Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/323830343a316136303a3a2f33322d3332203d3e203631383537.roa
File:                     323830343a316136303a3a2f33322d3332203d3e203631383537.roa (raw, json)
Hash identifier:          m8rLwDXAgGUfw1wrcGh/E2C3aR1oPSqordnrKx+k8ik=
Subject key identifier:   7A:C2:AA:5D:40:0A:00:C6:95:82:86:42:65:CF:71:63:7B:7C:29:33
Certificate issuer:       /CN=EDBB71BFB5C814DA471F371C214CD6D1C45122E9
Certificate serial:       2CAE93F9A1FFC656F2162F4843EBF3721D55B8CE
Authority key identifier: ED:BB:71:BF:B5:C8:14:DA:47:1F:37:1C:21:4C:D6:D1:C4:51:22:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDBB71BFB5C814DA471F371C214CD6D1C45122E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/323830343a316136303a3a2f33322d3332203d3e203631383537.roa
Signing time:             Thu 14 Jul 2022 20:00:00 +0000
ROA not before:           Thu 14 Jul 2022 19:55:00 +0000
ROA not after:            Thu 13 Jul 2023 20:00:00 +0000
asID:                     61857
IP address blocks:        2804:1a60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ae:93:f9:a1:ff:c6:56:f2:16:2f:48:43:eb:f3:72:1d:55:b8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDBB71BFB5C814DA471F371C214CD6D1C45122E9
        Validity
            Not Before: Jul 14 19:55:00 2022 GMT
            Not After : Jul 13 20:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:5c:1e:d6:e8:c5:e8:05:dd:78:cb:ff:0b:
                    f3:8e:df:df:de:ea:c1:92:ce:ab:4e:e1:aa:9b:24:
                    44:62:1d:82:8c:07:fe:00:70:fb:3a:57:84:36:3f:
                    3c:24:98:bd:64:1f:37:ea:7d:16:42:e3:c3:24:ad:
                    17:21:19:9f:3c:50:46:da:41:da:b9:b2:9a:db:96:
                    65:9f:de:03:af:73:35:33:8c:89:d8:cd:d9:1f:31:
                    44:71:9b:be:77:61:fc:b3:01:40:ac:27:98:ea:de:
                    97:86:00:49:a1:02:98:cf:b3:55:6e:81:bc:71:7f:
                    55:29:91:ab:ec:f4:bc:bf:8c:a2:39:07:57:99:57:
                    67:81:18:f9:bb:76:71:01:96:73:3c:dc:01:9e:11:
                    d7:0b:be:fa:02:d8:52:d7:9a:68:ba:c7:df:ba:79:
                    33:1b:93:28:31:ce:79:a7:60:64:c6:f0:b6:45:9a:
                    0d:b3:07:aa:5c:19:68:2d:76:67:a3:25:16:58:90:
                    c9:47:f6:b8:10:bd:73:bb:dc:51:9c:14:3e:b0:72:
                    5b:5d:6b:40:a6:9a:fc:5f:99:bc:c5:07:b4:04:fd:
                    7a:77:da:a9:13:5f:77:d3:25:3c:2a:d9:00:8e:46:
                    1c:9e:71:1e:c1:ca:ba:9b:c3:95:b6:26:54:ba:c1:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C2:AA:5D:40:0A:00:C6:95:82:86:42:65:CF:71:63:7B:7C:29:33
            X509v3 Authority Key Identifier:
                keyid:ED:BB:71:BF:B5:C8:14:DA:47:1F:37:1C:21:4C:D6:D1:C4:51:22:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/EDBB71BFB5C814DA471F371C214CD6D1C45122E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDBB71BFB5C814DA471F371C214CD6D1C45122E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/323830343a316136303a3a2f33322d3332203d3e203631383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:62:f5:71:96:72:e1:37:60:20:0a:10:76:d0:a5:3f:3a:9f:
         9a:c1:32:25:47:df:90:41:74:a6:3b:b1:f0:57:dd:6b:d0:bc:
         32:7a:9f:a0:1c:c1:8e:6f:50:b3:0a:ab:7b:38:d1:fd:78:13:
         f3:fd:38:32:e6:18:9c:96:33:7e:e2:d8:1b:23:61:f4:d7:00:
         4f:82:77:2d:df:2b:b8:d6:e3:c9:eb:14:eb:a3:c8:d0:92:6f:
         ea:f9:35:0d:00:fe:6b:29:0a:51:0c:b2:61:dd:33:49:f7:74:
         da:dc:2f:b3:45:f8:9a:f8:28:70:b8:5a:7d:66:a7:34:ea:c9:
         98:72:21:e0:ea:e8:8b:d6:a3:d2:f5:c5:d3:7a:13:02:35:65:
         a4:f2:a1:11:fe:53:65:1b:52:7c:6e:c8:96:de:1c:7b:e4:fd:
         36:f0:56:30:12:1c:e1:c7:3a:14:13:d6:36:27:f5:93:17:16:
         64:b8:97:35:12:8a:0e:07:1e:27:60:bc:02:d4:10:ed:c8:a6:
         c6:b9:37:ec:b4:34:c7:c3:da:7a:c1:d8:94:bf:fe:17:52:bc:
         5e:a0:7a:7f:cb:50:19:6b:90:ba:d3:6d:15:9d:cc:bf:b6:bb:
         94:9a:ca:7d:0a:bf:0e:46:e4:12:13:1d:d2:aa:bd:88:28:cf:
         4c:f3:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org