Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a3a2f33352d3335203d3e203533303532.roa
File:                     323830343a326634383a3a2f33352d3335203d3e203533303532.roa (raw, json)
Hash identifier:          h7W3kUyXT8R5lJGx7XU8wl3UGYUa1i/fvV5m+SJ79qg=
Subject key identifier:   6C:12:60:6E:A5:CC:E2:F6:EB:B7:74:12:0C:8E:8A:4E:53:2C:ED:BD
Certificate issuer:       /CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
Certificate serial:       0AB0D8BC38ADA56D6BA475150A5763FBC23F9CDA
Authority key identifier: EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a3a2f33352d3335203d3e203533303532.roa
Signing time:             Tue 13 Jun 2023 01:00:00 +0000
ROA not before:           Tue 13 Jun 2023 00:55:00 +0000
ROA not after:            Tue 11 Jun 2024 01:00:00 +0000
asID:                     53052
IP address blocks:        2804:2f48::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b0:d8:bc:38:ad:a5:6d:6b:a4:75:15:0a:57:63:fb:c2:3f:9c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
        Validity
            Not Before: Jun 13 00:55:00 2023 GMT
            Not After : Jun 11 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:a2:cd:07:ac:9b:48:b6:eb:82:8c:6b:f3:
                    29:f3:22:7e:9b:13:8a:0e:35:6d:9d:67:a6:e1:99:
                    99:28:f9:67:79:36:fc:8d:8e:aa:0f:ae:84:95:8f:
                    d6:58:c9:aa:62:bb:78:4b:19:1d:92:6b:e6:5b:a6:
                    19:54:0c:83:18:40:7d:3c:f1:cd:07:aa:4e:9f:94:
                    ce:31:86:73:ec:ab:78:1e:0b:68:a3:75:05:8f:97:
                    9d:5e:13:d3:d1:ec:cb:95:92:f9:3b:14:90:3e:e4:
                    59:29:71:bb:19:82:d5:17:b8:e6:ba:ab:6c:89:61:
                    7b:2f:ae:f3:df:18:15:e3:90:7a:08:f0:10:19:30:
                    22:71:69:09:cb:0c:92:27:7f:3a:4e:74:9f:c9:ae:
                    ec:1a:a9:54:77:5d:53:e7:a8:88:38:08:84:c3:dc:
                    2f:af:63:1d:2a:b5:ad:56:2b:1c:c6:ed:09:66:99:
                    cb:63:de:af:e5:f8:28:25:99:96:75:e7:33:ac:87:
                    97:9a:a6:cf:16:22:32:72:a5:2e:c3:f1:cc:6f:6a:
                    f5:74:6e:fb:2a:b5:20:a7:36:f7:57:1e:10:7b:32:
                    b2:7f:40:66:be:38:74:9a:93:e0:50:15:31:dd:15:
                    1e:dc:7f:76:74:c6:a3:50:b7:02:37:11:19:6f:a4:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:12:60:6E:A5:CC:E2:F6:EB:B7:74:12:0C:8E:8A:4E:53:2C:ED:BD
            X509v3 Authority Key Identifier:
                keyid:EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a3a2f33352d3335203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f48::/35

    Signature Algorithm: sha256WithRSAEncryption
         04:3a:4c:24:24:18:95:d3:1b:dc:94:06:09:c4:cb:6e:dc:a6:
         b8:49:df:ea:7a:27:1b:5d:37:29:4e:2f:35:3a:3b:39:e5:0e:
         e9:e2:5f:41:d3:2e:17:e2:dc:ea:5a:a3:03:b7:ce:78:28:85:
         00:58:bf:78:20:c4:26:be:ff:eb:d7:2c:b5:36:4e:a4:0e:68:
         38:d3:b0:df:2b:a4:c9:65:34:13:54:76:a1:72:a9:44:51:06:
         e7:72:d5:06:97:ae:72:52:e8:7f:f0:d8:f9:06:fe:66:ee:de:
         a2:39:a3:22:9f:42:69:fc:4b:b2:6a:fb:9e:fb:bb:cd:e5:66:
         fc:10:61:c4:eb:8d:0d:e8:3b:67:97:f4:e1:6e:03:0d:e7:80:
         c7:2e:d5:74:c8:25:0f:d3:c7:81:7d:96:82:a9:f2:7f:59:0e:
         a8:73:33:87:1e:21:26:89:a6:d1:49:90:a5:7c:21:cd:6f:d8:
         ef:48:14:33:87:4f:d4:48:89:fd:2b:94:11:cd:90:d1:95:18:
         d8:fd:36:74:5d:9e:ee:7c:b6:0a:42:fa:43:cf:dc:63:8a:c2:
         6c:b6:82:b9:7a:a7:c5:13:e5:f0:37:a5:02:1c:51:9f:dd:18:
         0a:95:83:e0:b9:52:19:57:8a:2d:8a:37:0d:17:ed:1e:3b:12:
         14:c2:09:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org