Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030303a3a2f33362d3336203d3e203533303532.roa
File:                     323830343a326634383a343030303a3a2f33362d3336203d3e203533303532.roa (raw, json)
Hash identifier:          gEGBbDpdNNCCRTgPpZJINO343su3c3GSc2fsDLk+wuM=
Subject key identifier:   6C:BF:8F:DC:9E:86:F4:78:2A:F8:D1:25:B7:3D:BA:13:36:B0:C8:05
Certificate issuer:       /CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
Certificate serial:       3BF645C0897916798C623E293E254BDF4F4617AF
Authority key identifier: EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030303a3a2f33362d3336203d3e203533303532.roa
Signing time:             Tue 17 Oct 2023 12:16:11 +0000
ROA not before:           Tue 17 Oct 2023 12:11:11 +0000
ROA not after:            Tue 15 Oct 2024 12:16:11 +0000
asID:                     53052
IP address blocks:        2804:2f48:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f6:45:c0:89:79:16:79:8c:62:3e:29:3e:25:4b:df:4f:46:17:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
        Validity
            Not Before: Oct 17 12:11:11 2023 GMT
            Not After : Oct 15 12:16:11 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:19:89:98:fb:e6:6a:7b:34:5e:c2:df:93:d7:
                    b7:aa:ec:6b:8c:80:9d:77:ea:d5:ab:8e:12:89:30:
                    f0:6c:e0:f5:a2:b8:7f:75:f9:59:ae:4b:2c:30:22:
                    38:d0:32:06:bc:ff:05:04:02:ed:1b:20:88:39:98:
                    39:eb:f9:9c:08:6c:b4:cf:9c:b4:08:1a:59:c9:07:
                    2c:f6:d3:c8:0c:09:fe:a1:47:e8:5e:19:a5:df:25:
                    ff:fe:7b:80:fa:6a:cc:64:a0:80:df:42:78:ad:a6:
                    de:9d:33:39:eb:8c:c0:0b:be:cd:1f:13:bf:60:ac:
                    1e:36:80:86:42:27:56:a7:d1:da:ab:aa:41:c1:98:
                    f1:08:96:c3:fb:89:f9:b4:f2:d4:24:0f:32:00:df:
                    67:d4:2b:0f:14:c4:9e:db:8a:a8:79:17:2e:10:c5:
                    b9:cb:43:d5:6a:0f:75:1a:2e:f6:68:83:a3:ca:a3:
                    bf:73:b4:cc:93:7b:a2:fd:95:4e:d1:fa:14:33:aa:
                    69:c5:37:b8:c5:0b:8d:db:56:f3:ec:b0:7a:8d:72:
                    a4:14:4f:19:20:2d:71:2f:98:ec:0d:6b:2f:30:1e:
                    98:d7:4c:50:fd:65:df:6b:52:b2:96:61:c8:0a:07:
                    18:ec:bf:89:7b:ec:d1:86:d5:ee:c2:0f:ad:78:c6:
                    9e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BF:8F:DC:9E:86:F4:78:2A:F8:D1:25:B7:3D:BA:13:36:B0:C8:05
            X509v3 Authority Key Identifier:
                keyid:EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030303a3a2f33362d3336203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f48:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         03:57:bb:78:42:f5:e8:81:d6:85:d0:a6:42:2f:26:23:0b:ed:
         9e:6f:3e:50:da:18:43:30:ed:f5:a4:d0:c5:d8:53:93:76:6d:
         1c:dd:9c:24:c3:ac:d8:54:92:29:e6:bf:49:ee:d8:13:25:1b:
         f4:73:44:93:85:d8:4a:49:08:eb:60:27:8d:f2:73:73:18:02:
         37:51:6d:66:d4:66:cc:e0:20:82:d6:23:ff:48:13:dd:5d:0f:
         39:64:f4:00:6b:ee:7d:ff:90:f2:6a:ee:fd:c9:86:54:57:1e:
         e4:ec:86:d9:43:4e:9a:86:71:bf:c5:f5:af:6f:85:b6:56:ec:
         57:40:da:c9:94:15:85:31:4e:37:9e:be:84:2c:7d:bc:60:ab:
         5a:d4:00:e9:e4:56:a2:9c:3a:af:a3:eb:c5:17:5e:e7:5e:dd:
         2a:e4:13:6b:c5:1b:00:3c:d1:8c:04:97:9a:23:ad:7d:b5:39:
         d3:86:18:a4:f8:1f:87:f4:7e:79:3d:6f:6a:31:0d:b9:44:a8:
         90:05:15:33:27:7b:07:3d:16:d9:5c:97:56:a4:38:91:b2:d9:
         c5:16:6d:15:9b:bb:46:c4:45:2e:c2:34:79:3e:5b:f6:1f:e0:
         5c:1e:ed:22:27:07:5f:34:7f:3b:2f:23:a0:61:c3:8c:bc:d9:
         d9:46:46:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org