Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/323830343a65383a3a2f33322d3438203d3e20323632363539.roa
File:                     323830343a65383a3a2f33322d3438203d3e20323632363539.roa (raw, json)
Hash identifier:          VQadaH1gQhn2IrUnJK/k/eay+rhfZSMLmAibFBaKk0I=
Subject key identifier:   7A:FF:35:CD:85:09:EB:74:B0:62:BB:DD:A5:FD:CD:BF:A6:AD:84:A1
Certificate issuer:       /CN=EBE97E483EBD5E5FA1C7420357D460DBF4839A50
Certificate serial:       78C89D1DCB04CE927E68BC20FB62D07D44F0A698
Authority key identifier: EB:E9:7E:48:3E:BD:5E:5F:A1:C7:42:03:57:D4:60:DB:F4:83:9A:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/323830343a65383a3a2f33322d3438203d3e20323632363539.roa
Signing time:             Fri 03 May 2024 20:00:26 +0000
ROA not before:           Fri 03 May 2024 19:55:26 +0000
ROA not after:            Fri 02 May 2025 20:00:26 +0000
asID:                     262659
IP address blocks:        2804:e8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c8:9d:1d:cb:04:ce:92:7e:68:bc:20:fb:62:d0:7d:44:f0:a6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE97E483EBD5E5FA1C7420357D460DBF4839A50
        Validity
            Not Before: May  3 19:55:26 2024 GMT
            Not After : May  2 20:00:26 2025 GMT
        Subject: CN=7AFF35CD8509EB74B062BBDDA5FDCDBFA6AD84A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2d:31:00:d7:1b:16:34:b6:39:fd:7c:25:93:
                    13:1e:2f:af:90:b9:3d:cb:56:f4:8c:60:f4:0d:32:
                    fd:b6:50:ca:91:c2:b3:46:60:23:41:2e:bb:44:bd:
                    49:d3:08:7b:1a:e0:4a:07:49:05:7e:b2:c3:fa:9b:
                    b5:ee:72:71:e1:1c:db:c8:76:17:70:78:06:75:4e:
                    6c:02:6b:76:a1:3c:0c:c3:46:44:c2:07:78:f7:f7:
                    73:e7:95:25:81:40:6a:d6:ac:d3:32:7e:5d:b9:cc:
                    58:ba:f2:76:03:50:83:08:73:35:a4:47:8f:57:59:
                    f7:53:bb:76:04:9b:f0:85:5b:8d:f7:92:be:f0:44:
                    55:eb:da:a3:95:42:9f:10:8d:65:f4:2e:77:ec:af:
                    13:3c:11:a5:7e:b8:b7:eb:af:67:b7:a3:64:40:1a:
                    35:1b:53:f1:2a:98:68:fc:13:45:68:73:3d:e6:1c:
                    ec:77:59:c5:61:24:96:32:90:1c:bc:10:54:79:3a:
                    c1:68:e3:4e:11:6a:d8:1e:c8:b2:21:6c:ba:b5:81:
                    4c:08:d9:48:72:79:ae:db:12:f4:33:d7:a1:ff:ee:
                    dc:de:e3:95:7f:47:6f:48:31:61:8c:2b:81:c8:b4:
                    a4:e4:1d:a7:c4:e3:61:81:a8:95:34:cd:35:d5:d2:
                    fa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FF:35:CD:85:09:EB:74:B0:62:BB:DD:A5:FD:CD:BF:A6:AD:84:A1
            X509v3 Authority Key Identifier:
                keyid:EB:E9:7E:48:3E:BD:5E:5F:A1:C7:42:03:57:D4:60:DB:F4:83:9A:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/323830343a65383a3a2f33322d3438203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:4f:81:c7:26:5f:39:c4:f8:94:07:a2:bd:50:08:35:82:bb:
         cf:fc:00:ad:0b:95:73:8a:8a:4f:66:14:a6:2e:c8:0a:ff:f9:
         71:96:a4:27:1c:95:34:ed:14:38:8e:5f:77:5a:82:71:ed:34:
         e4:36:df:b7:ad:99:14:87:f4:fc:2a:12:15:d4:be:74:40:b7:
         41:0e:e1:4f:8c:62:42:67:c8:3d:01:14:f6:b4:33:b2:3d:6b:
         07:f5:ad:46:f5:aa:b5:0e:ce:91:11:e0:96:d2:bf:ae:56:fd:
         1f:91:27:05:97:da:2c:7b:0c:18:f1:18:2a:1b:34:d4:dd:22:
         48:c4:f1:04:69:76:df:06:6e:fc:9b:56:62:95:e1:6e:50:0d:
         ef:db:d2:40:8c:e9:6b:7b:52:2d:20:de:16:67:82:99:84:4d:
         2d:5b:2c:f0:90:25:59:8e:c0:e3:8d:15:4a:bd:dd:48:13:e6:
         16:d3:b0:4f:2a:6a:bc:e4:2f:66:76:f8:53:32:42:19:72:ee:
         c3:4f:f6:92:17:9c:7b:db:79:e9:88:54:79:c7:9b:58:b6:82:
         b2:b1:5c:0c:cd:41:99:e2:41:66:09:9a:57:dd:c3:f8:90:29:
         69:66:d9:c8:ef:d1:17:84:c3:7c:e5:4c:fe:74:94:44:89:af:
         ad:6a:db:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org