Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3a2f33322d3332203d3e20323638363338.roa
File:                     323830343a353434343a3a2f33322d3332203d3e20323638363338.roa (raw, json)
Hash identifier:          SE91HP1H691ZCO7/Ipj3f/Fa0P5MCwZBQOIaZ4oRMB8=
Subject key identifier:   74:A0:BE:AB:C6:AC:84:7B:06:20:14:6E:AF:80:28:E9:7D:85:5F:E2
Certificate issuer:       /CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
Certificate serial:       6B04B8AEF0FD28E095E2EEBC04F58D732DFBEB96
Authority key identifier: EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3a2f33322d3332203d3e20323638363338.roa
Signing time:             Fri 23 Feb 2024 14:40:54 +0000
ROA not before:           Fri 23 Feb 2024 14:35:54 +0000
ROA not after:            Fri 21 Feb 2025 14:40:54 +0000
asID:                     268638
IP address blocks:        2804:5444::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:04:b8:ae:f0:fd:28:e0:95:e2:ee:bc:04:f5:8d:73:2d:fb:eb:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
        Validity
            Not Before: Feb 23 14:35:54 2024 GMT
            Not After : Feb 21 14:40:54 2025 GMT
        Subject: CN=74A0BEABC6AC847B0620146EAF8028E97D855FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:44:54:25:56:c9:3c:bf:65:8c:a5:d8:f8:
                    f4:5b:5c:79:47:16:29:8e:97:0f:1b:24:2e:66:a9:
                    66:5c:d8:ef:e6:a9:9d:53:b1:54:91:f5:e0:33:9b:
                    98:a1:8e:ea:32:c6:65:38:98:e6:e0:58:ff:7a:80:
                    a2:2a:23:95:79:8d:fc:01:2c:c7:22:30:a5:6d:3d:
                    52:99:ca:de:33:35:57:1b:4e:b6:3b:3f:d8:82:6f:
                    5c:5a:e1:26:99:e1:45:3e:e9:f2:ee:58:2a:ec:dc:
                    b0:8d:9b:3a:7e:b1:76:bb:6a:27:68:fc:9a:82:44:
                    2a:1a:51:d2:fa:3d:2f:f4:e4:e7:c4:ca:1a:ee:86:
                    72:76:0d:af:07:02:78:52:5f:8d:1d:bb:b0:e8:93:
                    2f:c0:9b:4b:cf:8c:7b:ad:cf:4d:04:39:0a:73:5a:
                    01:6c:bd:e6:34:dd:4e:20:c3:08:01:38:55:fe:46:
                    32:59:06:0e:74:b7:bd:93:85:56:e7:c1:a9:d4:f9:
                    04:f4:17:ff:0d:c2:cd:09:3a:5a:61:ca:2a:c6:52:
                    b5:0c:26:e4:aa:64:fa:65:55:b5:7a:08:dc:f9:0c:
                    a8:90:4a:0e:ac:7d:7c:da:60:29:b1:94:94:d2:55:
                    59:b1:ad:ac:2e:48:00:52:2c:5f:4b:52:94:55:78:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A0:BE:AB:C6:AC:84:7B:06:20:14:6E:AF:80:28:E9:7D:85:5F:E2
            X509v3 Authority Key Identifier:
                keyid:EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3a2f33322d3332203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5444::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:bf:d4:37:04:5a:68:f7:fd:be:6a:95:f1:1e:fb:21:be:81:
         59:2e:87:f3:35:8a:57:52:5c:68:b5:0e:57:bf:55:f7:4b:c1:
         dd:7f:25:2e:6f:f0:b8:31:37:e5:53:8d:b4:b5:b4:55:c4:e9:
         23:55:cf:87:af:d3:18:0c:4e:8b:81:16:4a:92:d9:9a:2c:9e:
         1d:7d:13:c1:3b:43:54:1d:4d:ec:23:ee:b1:3c:b4:54:b7:3e:
         71:a5:25:d1:4b:38:3e:09:50:04:2c:f7:0d:90:b2:85:40:8e:
         39:69:17:e9:f9:86:ab:2b:d7:96:8c:8f:04:b9:e5:7a:74:c6:
         ca:eb:40:bc:f3:41:4e:41:59:73:d1:06:11:5e:f9:d4:4c:35:
         06:b6:10:1f:0c:99:b4:97:cf:53:55:be:f7:20:67:cf:f9:ed:
         c8:52:b4:58:ce:bf:f4:3f:ce:32:bc:53:1d:fb:9f:13:df:3b:
         5a:2d:b8:4c:7e:47:e4:e2:2c:45:1c:bf:88:05:cc:94:f8:4a:
         b3:32:9f:78:74:c6:a3:19:50:9c:7f:6f:b8:90:19:36:bb:5f:
         2d:ed:dd:d1:81:02:22:13:b4:22:5d:b7:69:c9:58:7d:87:71:
         26:2c:5a:0f:71:6d:4d:fd:f3:7a:64:5b:b9:24:23:c7:22:43:
         a7:ea:e7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org