Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/323830343a323035303a366162633a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a366162633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          3yFx4O6Rg4Nk+jaNk350Wsu0x7qO+IIojOONECi27O8=
Subject key identifier:   2D:A9:61:65:D1:63:52:48:72:9C:37:8C:39:AC:6B:51:B8:A8:8E:E2
Certificate issuer:       /CN=EBB6E559FC85ED8E862D6358A687201B26E68182
Certificate serial:       7855AB677BFBDF8908EA4D4A91F5BB97B4308341
Authority key identifier: EB:B6:E5:59:FC:85:ED:8E:86:2D:63:58:A6:87:20:1B:26:E6:81:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB6E559FC85ED8E862D6358A687201B26E68182.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/323830343a323035303a366162633a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Thu 04 Apr 2024 09:08:37 +0000
ROA not before:           Thu 04 Apr 2024 09:03:37 +0000
ROA not after:            Thu 03 Apr 2025 09:08:37 +0000
asID:                     264485
IP address blocks:        2804:2050:6abc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:55:ab:67:7b:fb:df:89:08:ea:4d:4a:91:f5:bb:97:b4:30:83:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB6E559FC85ED8E862D6358A687201B26E68182
        Validity
            Not Before: Apr  4 09:03:37 2024 GMT
            Not After : Apr  3 09:08:37 2025 GMT
        Subject: CN=2DA96165D1635248729C378C39AC6B51B8A88EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:ff:df:3c:87:e3:bb:18:9d:30:7d:a9:e5:
                    03:c2:10:77:9d:bb:67:3f:3f:79:67:d6:53:d5:56:
                    3d:af:fe:55:7d:e5:4f:85:f7:7e:c6:45:a1:f5:84:
                    cd:f4:54:c4:69:8d:71:86:02:16:6a:e9:b7:68:96:
                    81:6c:94:c4:4f:1d:a8:68:2b:36:61:87:cd:69:01:
                    24:ae:f9:8a:3b:78:f4:0c:1c:7c:78:83:1d:5b:92:
                    cf:53:bf:79:48:15:fd:8b:1d:9b:7a:f0:2e:c4:cd:
                    df:df:e6:9f:31:b8:c5:da:75:22:b4:ed:7f:16:c9:
                    f9:b0:04:e7:e4:5b:c5:ae:73:9c:d0:71:0e:d2:e4:
                    03:0e:fb:3f:72:d3:f2:93:c1:1a:c3:0d:95:6c:c6:
                    95:4a:37:0e:11:64:da:87:f6:6f:7a:f8:04:b4:8a:
                    72:10:43:e1:8b:2e:43:82:3d:13:e1:70:25:0c:e0:
                    91:9b:41:58:b8:30:51:4a:99:b6:1d:ce:2d:61:13:
                    08:9f:61:17:28:5a:4a:9c:fe:cb:87:94:f3:51:7d:
                    68:f8:4d:a5:15:e9:74:95:39:81:76:20:cd:7c:5b:
                    5b:fd:af:d8:9c:bf:a9:fb:6f:9a:c2:a6:c8:c5:1b:
                    bf:f3:f9:90:4f:4a:27:d6:1f:84:0d:ae:75:a8:f9:
                    0f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:61:65:D1:63:52:48:72:9C:37:8C:39:AC:6B:51:B8:A8:8E:E2
            X509v3 Authority Key Identifier:
                keyid:EB:B6:E5:59:FC:85:ED:8E:86:2D:63:58:A6:87:20:1B:26:E6:81:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/EBB6E559FC85ED8E862D6358A687201B26E68182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB6E559FC85ED8E862D6358A687201B26E68182.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/323830343a323035303a366162633a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:6abc::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:d1:da:5b:2f:f0:98:d2:31:f3:82:1c:3d:fe:3c:b2:71:c5:
         47:85:64:09:9f:9f:67:57:e9:75:d7:d3:3a:97:02:f7:b7:e5:
         f1:3d:0a:12:c2:8a:ec:76:a4:4d:17:34:27:12:3d:68:a1:a9:
         8f:24:70:7e:0f:ad:d2:f8:7f:d4:15:81:d7:c8:14:27:f7:1b:
         b5:7d:fa:13:aa:f7:6a:f8:c6:9a:69:0d:82:31:c8:bc:3f:fd:
         c0:ce:be:26:ac:0c:38:ad:13:62:e1:2f:d3:cd:b0:87:0a:74:
         9c:1b:92:7e:2f:96:be:9d:a9:ce:78:c8:bb:4a:fd:68:d3:6f:
         dd:8a:99:b2:d7:89:d5:32:0f:13:db:1d:f8:ef:f7:03:87:07:
         f0:44:32:a9:b4:c6:40:b9:49:6f:79:e9:97:45:e3:8f:35:dd:
         e9:bf:e1:1e:8f:1c:d0:38:0e:c4:55:f5:00:46:06:d2:70:83:
         55:d6:f8:11:61:5b:0f:d4:ca:1d:2c:16:47:3e:71:99:ea:54:
         a4:8e:86:22:ce:02:8b:20:90:f5:ad:d8:a0:e9:fb:67:f1:78:
         2b:9b:49:72:09:f6:0f:dc:ba:43:6c:b7:9c:b6:96:3e:77:57:
         15:7e:50:7f:5f:da:89:11:1e:67:b8:91:1c:8a:94:5c:8c:21:
         ab:ca:e6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org