Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/323830343a346436633a3a2f33322d3438203d3e20323638313935.roa
File:                     323830343a346436633a3a2f33322d3438203d3e20323638313935.roa (raw, json)
Hash identifier:          rjehOXjnOUNIbbz0h8hwOwiTX2oMNPmbcCzXZxcVVOg=
Subject key identifier:   7C:BD:00:5D:D0:A2:3E:C0:F9:0E:18:9C:D2:48:9F:26:47:93:3B:31
Certificate issuer:       /CN=2EBCA12266480FA2635C1DB38D44B5240CFA8934
Certificate serial:       24D37B06920AF7C2A5CED5587177D6E0D03BF607
Authority key identifier: 2E:BC:A1:22:66:48:0F:A2:63:5C:1D:B3:8D:44:B5:24:0C:FA:89:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EBCA12266480FA2635C1DB38D44B5240CFA8934.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/323830343a346436633a3a2f33322d3438203d3e20323638313935.roa
Signing time:             Sat 16 Dec 2023 21:43:09 +0000
ROA not before:           Sat 16 Dec 2023 21:38:09 +0000
ROA not after:            Sat 14 Dec 2024 21:43:09 +0000
asID:                     268195
IP address blocks:        2804:4d6c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d3:7b:06:92:0a:f7:c2:a5:ce:d5:58:71:77:d6:e0:d0:3b:f6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EBCA12266480FA2635C1DB38D44B5240CFA8934
        Validity
            Not Before: Dec 16 21:38:09 2023 GMT
            Not After : Dec 14 21:43:09 2024 GMT
        Subject: CN=7CBD005DD0A23EC0F90E189CD2489F2647933B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:eb:b5:b1:21:e4:12:fb:05:af:d9:c4:43:72:
                    b7:83:15:95:b9:cb:2b:6f:75:bf:20:52:3c:64:11:
                    bb:38:ea:63:96:01:09:f8:c7:2d:4a:68:ca:23:a1:
                    72:b8:8b:60:f7:a2:fc:28:52:7a:3a:f1:89:b7:dd:
                    a2:57:eb:11:f6:58:14:85:91:6f:d3:42:b1:a6:de:
                    c6:b9:d8:fe:81:19:f3:eb:8e:9f:e9:b9:d2:6e:d5:
                    c2:a5:58:d6:2f:3a:64:42:21:4b:94:a9:65:e5:26:
                    c1:b1:8b:fe:37:92:3b:b7:3b:c0:dd:c2:89:93:14:
                    30:47:6b:14:15:1b:7e:bb:ee:61:a4:0b:ab:f1:28:
                    34:a6:cd:95:67:3a:d2:f2:cb:49:70:eb:83:a0:44:
                    44:a3:47:b6:f8:9f:5e:aa:00:bb:64:c9:c0:f5:ed:
                    a5:eb:c1:f6:b7:35:c4:8f:4f:43:5f:08:bd:b4:e4:
                    9b:11:b4:e4:c5:fd:6c:3f:f0:2d:94:e1:cc:32:90:
                    5d:66:cd:01:9d:5a:a6:31:e3:ad:94:6c:6b:b2:15:
                    c7:46:17:ea:87:04:58:73:c6:c9:c1:14:97:ab:46:
                    51:4e:ea:db:1d:02:9f:05:e4:10:6f:8f:66:46:15:
                    98:40:1a:8e:3f:ce:d8:c3:be:fc:79:fc:d6:b7:56:
                    8c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BD:00:5D:D0:A2:3E:C0:F9:0E:18:9C:D2:48:9F:26:47:93:3B:31
            X509v3 Authority Key Identifier:
                keyid:2E:BC:A1:22:66:48:0F:A2:63:5C:1D:B3:8D:44:B5:24:0C:FA:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/2EBCA12266480FA2635C1DB38D44B5240CFA8934.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EBCA12266480FA2635C1DB38D44B5240CFA8934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/323830343a346436633a3a2f33322d3438203d3e20323638313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:68:af:5e:25:0c:99:0b:f7:68:90:fc:b7:e6:58:2e:7e:b2:
         f6:78:9c:da:a1:e9:ea:ce:f2:34:ba:1e:8b:e4:68:eb:4b:4e:
         ca:33:34:91:b7:c8:02:20:49:30:de:76:b7:a0:25:94:48:02:
         91:ee:2e:50:66:54:72:58:02:7a:a5:5b:24:2f:5d:1c:0f:2a:
         68:87:50:4a:00:4b:54:a0:be:62:c3:bb:0d:e8:60:26:f7:dd:
         32:04:ff:4f:d7:28:67:06:69:84:35:d0:fd:49:f7:12:09:5c:
         5b:65:46:78:e4:00:c9:1e:c4:68:1a:63:3d:66:73:9e:b5:e2:
         d5:c1:2b:fc:86:5c:99:6a:63:57:29:9d:d5:ec:42:6c:b3:84:
         6f:76:95:4c:2d:e9:11:fb:d5:45:6a:07:af:5e:21:4b:96:66:
         75:8f:81:01:7a:e6:8c:4b:5b:ab:e0:05:39:29:2c:c5:dd:67:
         ed:d9:f2:82:a0:4b:c7:00:e3:72:32:22:ff:b1:51:cc:24:07:
         c2:e8:e5:d5:31:eb:74:8b:b6:98:11:05:a1:55:cb:58:d2:4c:
         8f:cf:ae:1f:46:81:6d:4b:3c:ec:58:4f:a8:6e:1d:63:0f:77:
         58:11:76:26:a7:4e:46:a9:8c:3d:a4:8f:41:a0:08:f7:cd:3d:
         71:f2:5b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org