Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/0/323830343a336530633a3a2f33322d313238203d3e20323636353730.roa
File:                     323830343a336530633a3a2f33322d313238203d3e20323636353730.roa (raw, json)
Hash identifier:          R6vWJrjRBIo8pT/oUE5qfoooIL/B5veCaoD5OBBszCk=
Subject key identifier:   CE:DB:57:A0:93:EA:A0:03:E5:33:D3:D7:A2:7C:50:80:DE:99:47:1B
Certificate issuer:       /CN=0E0889DC7078949A45B24442CCF76DBCF87CB806
Certificate serial:       7DE635E99A8204CBDF0952082473FA07A62190F8
Authority key identifier: 0E:08:89:DC:70:78:94:9A:45:B2:44:42:CC:F7:6D:BC:F8:7C:B8:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E0889DC7078949A45B24442CCF76DBCF87CB806.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/0/323830343a336530633a3a2f33322d313238203d3e20323636353730.roa
Signing time:             Thu 21 Dec 2023 17:01:27 +0000
ROA not before:           Thu 21 Dec 2023 16:56:27 +0000
ROA not after:            Thu 19 Dec 2024 17:01:27 +0000
asID:                     266570
IP address blocks:        2804:3e0c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e6:35:e9:9a:82:04:cb:df:09:52:08:24:73:fa:07:a6:21:90:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0889DC7078949A45B24442CCF76DBCF87CB806
        Validity
            Not Before: Dec 21 16:56:27 2023 GMT
            Not After : Dec 19 17:01:27 2024 GMT
        Subject: CN=CEDB57A093EAA003E533D3D7A27C5080DE99471B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:82:59:f3:42:77:10:fc:90:d4:b6:06:0c:
                    50:8b:3c:cf:e1:a1:14:2e:42:19:72:69:6a:d8:43:
                    c0:f8:97:80:ac:03:56:67:15:86:41:1b:55:50:c6:
                    24:d8:d3:e8:73:8f:c8:35:15:01:34:e9:ba:15:0a:
                    e6:99:8f:10:b6:e6:3d:5c:d2:bb:18:29:39:61:df:
                    83:4e:cd:5f:61:38:fb:0f:af:c9:a0:19:7e:d7:97:
                    e4:6f:8c:71:07:77:6a:17:a3:72:4b:7c:41:59:d8:
                    ae:5a:05:bf:63:92:88:76:1e:ce:e4:a9:7c:3a:24:
                    44:6d:82:67:11:30:01:c5:ae:f4:f5:05:28:5e:74:
                    34:eb:ad:86:de:85:14:98:9e:35:ed:e2:cb:8b:3e:
                    1c:f8:18:dd:6f:1d:44:54:2d:7c:e3:fa:83:7b:df:
                    1f:e9:9d:d1:f5:11:03:28:4a:c6:f0:3c:00:4f:79:
                    66:0d:9b:45:99:a0:b1:d4:7c:44:05:bc:66:ed:27:
                    f0:4c:a9:f4:f7:87:48:06:3c:7d:df:05:67:f4:18:
                    53:c6:29:68:22:43:ed:b2:60:be:96:a8:cd:69:22:
                    53:34:8e:6b:b5:ff:43:0a:bb:9b:6b:d6:25:62:4d:
                    f0:b9:ee:76:ac:17:e3:2d:19:74:72:63:3b:7d:c0:
                    71:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DB:57:A0:93:EA:A0:03:E5:33:D3:D7:A2:7C:50:80:DE:99:47:1B
            X509v3 Authority Key Identifier:
                keyid:0E:08:89:DC:70:78:94:9A:45:B2:44:42:CC:F7:6D:BC:F8:7C:B8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/0/0E0889DC7078949A45B24442CCF76DBCF87CB806.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E0889DC7078949A45B24442CCF76DBCF87CB806.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/0/323830343a336530633a3a2f33322d313238203d3e20323636353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:dd:e5:59:a4:4b:43:ff:72:ff:67:9a:d2:92:03:0f:38:72:
         cb:81:8d:a4:19:dc:ac:b6:38:f7:4b:ed:2f:61:f5:c3:c8:8e:
         60:0d:3b:49:f8:36:68:29:ac:1e:09:54:d2:db:f9:e9:57:aa:
         f3:fd:1f:33:20:31:04:d1:fd:f2:25:6a:dc:27:bd:8e:72:3f:
         c4:ab:8e:09:8e:06:e0:02:4e:6a:f7:f0:a7:6e:24:40:56:f2:
         0b:2b:86:2d:4e:d2:10:38:e6:91:e2:92:f7:44:48:05:b6:27:
         96:6a:46:cf:6f:97:00:a7:82:af:3f:47:40:df:21:07:1e:2d:
         a0:33:e8:90:19:c7:72:4c:f1:7b:0f:f1:7d:7a:f6:06:a1:b3:
         5d:43:4d:bb:bd:f2:67:ad:e5:d4:92:63:0a:e5:f9:5b:b5:db:
         d1:00:87:22:3c:d6:f7:ea:b6:0b:72:24:22:07:ce:b5:fe:aa:
         59:9e:02:61:c2:3b:0a:2b:c8:f8:37:dc:02:a9:f0:5b:58:b6:
         50:ab:9e:e1:ba:82:c2:72:67:8a:a4:49:5c:0e:62:b4:ae:b0:
         b2:c8:62:57:d4:f1:49:6f:3e:71:5f:d5:d5:87:c4:44:31:6b:
         e7:34:86:a8:ab:53:a7:a3:6c:1f:6f:e0:8c:70:7d:c8:5b:4e:
         ea:61:ca:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org