Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a3a2f33322d3332203d3e20323632383734.roa
File:                     323830343a3335343a3a2f33322d3332203d3e20323632383734.roa (raw, json)
Hash identifier:          6kyDUpHlVWgaPZcwwbgUkJ2owok3por/wYQdgCkJg9Q=
Subject key identifier:   8C:93:B4:F9:F2:9F:1C:31:5E:BD:14:E5:A1:17:13:06:87:2B:76:E6
Certificate issuer:       /CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
Certificate serial:       5A746DD47DB5E2AEB794F05814585093173273F8
Authority key identifier: 1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a3a2f33322d3332203d3e20323632383734.roa
Signing time:             Mon 05 Dec 2022 14:02:13 +0000
ROA not before:           Mon 05 Dec 2022 13:57:13 +0000
ROA not after:            Mon 04 Dec 2023 14:02:13 +0000
asID:                     262874
IP address blocks:        2804:354::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:74:6d:d4:7d:b5:e2:ae:b7:94:f0:58:14:58:50:93:17:32:73:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
        Validity
            Not Before: Dec  5 13:57:13 2022 GMT
            Not After : Dec  4 14:02:13 2023 GMT
        Subject: CN=8C93B4F9F29F1C315EBD14E5A1171306872B76E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:e3:75:97:c0:dc:09:0f:0c:e7:b3:72:bc:
                    80:3b:14:90:e1:e7:04:26:b1:f1:61:41:7b:a3:7b:
                    c2:28:25:d0:8d:24:a9:ef:ff:58:b4:c7:a2:d2:36:
                    09:08:6c:39:5d:e2:e6:0e:9f:58:40:68:1f:1c:a5:
                    fa:c1:d8:51:f7:c5:d7:95:6b:90:2d:fe:98:51:a6:
                    1e:3f:39:fb:c2:f9:fc:12:2a:dd:08:34:12:ec:f5:
                    e6:f5:98:6b:bd:9f:a4:b2:96:7d:38:93:a7:b1:ec:
                    71:7d:5a:17:82:db:72:bd:f6:0d:db:ab:42:e3:17:
                    9a:75:64:c1:41:5b:16:86:83:2c:aa:ef:32:47:e9:
                    90:6d:cc:7e:21:95:3f:4d:c6:03:4a:74:af:2f:fc:
                    94:23:d5:4a:d4:3b:27:ee:7d:c3:75:f2:d8:00:fb:
                    47:3b:53:18:84:ea:33:85:57:ce:8b:b4:9a:65:47:
                    c7:9a:b7:91:03:fa:8c:ec:04:69:9f:be:e1:bd:e2:
                    15:0b:76:e7:a3:4b:58:b0:6a:b3:a3:79:86:8a:92:
                    19:2c:62:11:80:4e:f8:91:3c:69:9b:a4:cd:e5:94:
                    17:59:3b:aa:6d:99:71:97:0c:e5:25:23:bc:6f:fe:
                    fa:0b:84:31:bf:11:ab:6b:bb:64:3d:fc:32:0d:e1:
                    27:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:93:B4:F9:F2:9F:1C:31:5E:BD:14:E5:A1:17:13:06:87:2B:76:E6
            X509v3 Authority Key Identifier:
                keyid:1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a3a2f33322d3332203d3e20323632383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:6d:64:f8:a5:ae:83:d7:a2:29:8b:9c:e8:c8:7f:03:e0:5a:
         7f:ef:5e:6c:08:ee:55:04:f6:32:2f:8a:2e:04:fe:51:bb:78:
         c7:0e:04:ae:8b:77:4f:b2:1d:5b:03:ab:6f:61:0b:98:63:65:
         fe:68:4b:b8:17:e9:e5:44:0f:51:9d:8b:53:00:d9:83:4c:b9:
         67:86:59:1e:73:41:97:98:6d:85:e0:5d:a8:c4:61:57:d1:82:
         30:7b:72:0f:b2:23:7b:bd:3d:bc:8f:fb:14:f1:7d:44:12:70:
         02:33:83:65:53:bf:77:b6:e0:c6:9c:20:de:da:9d:c4:b9:77:
         69:36:69:bd:91:94:ef:b6:da:72:e8:70:67:43:cf:9e:16:9f:
         ff:d7:14:23:cf:ac:f6:70:19:c7:e8:83:9f:a8:7c:60:c2:33:
         c3:e9:9b:fb:ce:03:61:b5:47:ef:a2:33:2e:be:65:37:fc:c3:
         40:cd:27:b1:76:a1:c7:ea:ea:b0:60:81:37:95:ce:4d:23:2f:
         e4:09:c9:10:e7:ca:72:e9:18:f2:40:b4:d1:60:b1:0d:22:1d:
         1a:79:2e:7e:f2:09:03:9f:05:0b:8f:f7:ed:f2:5a:c3:75:33:
         38:f0:7a:2b:e7:87:4e:4a:5f:53:e2:47:7f:82:bb:92:6a:ed:
         08:34:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org