Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/323830343a3837383a3163303a3a2f34382d3438203d3e20323632333734.roa
File:                     323830343a3837383a3163303a3a2f34382d3438203d3e20323632333734.roa (raw, json)
Hash identifier:          uECZTC/GDYdLB1yLaQZWERx5npHsvpCtJHs5Ednas3w=
Subject key identifier:   C0:FB:EF:2C:3D:2F:96:E1:6B:30:74:D9:2A:2F:79:16:C7:18:EE:EE
Certificate issuer:       /CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
Certificate serial:       175FE9BBBA2A259C52FF3A5E91D300D8D4ECEF4C
Authority key identifier: FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/323830343a3837383a3163303a3a2f34382d3438203d3e20323632333734.roa
Signing time:             Mon 13 Mar 2023 15:02:48 +0000
ROA not before:           Mon 13 Mar 2023 14:57:48 +0000
ROA not after:            Mon 11 Mar 2024 15:02:48 +0000
asID:                     262374
IP address blocks:        2804:878:1c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5f:e9:bb:ba:2a:25:9c:52:ff:3a:5e:91:d3:00:d8:d4:ec:ef:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
        Validity
            Not Before: Mar 13 14:57:48 2023 GMT
            Not After : Mar 11 15:02:48 2024 GMT
        Subject: CN=C0FBEF2C3D2F96E16B3074D92A2F7916C718EEEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:d8:31:43:e5:e1:2a:80:2d:76:41:45:df:
                    b3:67:01:35:6a:a3:fd:32:4a:a2:5e:f0:a9:76:c3:
                    c6:0c:4b:0e:26:44:e4:ad:2a:29:19:c0:a1:83:56:
                    6e:66:48:1a:49:e2:16:63:44:5a:de:9f:9e:98:b1:
                    a5:f7:d3:8b:b9:12:20:f1:50:2a:4d:00:bc:de:80:
                    c8:e9:90:25:19:9f:2e:83:cd:ce:c7:b4:b6:ec:87:
                    b0:54:a1:03:11:b6:bb:69:e4:ed:e1:b9:34:6a:5e:
                    a4:42:d3:4c:7b:17:79:81:03:5f:27:ad:fd:ba:50:
                    5b:81:a5:88:6f:35:28:ef:51:64:c5:b0:9a:18:4f:
                    98:34:d5:e7:6a:9a:9b:c0:f2:e8:b8:66:ea:40:19:
                    46:82:70:65:8b:12:9b:85:bf:e7:58:7f:1d:36:94:
                    c5:96:78:83:63:a6:54:ad:38:b7:9d:27:0f:84:f1:
                    8b:88:57:84:d1:45:e4:df:d0:d1:08:6c:54:f6:b9:
                    c3:98:a8:50:39:f6:e0:67:e3:88:4b:bf:d0:2a:00:
                    c9:2e:7e:ef:8c:0d:0f:c9:15:83:13:9a:ea:fd:e5:
                    a6:1b:c9:af:ce:32:6e:94:cd:57:57:96:fb:1a:d3:
                    2f:ed:26:c4:50:cf:92:2a:1c:c5:f4:dd:ef:0b:f6:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FB:EF:2C:3D:2F:96:E1:6B:30:74:D9:2A:2F:79:16:C7:18:EE:EE
            X509v3 Authority Key Identifier:
                keyid:FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/323830343a3837383a3163303a3a2f34382d3438203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:878:1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:28:b2:0f:e0:85:da:35:eb:cc:af:be:0c:4f:1c:a9:6c:c0:
         bd:27:36:0e:d7:b8:aa:78:37:2b:08:af:48:e8:89:69:6b:b1:
         1b:73:6d:34:95:f5:e5:2c:62:ac:a9:49:93:1c:b3:f3:49:5c:
         5c:9d:b2:22:95:23:08:61:32:c5:71:9f:57:f1:f1:e0:de:d0:
         45:ed:9f:8f:87:e1:74:d3:24:13:20:5a:e7:65:96:5d:62:c9:
         c9:2e:68:3b:db:5a:64:47:55:4f:97:af:c4:f2:e4:bc:cd:f8:
         8f:5c:c8:65:aa:14:1f:bc:0a:4f:2f:72:0d:1e:51:93:77:79:
         55:a3:e2:92:6c:3a:79:db:8a:a7:b5:5e:2c:f4:8f:08:4c:b5:
         f5:46:8f:75:54:ea:66:66:be:5c:3c:1b:00:4a:11:e7:73:9e:
         4e:e9:f9:93:79:81:68:04:71:a0:81:7a:f9:36:e9:80:46:c8:
         f9:d2:eb:d1:fa:c0:2c:a3:ea:54:f0:51:b2:f8:54:30:dc:dc:
         e9:89:30:13:e4:63:8f:1d:c2:8d:4c:18:52:6e:2f:12:cd:e8:
         52:61:be:72:05:94:96:28:49:a2:f1:05:89:1c:16:21:d7:48:
         e4:9f:47:36:0f:2b:dd:08:ff:3d:d1:60:98:1d:cb:ba:dd:2e:
         80:9c:52:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org