Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/323830343a373163343a3a2f33322d3332203d3e20323730383130.roa
File:                     323830343a373163343a3a2f33322d3332203d3e20323730383130.roa (raw, json)
Hash identifier:          MvAtgpYhGeq0uFZanem6mNsI9Z1hXa+uW+K9qbeCcZQ=
Subject key identifier:   EE:F1:BA:8D:22:82:DF:F7:A8:8E:42:DB:F0:69:63:18:C8:6D:57:D2
Certificate issuer:       /CN=E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC
Certificate serial:       06F0C883C7C07162719AE3937ECA453CB044754F
Authority key identifier: E5:07:00:E4:BD:71:D1:CD:31:A3:AC:9C:49:37:7B:D7:88:7F:A5:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/323830343a373163343a3a2f33322d3332203d3e20323730383130.roa
Signing time:             Thu 04 Apr 2024 22:11:40 +0000
ROA not before:           Thu 04 Apr 2024 22:06:40 +0000
ROA not after:            Thu 03 Apr 2025 22:11:40 +0000
asID:                     270810
IP address blocks:        2804:71c4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f0:c8:83:c7:c0:71:62:71:9a:e3:93:7e:ca:45:3c:b0:44:75:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC
        Validity
            Not Before: Apr  4 22:06:40 2024 GMT
            Not After : Apr  3 22:11:40 2025 GMT
        Subject: CN=EEF1BA8D2282DFF7A88E42DBF0696318C86D57D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7f:90:f5:4b:e4:26:e9:d4:36:31:fc:65:41:
                    e4:91:0b:56:17:53:12:ee:8c:c2:17:af:54:5f:cd:
                    76:4c:f8:64:8e:f7:37:2f:1a:21:a0:be:c9:b2:5c:
                    e9:d5:c5:34:b2:12:9b:79:75:9e:7c:3d:0d:41:15:
                    f2:d2:1d:55:24:fd:14:f2:c3:6d:6e:17:dc:7e:48:
                    19:1c:8f:3a:0e:1f:51:9b:71:cf:58:f3:c3:a7:87:
                    2e:b0:00:c7:c9:88:2c:c4:9e:30:aa:79:f3:c4:0e:
                    02:d5:cb:f8:f4:23:4b:a0:88:a8:b0:ad:86:56:4f:
                    44:ea:e5:bb:de:e1:90:69:aa:90:d8:47:53:2d:39:
                    77:b9:1c:2a:8d:d6:b8:83:05:34:65:4d:0f:85:c1:
                    0d:b9:df:e0:0f:4d:fd:3a:75:c2:38:bd:f7:0c:b4:
                    f1:5a:6d:d1:11:1d:8d:20:fd:90:c9:a5:97:4d:e2:
                    2f:d3:f4:6a:1f:3a:fc:39:b0:c2:ab:07:b5:4e:20:
                    9a:0f:1a:b7:3b:76:04:57:f5:a3:19:19:6f:05:29:
                    61:92:92:20:aa:c8:d2:3f:48:92:e8:af:c2:6c:f4:
                    ab:b0:91:a1:4e:0c:61:ba:0c:b7:e2:ae:6f:4c:a4:
                    b8:47:a8:89:3d:7e:55:6e:cf:29:ef:fe:de:55:48:
                    a6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F1:BA:8D:22:82:DF:F7:A8:8E:42:DB:F0:69:63:18:C8:6D:57:D2
            X509v3 Authority Key Identifier:
                keyid:E5:07:00:E4:BD:71:D1:CD:31:A3:AC:9C:49:37:7B:D7:88:7F:A5:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/323830343a373163343a3a2f33322d3332203d3e20323730383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:83:cd:46:cd:d0:e6:17:71:a6:07:28:59:5f:a4:bd:62:9c:
         6d:af:e4:8e:0a:0a:5b:6a:d1:ef:f7:a5:18:ac:91:8e:84:fd:
         91:6b:76:39:b1:70:d6:3d:c3:3e:f8:6a:eb:a2:05:85:85:dd:
         b7:6a:d4:8d:87:55:09:3d:7c:67:a6:25:98:ae:fa:a4:e1:1d:
         9f:74:9d:37:87:b5:f0:4b:04:a7:06:c0:03:7d:31:ff:fc:12:
         57:78:7b:c1:00:03:12:30:f6:8a:c6:b6:25:37:ca:8b:09:53:
         5f:ab:2b:69:fd:c1:d4:ac:ac:ed:1a:f9:38:09:6e:84:78:bc:
         08:2e:a1:b0:07:5c:5b:4f:57:02:06:6a:46:da:91:e7:67:d0:
         4b:42:b6:62:6b:e1:ef:78:27:da:eb:e6:da:8d:2d:1a:7a:b1:
         cf:db:27:bd:d7:dd:8c:5a:b7:b6:f4:f6:6f:d4:f2:6b:35:be:
         38:8e:9f:0a:20:bb:ef:02:4a:ce:91:ea:e1:61:91:7a:c6:7c:
         ba:28:72:ce:09:b3:f2:ed:e7:e1:d3:82:a8:1b:c7:db:9c:86:
         bd:69:87:2f:d2:6a:9d:fa:3c:fa:cb:ff:8a:f8:7c:3e:66:f3:
         de:76:ae:50:ef:52:b6:9b:e5:19:5c:bd:12:0c:e3:44:90:eb:
         d0:a2:d5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org