Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a666163653a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a666163653a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          kjLhC9yfSh/3JzNrXzrWqY1gZbsOQHTV0RCVYpUczIE=
Subject key identifier:   47:7B:19:6E:84:37:9E:A4:D6:57:FB:F2:34:0D:EF:42:15:3F:32:D9
Certificate issuer:       /CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
Certificate serial:       64A8BF491C2C7CA9D8CB48691EC7A797885D317D
Authority key identifier: 6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a666163653a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Wed 13 Dec 2023 14:29:39 +0000
ROA not before:           Wed 13 Dec 2023 14:24:39 +0000
ROA not after:            Wed 11 Dec 2024 14:29:39 +0000
asID:                     264485
IP address blocks:        2804:2050:face::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a8:bf:49:1c:2c:7c:a9:d8:cb:48:69:1e:c7:a7:97:88:5d:31:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
        Validity
            Not Before: Dec 13 14:24:39 2023 GMT
            Not After : Dec 11 14:29:39 2024 GMT
        Subject: CN=477B196E84379EA4D657FBF2340DEF42153F32D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:e5:39:62:df:d1:59:ba:0d:a0:ed:77:26:
                    11:25:50:3c:d2:20:6f:23:27:55:25:11:99:d2:55:
                    7d:00:f5:eb:1b:1f:40:c1:18:9c:ba:0c:20:9e:bf:
                    a1:6e:13:16:3e:8c:78:a2:d9:12:bc:f1:ef:11:9f:
                    74:de:d7:dd:00:52:1f:bb:70:9f:0d:37:e3:53:70:
                    4e:36:4e:f0:3f:65:b5:5d:2a:cc:f4:d8:b8:c2:a2:
                    bd:ad:20:a9:11:39:94:81:b5:b1:29:4f:16:fb:1a:
                    b8:93:cf:96:f3:8b:b2:a6:a6:03:30:37:42:8f:07:
                    b4:bf:d2:68:da:82:e4:10:43:89:a3:0f:07:fd:9d:
                    bc:31:53:91:87:03:b1:ef:42:b6:eb:c7:1a:04:8f:
                    21:27:b2:7a:65:ad:28:1f:5c:48:8a:ca:33:1f:e8:
                    3c:67:f5:54:21:43:b0:8c:22:d0:c1:26:f7:78:07:
                    ef:2d:db:63:8d:b9:07:03:9e:35:53:36:5d:ca:be:
                    99:2e:4b:73:a2:85:49:f2:36:bd:4c:ee:98:86:9d:
                    45:93:32:5c:0d:34:3b:98:cf:87:bc:d0:d4:de:24:
                    a2:db:71:aa:15:cb:2f:57:86:67:91:f0:77:af:5c:
                    6e:a7:fe:08:61:b7:76:58:73:61:31:b4:09:61:06:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7B:19:6E:84:37:9E:A4:D6:57:FB:F2:34:0D:EF:42:15:3F:32:D9
            X509v3 Authority Key Identifier:
                keyid:6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a666163653a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:face::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:cd:20:21:94:dd:1d:a1:78:df:a9:6e:74:7a:45:ab:f2:cd:
         50:0b:75:93:f6:0e:79:e1:fc:1b:9c:7c:be:9a:e8:f5:d5:dc:
         e0:21:a0:24:ec:b9:b3:c2:bb:4f:2f:d7:36:5a:d7:40:9e:7b:
         9a:44:94:a5:88:dc:64:57:48:20:5b:73:2f:67:7b:58:02:58:
         85:27:f7:2c:f1:64:3f:bd:56:ed:48:93:05:18:61:11:9a:03:
         9a:44:40:42:01:9e:0d:08:45:3a:cb:81:b5:21:ac:2f:5e:a6:
         69:02:d5:0e:99:da:cc:2f:c0:56:b3:a7:6f:62:a8:5f:d0:84:
         ff:30:b5:5f:78:c5:b6:ae:78:00:c0:aa:4b:a2:09:dd:c1:b3:
         0e:10:8d:fb:0d:d5:2e:03:5f:e1:5c:93:a1:d4:8a:94:5d:d7:
         31:d6:8b:71:fa:d3:37:06:bd:e6:be:50:40:b7:fb:b1:fb:e8:
         ff:9d:8c:ed:16:c8:18:de:c9:53:55:9f:3d:a9:d9:bd:13:a9:
         7e:3c:a0:93:35:7e:6f:9b:d4:7e:bb:dd:05:7d:14:4e:53:7e:
         3c:35:5e:e2:fd:ac:9a:65:03:a8:87:72:bb:de:85:a6:d9:5d:
         83:88:7d:0f:44:86:5f:b6:5c:4f:d2:8a:b8:b3:9a:26:4b:6e:
         1e:40:2a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org