Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a3a2f33322d3332203d3e2032373136.roa
File:                     323830343a3a2f33322d3332203d3e2032373136.roa (raw, json)
Hash identifier:          BzQyEow6Lm0nDVJDXl5l0K8wQ9hjX6gsMQMuGA+krr4=
Subject key identifier:   E2:F0:6D:2B:B7:CF:D6:19:D6:13:66:77:A1:A0:CC:AE:DD:0F:C2:C2
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       50B2D2925C83D007DCC4592107304DCB40C31F95
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a3a2f33322d3332203d3e2032373136.roa
Signing time:             Fri 07 Jul 2023 15:00:01 +0000
ROA not before:           Fri 07 Jul 2023 14:55:01 +0000
ROA not after:            Fri 05 Jul 2024 15:00:01 +0000
asID:                     2716
IP address blocks:        2804::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b2:d2:92:5c:83:d0:07:dc:c4:59:21:07:30:4d:cb:40:c3:1f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Jul  7 14:55:01 2023 GMT
            Not After : Jul  5 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:85:59:18:f9:b1:69:67:73:29:ff:79:e8:01:
                    14:b0:40:7a:b8:f2:9e:db:85:8e:b3:27:18:2f:57:
                    b9:73:ba:97:80:41:ce:dc:94:f5:95:f8:86:49:46:
                    2a:24:75:4b:38:d2:18:ec:f6:67:b1:00:40:40:31:
                    05:72:12:05:eb:38:88:4c:c3:8f:e9:2f:cf:e3:e7:
                    e2:6f:45:c5:29:0b:3b:ae:ab:e7:26:e6:ad:98:00:
                    07:38:ed:a2:a6:82:07:80:76:78:61:62:70:91:d4:
                    65:c8:08:f3:19:e2:43:a1:8f:af:8f:81:ad:71:9b:
                    1c:29:80:b5:eb:5a:f2:b4:ed:3c:a7:7e:96:f1:35:
                    fc:49:e1:22:e2:69:bd:ef:5c:f6:93:6e:48:db:40:
                    23:0d:34:45:2f:e2:5c:85:33:cf:58:7d:54:2f:d4:
                    f6:ba:73:b2:fa:b1:45:62:6e:de:26:eb:cc:e6:31:
                    0c:4f:bc:2d:a6:3d:0f:e9:a0:e8:4f:8a:b6:1f:04:
                    f3:6b:dc:ec:d0:fd:19:18:45:77:25:ca:f7:32:5a:
                    7d:ee:c3:ba:b8:ef:f3:3c:50:f8:e7:31:21:e8:eb:
                    2d:ac:ac:83:0b:8e:0c:17:63:3e:9d:02:65:67:22:
                    40:fc:71:d5:9e:0f:67:a0:df:04:05:bb:89:45:62:
                    52:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F0:6D:2B:B7:CF:D6:19:D6:13:66:77:A1:A0:CC:AE:DD:0F:C2:C2
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a3a2f33322d3332203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:19:93:e4:4e:b5:23:cb:f7:f1:9f:5e:a9:3c:df:c8:42:e1:
         ba:e2:e7:d8:b5:7a:b7:b2:17:11:1a:e8:df:3b:e6:64:72:89:
         dd:0b:af:6b:5d:50:dd:9b:15:8a:88:f3:fb:7c:d8:2c:70:ee:
         7c:4a:e7:03:bf:04:5d:46:36:1d:0d:45:b5:64:8b:24:cc:c4:
         32:e5:2d:8f:80:98:83:3a:5f:1b:bf:0d:a0:cb:77:26:be:ec:
         24:2c:8f:d7:5a:27:a0:50:a3:36:4e:71:86:81:36:a1:eb:83:
         19:f6:1f:53:80:22:ad:c8:39:2f:87:ed:53:9b:fd:28:eb:2d:
         6e:57:1d:f9:98:39:05:c6:cf:e4:f7:e4:f7:cb:4b:63:06:3b:
         ce:18:46:ab:f0:61:f8:8a:d9:98:70:68:aa:cb:e8:13:41:33:
         b9:15:3e:6a:cc:09:0f:90:f4:52:7c:fa:cd:88:d0:aa:28:00:
         30:0c:6a:a1:79:c8:be:10:5d:05:61:91:9b:fb:0e:71:45:d1:
         ad:3c:e4:11:28:af:e6:6a:41:9e:2d:e5:4b:1f:66:9f:cb:98:
         42:eb:86:d0:17:34:09:1e:89:85:df:5e:90:cf:b4:51:f5:e7:
         86:a1:f7:e4:1d:a3:99:71:41:0c:41:d9:90:a2:48:f9:de:d3:
         4b:9b:81:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org