Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/323830343a6636633a3a2f33322d3438203d3e203238323130.roa
File:                     323830343a6636633a3a2f33322d3438203d3e203238323130.roa (raw, json)
Hash identifier:          t1YU6v1xFF7J1GgbzpTNW2VJOCltSu83fpZkKIinX1I=
Subject key identifier:   E0:E0:FE:D6:50:29:44:B5:5C:C4:6C:2E:08:BC:46:18:50:25:67:2C
Certificate issuer:       /CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
Certificate serial:       10BEFD97FD82C22068CAB6A3CEDF8181A3367D94
Authority key identifier: EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/323830343a6636633a3a2f33322d3438203d3e203238323130.roa
Signing time:             Wed 21 Feb 2024 15:38:14 +0000
ROA not before:           Wed 21 Feb 2024 15:33:14 +0000
ROA not after:            Fri 21 Feb 2025 15:38:14 +0000
asID:                     28210
IP address blocks:        2804:f6c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:be:fd:97:fd:82:c2:20:68:ca:b6:a3:ce:df:81:81:a3:36:7d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
        Validity
            Not Before: Feb 21 15:33:14 2024 GMT
            Not After : Feb 21 15:38:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:04:8b:21:5f:d5:7d:48:60:85:82:60:68:
                    52:63:f0:db:97:63:d9:cf:5b:02:db:7a:85:e0:fc:
                    60:79:c2:2b:26:cb:f0:4c:74:ee:54:3e:47:68:ef:
                    55:9b:1a:41:c3:c5:c9:c6:7c:d1:4c:f1:1d:35:81:
                    38:b1:41:28:26:1b:c7:f4:90:1c:ce:67:62:30:ae:
                    ac:f1:6c:26:fe:c5:1b:d9:99:c7:ef:e7:ba:00:b6:
                    23:58:0d:a6:84:f6:96:d1:06:90:7d:98:72:3f:f7:
                    87:d1:44:53:c1:46:de:47:4e:69:fb:89:a3:fb:06:
                    d2:6f:07:29:00:7e:51:bd:8d:6f:13:3c:c6:63:4c:
                    61:ea:9b:ea:35:e2:72:ba:7f:17:67:ee:37:f3:90:
                    bc:23:6a:98:91:d5:9d:76:1a:ab:7f:c0:6a:ed:be:
                    f0:b7:6e:95:9e:84:d5:ac:08:47:2e:9e:e0:32:da:
                    76:e4:93:fe:01:17:fd:74:e7:c5:b3:02:9f:c7:fb:
                    b3:b3:79:16:b6:d9:64:9d:45:e2:ee:b9:c9:02:3c:
                    da:70:b2:c9:d9:3d:f4:e9:cf:1e:fb:86:eb:3f:72:
                    0a:b0:f4:ed:1f:5e:28:35:fd:b6:f8:51:a8:3e:d5:
                    90:7a:1b:3a:24:d9:5a:f3:53:8b:19:0a:04:a9:73:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E0:FE:D6:50:29:44:B5:5C:C4:6C:2E:08:BC:46:18:50:25:67:2C
            X509v3 Authority Key Identifier:
                keyid:EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/323830343a6636633a3a2f33322d3438203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:4d:02:ad:eb:eb:28:0a:1a:d9:13:0d:83:9a:41:71:98:94:
         c2:cd:2f:07:45:ca:24:f5:4c:d5:f0:97:31:e1:fe:77:5c:1b:
         61:b2:a7:cd:f6:af:67:ad:37:89:b1:fe:be:e0:75:5b:ff:c2:
         39:bf:c7:0d:b6:fc:0c:38:b4:7a:c6:80:61:b5:64:85:0a:c9:
         de:97:34:e8:ae:9f:e9:64:de:b5:3e:39:7e:69:b0:f5:b1:55:
         40:df:d7:04:da:74:35:65:a5:b4:47:76:f9:63:9e:e0:cb:1e:
         fc:3f:ac:62:d5:bf:67:16:59:cc:17:94:b4:dc:22:1f:45:23:
         24:92:45:3e:23:a0:1b:09:d0:1d:a6:f3:e0:b0:81:46:1f:a1:
         fb:f6:d7:ed:11:e8:2e:fa:08:2e:46:50:76:c2:f2:24:cf:6d:
         f0:26:ac:94:73:b3:59:42:f8:02:9a:ad:0a:b4:43:b2:5d:86:
         33:50:0f:d6:88:cc:40:50:91:34:3f:94:f0:a8:76:cb:08:a1:
         57:36:f1:d9:e0:e8:65:f3:63:3c:d6:5f:5c:92:e5:70:31:d3:
         e7:bd:a6:30:28:d7:6d:f6:75:87:b1:00:c1:be:63:ce:cc:b1:
         ca:f6:2a:33:79:94:e5:1e:89:6d:d6:56:47:a8:e9:31:b5:71:
         ce:8d:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org