Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3334203d3e20323638333038.roa
File:                     323830343a346632383a3a2f33322d3334203d3e20323638333038.roa (raw, json)
Hash identifier:          9T8PSG8c3HJIw1kdCD0qxtJPSsq9EdW8iYHwzC5b5lE=
Subject key identifier:   6D:91:EC:4F:27:B9:FD:BB:02:85:D5:EE:B8:8C:66:D7:05:E8:C9:66
Certificate issuer:       /CN=11EC55DCC6754328D555246C7EB1FC903158C2CF
Certificate serial:       2BE9F43E8637EF4B6FDCE17DA9B1A51F33E3E66A
Authority key identifier: 11:EC:55:DC:C6:75:43:28:D5:55:24:6C:7E:B1:FC:90:31:58:C2:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EC55DCC6754328D555246C7EB1FC903158C2CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3334203d3e20323638333038.roa
Signing time:             Mon 22 May 2023 14:49:53 +0000
ROA not before:           Mon 22 May 2023 14:44:53 +0000
ROA not after:            Mon 20 May 2024 14:49:53 +0000
asID:                     268308
IP address blocks:        2804:4f28::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e9:f4:3e:86:37:ef:4b:6f:dc:e1:7d:a9:b1:a5:1f:33:e3:e6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11EC55DCC6754328D555246C7EB1FC903158C2CF
        Validity
            Not Before: May 22 14:44:53 2023 GMT
            Not After : May 20 14:49:53 2024 GMT
        Subject: CN=6D91EC4F27B9FDBB0285D5EEB88C66D705E8C966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:d7:bc:12:44:38:9d:4b:06:d4:0a:ac:d1:
                    5c:96:9f:66:5b:26:5d:03:b2:be:94:67:5b:a2:eb:
                    55:75:eb:1a:be:e5:4d:be:76:ee:87:00:e9:54:6d:
                    71:11:75:ac:d9:bf:10:b2:a1:10:7c:0d:0f:16:e1:
                    42:56:93:71:f8:2b:1a:42:e0:3f:bf:35:80:ab:75:
                    a7:b9:51:e1:ac:3c:34:75:4a:b9:28:19:3d:e6:aa:
                    e8:a7:3b:50:e6:cc:93:d2:3f:fd:94:43:52:a4:e8:
                    c9:be:04:47:7f:c1:42:65:86:20:aa:3c:27:85:d7:
                    17:91:a6:8a:77:20:3c:6f:53:9b:38:01:f2:6f:3b:
                    59:75:c9:84:f9:be:be:58:79:a0:5e:03:ad:a7:45:
                    87:6e:26:fa:97:17:23:54:06:83:19:e6:19:ba:24:
                    e8:aa:66:88:cd:b6:db:45:1a:36:12:1e:64:1e:8b:
                    17:cd:ef:bd:a0:2a:b1:79:17:7b:e9:80:b3:e3:02:
                    78:99:97:05:f6:cc:9e:33:51:d6:02:7b:82:d2:d4:
                    14:79:15:23:9c:58:db:0a:81:26:4b:e0:6f:b3:2d:
                    90:eb:00:37:24:27:22:59:90:56:e2:c6:06:ca:70:
                    74:b7:7d:85:e3:27:c4:a9:48:f5:84:12:21:22:97:
                    60:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:91:EC:4F:27:B9:FD:BB:02:85:D5:EE:B8:8C:66:D7:05:E8:C9:66
            X509v3 Authority Key Identifier:
                keyid:11:EC:55:DC:C6:75:43:28:D5:55:24:6C:7E:B1:FC:90:31:58:C2:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/11EC55DCC6754328D555246C7EB1FC903158C2CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EC55DCC6754328D555246C7EB1FC903158C2CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3334203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:34:15:13:9e:7b:20:d8:df:57:50:f4:06:fd:1e:9b:02:bc:
         25:ec:fd:95:9d:f8:18:fc:ba:79:22:49:03:e9:43:77:88:d7:
         0c:1a:7b:55:2a:d8:e2:24:21:1f:91:c6:5f:40:05:39:8b:cc:
         de:81:2b:bc:f5:09:7c:d1:4b:3c:23:14:d6:43:f1:3f:dd:e7:
         04:52:7b:18:b0:90:1e:e9:39:be:99:33:24:a3:1c:3e:af:d6:
         c7:02:cc:b7:50:5c:c0:92:f4:df:f8:01:c6:c4:74:fd:7e:8f:
         0b:17:a0:4a:be:41:61:9c:a8:94:d8:2c:35:d0:89:8b:e5:78:
         71:0a:22:5c:41:05:01:77:2d:83:14:30:ff:1e:82:94:cc:1e:
         61:48:18:1e:7c:25:da:fd:6e:63:fa:c0:90:38:98:de:45:10:
         bd:fe:76:80:1c:51:c7:40:a6:35:c6:29:0e:23:fe:5c:6f:e4:
         c0:dc:76:f8:d0:e8:67:c5:9a:c2:52:34:2e:b1:0a:7e:c8:af:
         fe:18:a8:52:5b:5d:35:91:21:c3:44:e4:52:6f:dd:28:a8:8c:
         0b:94:f6:7c:1d:25:35:2f:aa:14:7e:a4:e5:60:40:e7:b1:e7:
         fe:14:e9:02:56:5c:cf:aa:4d:47:0c:dd:ce:50:d7:dd:a3:b6:
         6a:31:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org