Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa
File:                     323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa (raw, json)
Hash identifier:          Tez9Ah3r8+xGr27dpIsM+Pp1mrK1UqPmo9EUJnY0Q1E=
Subject key identifier:   04:78:2C:47:F2:D9:D5:B4:80:EA:CF:EA:5A:1D:CD:B8:52:16:D0:6D
Certificate issuer:       /CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
Certificate serial:       60686EED5FFB2986D464164482CD80BFFF266309
Authority key identifier: EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa
Signing time:             Tue 13 Jun 2023 00:00:00 +0000
ROA not before:           Mon 12 Jun 2023 23:55:00 +0000
ROA not after:            Tue 11 Jun 2024 00:00:00 +0000
asID:                     53052
IP address blocks:        2804:2f48:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:68:6e:ed:5f:fb:29:86:d4:64:16:44:82:cd:80:bf:ff:26:63:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
        Validity
            Not Before: Jun 12 23:55:00 2023 GMT
            Not After : Jun 11 00:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:4f:75:dc:8e:e1:cc:96:bc:3f:7e:bb:ff:
                    27:5c:37:1d:2d:60:e9:2d:68:ef:b8:d8:8a:77:13:
                    3f:fa:dd:f4:8a:a7:9a:75:93:f3:a4:3e:4a:d3:77:
                    5a:1e:e1:2f:79:54:9d:85:3c:85:19:6b:fd:b5:47:
                    51:ac:7d:77:63:cf:65:22:1f:08:9c:e8:5a:96:12:
                    0e:98:10:de:2c:9e:e9:64:0f:53:f5:e1:90:2c:6b:
                    bf:11:96:29:bc:c1:0b:f8:56:f1:0f:b7:bb:71:9c:
                    3f:d0:c3:db:90:33:d2:c8:11:66:a9:c5:64:c6:85:
                    7f:0e:bc:24:a3:6f:58:c9:a7:3d:5f:4c:17:39:16:
                    80:db:a9:69:b3:58:a2:ab:ca:bd:d3:e4:76:94:14:
                    c8:20:91:48:f8:d2:cc:fa:64:bb:6b:a8:4a:8f:67:
                    63:0d:53:fb:ea:98:b1:45:56:5b:44:70:11:f1:08:
                    a7:46:15:1e:35:40:f7:3a:2f:50:be:d3:bd:7d:0a:
                    c2:59:8b:b1:b5:0a:f0:a6:b8:2f:ef:77:7c:bb:31:
                    fb:f9:5d:b7:d4:e6:18:18:cd:b3:54:55:c0:68:cb:
                    e5:0d:45:4f:8c:4e:43:b2:88:e8:a4:db:9a:0a:9f:
                    17:d7:2b:c7:f7:a1:41:6d:85:fc:57:80:d0:8a:01:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:78:2C:47:F2:D9:D5:B4:80:EA:CF:EA:5A:1D:CD:B8:52:16:D0:6D
            X509v3 Authority Key Identifier:
                keyid:EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f48:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         01:ae:6e:64:03:44:a3:c1:71:fe:cd:56:c1:49:74:ab:e2:8d:
         67:36:55:ff:db:29:cf:e9:b8:24:10:65:7a:50:6c:3a:96:f5:
         41:7b:5f:c8:47:9d:fd:9a:e2:d0:4a:a9:43:4b:e4:7e:1f:d6:
         8b:26:45:39:ed:cf:fc:33:05:5d:1a:24:d6:3c:04:2d:57:e9:
         60:2c:64:c1:7d:7b:20:0a:21:e8:96:e1:81:04:d1:2b:ac:c0:
         0c:42:05:4b:72:cd:0f:9e:49:bb:b6:f6:e7:42:6a:b0:2b:9f:
         d0:ca:57:e4:a4:de:ad:fd:09:05:e5:9d:b5:c4:e5:dd:3c:53:
         fb:da:c6:2d:66:ca:ef:9d:0c:65:1c:99:75:21:65:83:48:33:
         e1:3a:00:4b:35:6d:ba:fc:0d:e6:cf:77:d3:51:a8:6c:22:73:
         42:00:b2:15:b1:8b:95:21:02:e7:a1:ce:1b:5b:37:46:f3:d8:
         bf:68:90:04:a7:a5:0b:6b:c4:3b:ad:f3:2f:03:af:81:e0:e7:
         46:2e:57:f3:26:78:56:03:35:75:90:e6:5c:a4:f8:1e:76:73:
         84:cc:c9:a3:7d:af:b6:97:fc:ce:5d:3c:ac:91:a0:99:16:b0:
         ca:bf:c6:70:f3:76:02:5b:09:39:08:a7:33:ba:05:09:de:ae:
         74:30:49:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org