Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a3a2f33322d3438203d3e20323730343137.roa
File:                     323830343a366262303a3a2f33322d3438203d3e20323730343137.roa (raw, json)
Hash identifier:          3XOf9FdR7lvDd1zqrN3bnnxUbTyS+S96p8ZMGSV+8xU=
Subject key identifier:   4E:0A:1B:08:E3:C4:FE:BA:C7:2F:B6:1A:70:CA:5C:CA:80:06:80:2F
Certificate issuer:       /CN=E6E99B76C28F539A3F44FFE68785195ADB3B5A33
Certificate serial:       5FBFA6F6704225EC716DB106522293ACCB952352
Authority key identifier: E6:E9:9B:76:C2:8F:53:9A:3F:44:FF:E6:87:85:19:5A:DB:3B:5A:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6E99B76C28F539A3F44FFE68785195ADB3B5A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a3a2f33322d3438203d3e20323730343137.roa
Signing time:             Tue 28 Jun 2022 13:00:00 +0000
ROA not before:           Tue 28 Jun 2022 12:55:00 +0000
ROA not after:            Tue 27 Jun 2023 13:00:00 +0000
asID:                     270417
IP address blocks:        2804:6bb0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bf:a6:f6:70:42:25:ec:71:6d:b1:06:52:22:93:ac:cb:95:23:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E99B76C28F539A3F44FFE68785195ADB3B5A33
        Validity
            Not Before: Jun 28 12:55:00 2022 GMT
            Not After : Jun 27 13:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:25:92:fc:5e:07:9e:d7:ab:15:b2:a7:46:
                    73:2c:5e:11:09:74:4c:b7:56:7a:85:2d:bc:00:86:
                    47:f4:c3:7b:58:52:49:82:dd:ab:eb:58:dd:84:aa:
                    15:4a:1f:6e:50:94:da:d0:f2:7f:d7:b1:c9:12:be:
                    eb:96:b0:ed:15:3c:b0:a9:4b:b2:02:84:60:c1:22:
                    28:5c:75:2a:46:28:e3:6f:a6:db:18:8d:e5:73:5d:
                    0c:c5:cf:88:43:f4:57:5d:d0:9c:01:e5:fb:2f:76:
                    62:0e:a4:c7:97:80:e0:27:99:c6:de:79:18:21:8d:
                    d3:b3:96:37:1e:6a:f0:d2:2d:2b:c1:a8:f7:77:74:
                    d6:b6:9b:f5:90:85:1a:30:2d:91:9d:72:d8:82:85:
                    30:71:7b:e1:58:18:af:22:b3:69:96:73:72:e3:c5:
                    37:b9:a0:15:6c:e0:67:ff:2d:51:fe:d5:c1:b0:41:
                    58:69:07:7e:e2:66:7d:9c:08:a7:5f:38:eb:21:f1:
                    9e:81:e8:ff:e3:cb:82:24:b5:d1:5e:90:18:98:d7:
                    fa:22:ee:f8:56:70:43:f2:dc:70:5e:02:ec:65:0f:
                    6b:a7:96:df:84:6b:95:9a:66:77:6f:99:2a:02:ef:
                    06:03:07:47:a1:70:3a:9a:1f:6b:d8:98:e7:63:de:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0A:1B:08:E3:C4:FE:BA:C7:2F:B6:1A:70:CA:5C:CA:80:06:80:2F
            X509v3 Authority Key Identifier:
                keyid:E6:E9:9B:76:C2:8F:53:9A:3F:44:FF:E6:87:85:19:5A:DB:3B:5A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/E6E99B76C28F539A3F44FFE68785195ADB3B5A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6E99B76C28F539A3F44FFE68785195ADB3B5A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a3a2f33322d3438203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:5a:eb:cd:be:e2:0f:83:c6:c5:5f:20:b1:59:9d:97:d3:ef:
         e5:51:1f:3d:59:36:50:59:f0:f5:2e:4f:e0:54:23:23:5d:a0:
         0b:95:14:01:c8:b3:e9:b1:b9:20:44:56:79:8d:1b:37:3d:31:
         ae:1b:94:d1:38:31:69:c1:dd:be:24:22:54:ac:3b:68:2a:a8:
         d2:f6:5e:00:e3:69:93:82:3b:f9:7f:45:c9:d7:f0:77:2b:b8:
         32:c9:58:a3:3f:57:9a:87:bc:a0:28:df:c8:7c:48:e1:eb:29:
         b0:ba:f7:4e:ba:1a:4e:7e:d6:3f:75:b2:9a:2b:1d:a0:f0:05:
         d5:a0:dd:b9:2b:7a:a0:e2:16:ab:62:77:87:05:91:5c:ad:96:
         47:dc:91:cc:3c:85:31:3c:11:c8:d6:94:9a:0a:95:ce:64:af:
         ef:ca:8d:ee:33:fb:4c:c6:3b:4d:6c:47:24:e2:9c:81:78:5c:
         fc:f8:2e:91:87:52:e0:1f:be:34:40:d7:c3:98:07:df:43:3d:
         e0:aa:8e:8e:31:72:55:8e:c2:13:fc:79:1e:64:17:e7:f3:bb:
         c5:d1:23:34:11:59:32:5b:78:59:e0:ef:1d:fa:6f:3d:75:88:
         76:c1:ac:57:0a:21:67:eb:f9:d5:8f:f2:ce:99:0a:1f:c8:01:
         b7:4d:89:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org