Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/1/323830343a3832633a3a2f33322d3438203d3e20323632333535.roa
File:                     323830343a3832633a3a2f33322d3438203d3e20323632333535.roa (raw, json)
Hash identifier:          U45P7TuK/H63lp80wxcW8pK2CRLLmnrnjfih2wUm0N4=
Subject key identifier:   8E:A9:F7:46:FC:16:71:87:7D:88:A7:D1:84:8D:05:6C:11:8A:32:1D
Certificate issuer:       /CN=BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615
Certificate serial:       245B2DDC8A76A7023B3485567523DE9D64399458
Authority key identifier: BD:2C:AC:A4:44:36:57:3E:8C:2E:F9:5C:18:E1:CB:5F:E2:F0:F6:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/1/323830343a3832633a3a2f33322d3438203d3e20323632333535.roa
Signing time:             Wed 03 Apr 2024 21:24:09 +0000
ROA not before:           Wed 03 Apr 2024 21:19:09 +0000
ROA not after:            Wed 02 Apr 2025 21:24:09 +0000
asID:                     262355
IP address blocks:        2804:82c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5b:2d:dc:8a:76:a7:02:3b:34:85:56:75:23:de:9d:64:39:94:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615
        Validity
            Not Before: Apr  3 21:19:09 2024 GMT
            Not After : Apr  2 21:24:09 2025 GMT
        Subject: CN=8EA9F746FC1671877D88A7D1848D056C118A321D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:36:f0:a8:8b:ba:50:a2:95:7e:2d:66:4e:d9:
                    7c:20:2d:e2:6a:08:1d:96:71:65:d4:95:45:21:c6:
                    1b:38:d9:13:be:51:bb:e5:7b:d1:0a:43:f0:ee:72:
                    72:ce:cf:e7:67:26:08:40:14:96:a7:46:0c:d8:4a:
                    df:fb:16:1b:7c:37:53:b6:1c:ba:3e:5b:61:46:d2:
                    9f:b3:97:80:95:42:7c:cb:1a:e7:5b:48:fd:b9:1d:
                    1d:9f:00:6f:e3:4b:56:83:18:b6:65:82:57:bf:3f:
                    35:31:14:df:41:dd:a4:8b:f5:f2:a3:16:69:91:02:
                    0a:d7:c2:02:53:c3:10:e0:4c:6c:b9:dc:49:7a:a9:
                    db:34:3d:a0:eb:20:9f:30:77:88:f4:d1:7a:73:b0:
                    e7:d8:92:29:45:04:0e:2d:a1:72:6f:02:91:d3:c5:
                    64:a1:4a:69:f7:38:dc:c7:58:c2:ba:f2:48:73:3c:
                    31:0d:e5:61:d0:10:fa:b7:07:5a:50:80:9e:b3:c3:
                    ae:d0:31:82:b4:f0:01:98:af:34:2d:8c:b1:e2:5b:
                    b1:bf:5d:25:86:a6:73:6a:c1:be:f3:cf:62:5d:aa:
                    2e:e0:e8:f6:42:16:b0:55:da:85:6e:56:76:18:97:
                    a7:c2:00:91:50:92:41:b5:2f:f3:5a:6e:ce:ec:94:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A9:F7:46:FC:16:71:87:7D:88:A7:D1:84:8D:05:6C:11:8A:32:1D
            X509v3 Authority Key Identifier:
                keyid:BD:2C:AC:A4:44:36:57:3E:8C:2E:F9:5C:18:E1:CB:5F:E2:F0:F6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/1/BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/1/323830343a3832633a3a2f33322d3438203d3e20323632333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:20:c7:80:f8:68:21:49:fb:33:26:31:37:ae:d6:63:82:d6:
         7b:56:3a:22:b0:d3:2d:a1:0b:40:b6:52:ac:20:30:95:50:a8:
         29:eb:5e:46:32:f3:ba:0b:95:1f:52:e7:64:5d:6c:40:a0:33:
         4e:3d:7b:84:ec:c1:71:3e:45:6f:24:00:72:c5:04:1a:7d:ba:
         c8:06:15:f4:13:82:ad:cf:8d:a4:ef:77:1c:50:39:85:31:4c:
         fc:89:42:5c:20:1f:f7:e0:50:e8:97:19:3f:31:1e:48:dc:b9:
         95:45:e1:0c:0d:10:a2:dc:8c:68:1b:ef:d9:be:ce:ad:b5:c3:
         34:1d:d7:3b:38:5e:c8:ee:9a:8e:c1:29:57:46:a3:32:6e:fe:
         d1:a5:7c:9f:82:e2:ba:bd:40:e9:df:21:b3:3c:9a:e8:f6:ef:
         5e:bf:26:c1:8c:5e:de:bf:b1:e9:18:26:4a:86:b7:f4:81:bc:
         a6:3d:95:74:15:20:f5:1c:b6:40:05:5c:32:90:df:11:61:8c:
         ae:bf:4d:3d:c4:4d:64:af:05:b3:b1:93:35:69:20:4a:c8:43:
         18:24:00:30:05:25:fa:51:a7:d8:74:4a:97:78:fd:70:8b:01:
         f1:4d:9d:53:cd:5d:23:88:5f:fe:66:83:d9:ab:be:ca:25:46:
         c9:b9:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org