Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/323830343a323035303a356162633a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a356162633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          VegWeCoqMZaqBfpLrTfukly4rUMRE4VZbGYjTkmUWVY=
Subject key identifier:   5D:2A:49:BE:EF:C3:F2:83:E6:BB:25:66:72:F9:6D:BA:DD:CD:67:2F
Certificate issuer:       /CN=EBB6E559FC85ED8E862D6358A687201B26E68182
Certificate serial:       2EDC9D5A1725DAD875228ACD437D93EDBD503F39
Authority key identifier: EB:B6:E5:59:FC:85:ED:8E:86:2D:63:58:A6:87:20:1B:26:E6:81:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB6E559FC85ED8E862D6358A687201B26E68182.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/323830343a323035303a356162633a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Thu 04 Apr 2024 09:08:38 +0000
ROA not before:           Thu 04 Apr 2024 09:03:38 +0000
ROA not after:            Thu 03 Apr 2025 09:08:38 +0000
asID:                     264485
IP address blocks:        2804:2050:5abc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:dc:9d:5a:17:25:da:d8:75:22:8a:cd:43:7d:93:ed:bd:50:3f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB6E559FC85ED8E862D6358A687201B26E68182
        Validity
            Not Before: Apr  4 09:03:38 2024 GMT
            Not After : Apr  3 09:08:38 2025 GMT
        Subject: CN=5D2A49BEEFC3F283E6BB256672F96DBADDCD672F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:14:1f:98:fb:f4:35:86:98:cb:88:c2:65:
                    f8:15:9b:09:47:a5:45:af:09:27:ea:49:cd:24:ae:
                    3d:91:53:be:43:c7:32:ae:d0:c1:2a:a1:9f:88:38:
                    a3:49:63:4b:90:7e:44:82:e4:70:4e:73:c8:2d:d2:
                    fa:05:bb:72:04:79:22:58:e5:25:4d:7c:ba:8d:35:
                    b7:6c:1b:34:95:df:75:f0:cd:aa:5d:49:46:38:37:
                    39:fd:96:cb:14:aa:25:54:a8:55:e6:a9:17:ee:97:
                    33:3a:e3:29:b1:31:70:d4:6c:32:57:f9:49:66:4a:
                    d6:5d:8c:e6:9b:65:a9:a5:eb:07:8e:87:8a:57:20:
                    fe:b0:61:05:51:0d:10:56:49:8e:e9:0f:fe:bf:8c:
                    f5:2c:87:c2:34:ec:6b:83:01:4c:f0:6c:bf:c8:74:
                    21:95:bc:3e:89:b6:ae:97:53:bb:32:88:48:dc:a2:
                    d9:97:b7:5d:81:25:86:8c:2f:dd:88:9c:1d:e4:73:
                    e6:41:fa:4e:eb:55:95:81:b4:0a:91:fb:2e:0a:24:
                    2e:de:33:03:77:c4:88:39:c6:06:44:05:b5:fa:05:
                    e3:2e:93:9e:65:06:bf:a1:e5:32:2c:d9:41:8c:6e:
                    3e:63:89:b6:5f:ab:82:bb:50:58:92:79:3e:53:6c:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2A:49:BE:EF:C3:F2:83:E6:BB:25:66:72:F9:6D:BA:DD:CD:67:2F
            X509v3 Authority Key Identifier:
                keyid:EB:B6:E5:59:FC:85:ED:8E:86:2D:63:58:A6:87:20:1B:26:E6:81:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/EBB6E559FC85ED8E862D6358A687201B26E68182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB6E559FC85ED8E862D6358A687201B26E68182.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/323830343a323035303a356162633a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:5abc::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:23:76:5b:0d:43:d1:d8:25:92:62:ff:30:43:e5:b4:b5:9a:
         5c:8a:97:29:3e:f5:99:4d:e3:0a:81:49:64:c8:84:dc:b6:fa:
         c6:ca:c3:d7:db:08:0e:44:22:5c:64:4e:a8:e3:9c:f6:a6:25:
         19:3c:56:97:ef:46:f0:c8:a0:db:be:2b:27:dd:ec:9b:6c:02:
         ac:7d:e4:9f:c9:21:7e:db:a3:c5:9e:41:f7:2c:77:5d:5a:9a:
         6d:41:4d:09:3d:fd:d1:59:e9:22:d0:95:a4:6e:86:36:89:d6:
         a9:8a:5d:d4:1a:43:c2:2f:a1:a3:c8:4e:0f:a0:10:e5:db:ac:
         8a:52:4a:04:cc:25:5d:69:e2:fa:73:88:c6:fa:48:52:2a:81:
         60:51:bf:54:3c:73:60:bb:5d:f3:c8:c0:3b:78:8b:39:58:b1:
         a6:75:b6:48:0f:a5:52:5f:e4:5c:12:df:7b:18:bc:39:b2:1a:
         e8:6d:52:32:92:63:c4:dd:31:d4:81:bf:5e:58:78:4a:11:22:
         12:f7:69:2e:50:68:df:9a:c4:f3:03:0b:39:50:d4:c4:36:27:
         90:06:21:6e:58:4e:ec:47:05:8c:1b:d5:88:1e:6d:de:58:65:
         33:51:e9:26:31:6b:30:76:9a:dd:39:09:a6:7c:a8:ca:53:a6:
         4d:64:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org