Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a666163653a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a666163653a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          eCI7cvY5+iqO0HEJBaA+PngxsaYa4dmW8cwqMPeKo6s=
Subject key identifier:   23:F3:F5:07:85:91:FA:92:04:E4:39:CA:D0:28:ED:4D:82:51:A1:08
Certificate issuer:       /CN=E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD
Certificate serial:       1F7DF1560B8194B3876CA45A9E7C5A08F5B3E51F
Authority key identifier: E8:81:CE:9B:B1:2E:D9:DA:F6:F0:92:E0:28:1F:D1:92:F9:F3:C6:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a666163653a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Tue 11 Jul 2023 14:36:35 +0000
ROA not before:           Tue 11 Jul 2023 14:31:35 +0000
ROA not after:            Tue 09 Jul 2024 14:36:35 +0000
asID:                     264344
IP address blocks:        2804:2674:face::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:7d:f1:56:0b:81:94:b3:87:6c:a4:5a:9e:7c:5a:08:f5:b3:e5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD
        Validity
            Not Before: Jul 11 14:31:35 2023 GMT
            Not After : Jul  9 14:36:35 2024 GMT
        Subject: CN=23F3F5078591FA9204E439CAD028ED4D8251A108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:a0:35:00:06:bc:a4:a2:54:36:e3:9c:96:
                    92:30:6c:f2:9a:37:fe:3d:fc:1a:02:cd:f3:fa:65:
                    05:bc:fb:98:2a:de:2a:38:2b:50:7e:b1:79:d8:91:
                    d6:ab:65:25:11:0b:00:72:d0:3d:f1:f5:1a:3f:fa:
                    9b:08:13:90:58:fc:3b:aa:69:b2:d6:d0:43:47:11:
                    7f:5f:8c:8a:01:4f:94:c2:f4:8f:89:dc:a1:bf:de:
                    50:0c:dd:9f:d1:6a:2a:9f:16:cb:bd:ed:50:cf:2c:
                    14:01:8a:13:5e:b6:3c:0b:f8:24:a5:7e:b6:ea:10:
                    d2:34:4d:c1:85:2d:c8:3c:f2:bb:f2:3c:81:48:00:
                    ab:81:c5:c2:81:bd:d9:ed:59:42:e6:9f:b8:e9:a8:
                    5f:4c:ec:a8:6a:55:b7:bc:1a:43:06:d8:63:94:bc:
                    cc:19:2c:4c:1c:22:8e:fe:cb:30:df:85:8e:b4:18:
                    91:2a:ac:65:fa:b1:f5:c8:75:dc:70:de:a8:c9:b8:
                    fb:63:92:15:20:76:72:d8:32:3f:c2:6c:1d:da:ca:
                    25:e1:29:44:75:3c:40:ee:eb:73:0d:2c:53:25:73:
                    b9:69:c8:2c:9c:3b:dd:50:53:35:06:0c:39:2b:31:
                    80:71:03:ef:f7:5a:91:87:e1:d5:75:75:98:8d:66:
                    40:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F3:F5:07:85:91:FA:92:04:E4:39:CA:D0:28:ED:4D:82:51:A1:08
            X509v3 Authority Key Identifier:
                keyid:E8:81:CE:9B:B1:2E:D9:DA:F6:F0:92:E0:28:1F:D1:92:F9:F3:C6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a666163653a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:face::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:23:b2:3a:af:23:32:77:c9:65:01:f1:40:31:8b:b0:e1:42:
         33:f3:d2:eb:61:03:35:e8:30:23:3b:ca:0e:89:63:d0:1c:5d:
         82:e3:41:af:f5:57:23:e1:b7:cd:30:e2:33:d1:3a:8a:1d:4f:
         16:aa:7b:e5:41:0a:36:45:72:7f:ba:4b:65:c2:de:78:fb:43:
         a0:57:70:06:9d:d9:6b:96:76:6b:07:31:b6:21:ee:a2:19:cf:
         02:4f:23:2f:a7:02:61:11:3b:a9:3a:3c:fd:f1:18:65:02:26:
         d9:40:cc:14:ec:fc:c3:ca:48:e6:3c:4d:2c:07:fc:bd:a8:8a:
         de:58:17:6b:1a:96:cc:ae:3e:1c:4a:67:e4:7a:ad:99:22:f7:
         3e:2a:db:c0:82:19:6a:f2:25:e8:0d:57:d7:33:f3:db:f0:9d:
         fc:27:98:7d:21:af:70:ad:ec:b9:3a:fe:a8:91:8e:ee:2c:2b:
         2a:c4:9f:8b:33:cc:11:44:0f:5b:2e:1e:ca:8b:48:89:7b:2d:
         6a:cd:c4:89:5f:7b:de:04:d2:72:69:ae:77:58:a3:62:43:7a:
         b4:ec:d1:a2:86:fc:a6:78:0c:7b:4c:55:3b:e5:00:27:b7:22:
         52:80:c9:c6:a5:ec:bb:b6:11:03:6c:9b:6c:7c:ea:a0:34:20:
         c1:10:c7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org