33:b9:0b:60:99:7d:ed:24:d5:32:f3:cb:df:
         dc:ed:31:85:88:b8:77:bf:38:45:76:5f:07:40:eb:25:1d:ff:
         e2:a6:23:ed:9d:57:91:d2:d6:46:3d:5c:57:45:74:53:8c:15:
         bb:0f:d4:9a:42:ae:91:5f:02:d6:f4:7f:e7:dd:55:ba:24:d0:
         6c:8c:c5:9e:8d:2a:39:bd:cb:f2:02:e1:ab:ae:8d:03:96:6d:
         e9:36:04:b5:a2:ea:e8:b6:80:50:bf:9a:79:58:2d:41:bf:89:
         70:93:70:64:54:e5:62:07:eb:26:83:44:82:42:51:b1:aa:7d:
         10:0b:dc:b1:1f:02:ab:30:fa:6e:af:cb:f5:80:f3:93:66:d1:
         63:e4:28:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org