Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/323830343a6433633a3a2f33322d3332203d3e203532363133.roa
File:                     323830343a6433633a3a2f33322d3332203d3e203532363133.roa (raw, json)
Hash identifier:          vMDJr7TL67avXM7qcawzQhGZdF3rtzGfQYfqlPNvDss=
Subject key identifier:   3B:B9:54:5B:4C:A7:1B:28:02:8C:C9:C6:68:FF:3C:EE:A8:CE:C8:76
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       4321DA2C2C9C5D89570C1C7BB7CCE8FDB6001854
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/323830343a6433633a3a2f33322d3332203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:52:02 +0000
ROA not before:           Wed 06 Mar 2024 14:47:02 +0000
ROA not after:            Wed 05 Mar 2025 14:52:02 +0000
asID:                     52613
IP address blocks:        2804:d3c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:21:da:2c:2c:9c:5d:89:57:0c:1c:7b:b7:cc:e8:fd:b6:00:18:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:47:02 2024 GMT
            Not After : Mar  5 14:52:02 2025 GMT
        Subject: CN=3BB9545B4CA71B28028CC9C668FF3CEEA8CEC876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:ea:d5:47:aa:39:1c:94:56:84:f5:1e:4c:
                    da:be:94:87:64:1e:d6:8e:53:50:6a:0b:68:06:ae:
                    6f:f9:03:fb:7c:2e:53:3b:41:93:e3:21:91:8b:de:
                    43:ab:ba:de:d5:47:d7:a5:84:09:52:a5:95:5e:dc:
                    79:83:03:2a:b8:41:fe:86:3a:91:97:96:58:84:27:
                    05:7f:af:68:db:cd:d1:84:fc:be:16:c8:bc:83:5f:
                    72:4f:88:b4:25:c8:a2:d5:09:06:2e:f3:f7:dd:49:
                    72:40:62:95:50:a9:e3:3d:8b:98:94:4c:08:d1:2c:
                    10:91:96:ad:1f:67:82:a0:fd:b4:ed:18:62:a4:e4:
                    eb:9d:2d:fb:71:62:0c:4f:0c:5e:b4:cd:a2:92:6c:
                    f3:f2:f6:3d:da:c5:29:94:d7:3c:b7:47:03:42:5b:
                    51:71:31:49:d0:13:65:ba:92:29:d5:6f:16:a0:ea:
                    05:12:27:14:2a:3a:38:26:38:eb:46:00:20:16:de:
                    a9:7e:ef:03:f6:8d:00:fa:09:b4:ab:35:27:e4:8c:
                    e6:3f:97:16:aa:11:83:6a:d7:d6:d2:f3:c1:f4:4d:
                    99:d5:ad:03:70:89:09:0c:46:08:ac:51:29:16:4c:
                    93:6c:99:83:d0:83:98:50:5c:db:c5:32:4c:91:ed:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B9:54:5B:4C:A7:1B:28:02:8C:C9:C6:68:FF:3C:EE:A8:CE:C8:76
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/323830343a6433633a3a2f33322d3332203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:1e:47:16:a6:01:45:cf:94:16:36:cf:4b:3a:c0:24:42:4d:
         bb:0a:f3:a7:a1:63:82:4d:8f:f2:9d:17:c1:42:a1:c2:21:6f:
         51:d7:bb:b5:a0:bd:25:e5:1f:9b:d5:14:52:bf:33:9f:09:85:
         c6:2c:87:5d:3f:ab:20:39:6f:ce:d7:34:ce:04:25:6f:37:06:
         7e:84:4c:d4:3f:0f:36:03:07:f2:18:ee:7c:aa:8f:d1:93:36:
         53:c7:1d:77:33:d6:a1:db:3c:db:37:75:38:9c:a8:00:62:b8:
         f9:9a:a0:8f:00:e2:3d:93:f3:ad:7f:7b:84:0e:18:59:08:a5:
         29:06:d2:bc:e3:ff:fc:a4:91:18:4e:f4:b2:b0:8b:0f:69:f7:
         9b:cb:fc:85:43:45:c9:e5:b9:62:a7:5d:1e:7c:c1:bf:71:76:
         22:bc:c6:3b:5d:48:92:db:9f:d8:ef:61:c5:0d:3b:1f:c9:20:
         b2:b9:4a:0d:00:33:16:0e:05:c7:b0:ad:1e:3a:f6:8f:95:d9:
         e9:0a:51:c5:bf:6b:61:6b:ef:f9:44:e3:ed:f4:cd:f5:8f:82:
         c7:fb:f7:df:3a:3c:f9:fc:62:c9:4c:98:f4:59:c6:e2:5c:84:
         cf:8c:28:01:f2:2b:85:22:f2:c4:82:7b:2f:b4:a5:5c:f7:e9:
         87:38:75:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org