Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa
File:                     323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa (raw, json)
Hash identifier:          dAX+j6r9o6poVt8dxNCHTkR/d69AC//Uwrdh3acJHo8=
Subject key identifier:   DD:4F:A1:E9:8F:71:48:23:7E:DA:FC:97:9A:CC:C6:04:9A:35:8B:B3
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       A8E142302072568C60F92FA060E2EE7210EDA6
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa
Signing time:             Thu 13 Jul 2023 14:00:00 +0000
ROA not before:           Thu 13 Jul 2023 13:55:00 +0000
ROA not after:            Thu 11 Jul 2024 14:00:00 +0000
asID:                     2716
IP address blocks:        2804:0:1c00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a8:e1:42:30:20:72:56:8c:60:f9:2f:a0:60:e2:ee:72:10:ed:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Jul 13 13:55:00 2023 GMT
            Not After : Jul 11 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:9d:c9:66:ae:e5:26:3f:f7:14:f6:9d:a7:
                    04:91:bd:15:cd:a3:0f:4e:f2:5c:df:cc:e9:a9:8e:
                    c9:5e:82:df:26:ea:47:75:a3:0f:68:b4:96:e6:8e:
                    2c:5e:29:36:14:d5:78:bd:3e:2c:b3:39:08:30:30:
                    d3:23:4f:fe:64:ae:f9:0c:e9:ed:bb:7e:8b:21:fd:
                    78:aa:2e:10:7e:a7:2a:38:0a:cc:da:c0:44:3e:5e:
                    17:dc:81:8a:70:c7:ab:92:eb:9c:12:f2:65:aa:69:
                    f9:6d:5c:53:62:48:b0:40:cc:5a:46:9e:c7:75:54:
                    c2:7d:3b:97:74:52:ea:35:e4:11:19:07:d1:b4:40:
                    54:e2:bd:72:42:6c:55:6c:7f:0e:a4:4b:65:58:ee:
                    ee:00:ad:a6:08:2b:c7:df:2d:1b:40:e8:65:c8:ea:
                    38:bf:30:79:0e:be:d3:a7:1f:de:31:00:7c:66:52:
                    d5:63:bd:72:ab:1a:ef:f1:5f:d2:83:72:98:98:7d:
                    99:20:27:49:66:fe:83:ce:2f:bd:21:28:55:81:74:
                    d7:15:3e:b5:17:81:0d:f7:59:bd:c4:ae:fe:71:4e:
                    c4:c4:76:e6:6a:ba:92:89:83:c9:6b:12:b9:f3:32:
                    c1:22:8e:7a:56:c9:79:a1:3f:a4:b3:2f:dd:1f:47:
                    11:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4F:A1:E9:8F:71:48:23:7E:DA:FC:97:9A:CC:C6:04:9A:35:8B:B3
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:0:1c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:e5:98:e2:25:63:ec:6c:ab:cb:b7:d3:c0:7f:f1:a4:ff:96:
         02:1d:ad:99:c3:4f:a3:e8:cb:b7:de:76:25:e5:e0:27:3b:1a:
         e3:1c:f6:f3:c2:ef:38:cf:3a:c9:2d:c1:aa:a5:b7:18:2a:97:
         3a:01:20:e8:8c:b9:58:49:23:90:c7:50:56:14:70:50:15:35:
         b5:82:5c:98:3a:92:00:64:f9:f8:31:73:69:a3:d9:98:9a:c4:
         86:f6:4e:62:d3:55:65:6e:bc:63:bf:8e:b5:e1:21:ff:03:c6:
         0a:4f:4d:e3:0a:44:d2:06:5f:a8:0f:61:9f:96:a7:42:bc:04:
         10:b8:49:06:f5:12:1a:4b:fe:f3:a4:1c:98:8c:54:63:39:84:
         2a:08:04:7f:55:c1:f5:71:e3:0f:16:d5:96:03:14:5b:27:12:
         00:cc:24:c8:2f:05:ad:8b:19:d8:9a:02:37:01:1c:0e:20:73:
         6f:53:fd:e9:3e:fe:64:cc:cd:80:38:ce:b3:e1:8b:c5:e7:d7:
         78:d1:ab:b9:4c:cc:47:12:86:22:ee:67:c0:87:fd:30:46:23:
         69:5b:ac:33:b0:c9:67:46:50:0a:84:5b:30:1e:fb:2c:28:52:
         05:ec:80:14:73:1e:99:46:2a:86:65:04:bc:62:3c:28:68:d0:
         90:c2:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org