Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/323830343a3266303a3a2f34302d3430203d3e203533323336.roa
File:                     323830343a3266303a3a2f34302d3430203d3e203533323336.roa (raw, json)
Hash identifier:          fv9SIOw7a87ybMXwITp7CgaHkzNAtgMDp8waa9cNjGs=
Subject key identifier:   80:0A:45:0E:8F:3A:EC:16:45:BE:BC:22:E4:B0:8F:BE:0E:0D:D0:C8
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       5490DF3265D59C5646C79BD8082B867A538059A0
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/323830343a3266303a3a2f34302d3430203d3e203533323336.roa
Signing time:             Thu 08 Feb 2024 15:00:02 +0000
ROA not before:           Thu 08 Feb 2024 14:55:02 +0000
ROA not after:            Thu 06 Feb 2025 15:00:02 +0000
asID:                     53236
IP address blocks:        2804:2f0::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:90:df:32:65:d5:9c:56:46:c7:9b:d8:08:2b:86:7a:53:80:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Feb  8 14:55:02 2024 GMT
            Not After : Feb  6 15:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:fb:cc:ab:15:43:44:93:ab:d4:e9:85:91:
                    53:f6:3f:e1:4a:ff:96:64:39:b5:b8:3a:31:38:8a:
                    fc:af:f1:d8:c5:34:c5:82:22:9c:8d:70:1c:2e:d2:
                    48:e4:58:3c:1d:33:15:0e:c0:78:cd:de:6e:b6:a9:
                    d4:4f:b8:94:4e:ca:42:74:e4:cb:bf:c9:75:f3:f3:
                    80:2e:ad:dd:cc:62:34:ad:19:32:bc:aa:8a:db:e9:
                    8f:9f:a3:2a:17:d8:29:05:43:c7:61:98:5d:f9:94:
                    74:03:93:3d:80:ea:ff:a6:a7:e5:87:4b:35:7c:84:
                    2d:a6:b2:6d:d2:95:47:ad:cd:27:50:6e:e0:29:92:
                    23:db:f6:53:25:10:8a:a6:7a:7e:a0:61:20:ae:fd:
                    07:09:7f:d6:a5:a4:9c:c4:e0:3c:21:bb:67:b7:9b:
                    75:a2:c4:bc:6f:31:3b:a8:85:e0:f3:1e:81:2c:95:
                    fd:00:5f:7f:f2:50:b1:f4:26:2b:23:b1:0c:af:9d:
                    16:75:3c:15:5b:71:68:66:f6:b8:07:45:58:74:33:
                    3c:12:72:bc:f5:d1:ec:2b:32:19:09:81:f0:76:24:
                    d7:6f:d1:f1:b1:36:80:99:1a:56:ef:f5:5a:08:76:
                    01:37:ad:48:4e:a0:9b:08:dc:ea:aa:4f:6c:06:d4:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0A:45:0E:8F:3A:EC:16:45:BE:BC:22:E4:B0:8F:BE:0E:0D:D0:C8
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/323830343a3266303a3a2f34302d3430203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f0::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:05:cc:f6:fc:6d:e3:c3:30:f9:b4:32:30:bc:e1:44:84:be:
         1c:bb:f3:32:45:8e:c2:ed:55:e9:37:54:e6:33:b3:8f:fd:aa:
         83:85:5d:84:f0:3f:5e:9d:11:79:9e:b1:62:9a:12:57:6b:4a:
         6c:a5:77:76:26:22:d9:22:1a:f3:ce:3e:e1:5f:3e:87:34:10:
         98:47:79:70:8e:f7:8a:b8:0c:1f:ee:48:39:74:f1:bf:0c:f4:
         7f:86:f7:8f:2f:59:98:16:b1:36:7e:71:82:58:a5:cb:b0:6d:
         d9:af:b8:09:e7:97:b2:e0:75:3b:cb:86:c0:49:78:7f:18:07:
         e2:cf:c0:b3:94:ba:b3:33:2d:5d:a5:3b:3c:de:c9:e8:99:fb:
         1f:6c:06:c8:96:c9:84:5c:bb:bf:52:6e:01:10:e6:2a:b7:5b:
         58:69:75:36:c5:0f:a3:f3:fa:7a:e7:69:2c:57:cb:f9:1f:00:
         78:b0:bf:de:21:ba:81:b3:c2:ed:1a:aa:b5:9b:90:22:55:dd:
         e4:de:33:ed:e3:8a:68:10:58:c9:0d:9e:74:cb:4e:ee:9e:4e:
         a0:73:be:49:1f:62:19:05:4c:85:f6:79:56:4f:0a:0f:32:b4:
         b0:2c:2a:d4:67:43:88:94:f7:59:3d:33:f1:ed:bb:bf:43:8a:
         f3:18:a7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org