Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a666661313a3a2f34382d3438203d3e203238323338.roa
File:                     323830343a3335343a666661313a3a2f34382d3438203d3e203238323338.roa (raw, json)
Hash identifier:          haSae76bnTtyJDRDZkulhs+FkTdz86D8iEw4K2z0ElY=
Subject key identifier:   1B:DF:B2:07:B7:05:B0:39:50:97:C9:C9:C3:B3:BD:39:B0:95:EA:58
Certificate issuer:       /CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
Certificate serial:       6551BBEDEF8838CAC246FFC0BE4A50305D46AB94
Authority key identifier: 1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a666661313a3a2f34382d3438203d3e203238323338.roa
Signing time:             Wed 04 Jan 2023 13:23:41 +0000
ROA not before:           Wed 04 Jan 2023 13:18:41 +0000
ROA not after:            Wed 03 Jan 2024 13:23:41 +0000
asID:                     28238
IP address blocks:        2804:354:ffa1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:51:bb:ed:ef:88:38:ca:c2:46:ff:c0:be:4a:50:30:5d:46:ab:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
        Validity
            Not Before: Jan  4 13:18:41 2023 GMT
            Not After : Jan  3 13:23:41 2024 GMT
        Subject: CN=1BDFB207B705B0395097C9C9C3B3BD39B095EA58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:fb:cd:61:16:05:31:ac:35:7b:79:7a:0c:
                    20:23:89:fb:c2:aa:9c:ec:50:1b:f3:87:a0:ce:1b:
                    fc:93:5d:58:9e:eb:d7:4c:77:93:55:8b:38:5b:29:
                    c3:72:33:ab:3d:a3:40:bb:4a:47:09:df:15:cd:ca:
                    b1:94:4d:a7:47:35:9c:12:4b:46:21:2f:64:d4:cb:
                    36:89:8e:44:66:6e:7e:60:9a:b5:85:0f:88:b1:51:
                    c8:09:65:38:a4:b0:b4:25:16:05:04:5d:28:bf:be:
                    0e:d2:a8:72:36:64:db:a1:fe:c3:97:55:4f:d6:b1:
                    06:e8:d1:5c:89:b4:3f:9e:88:a0:52:cc:93:fa:ae:
                    f6:e1:e6:d6:11:d3:d1:5d:56:e9:9a:5f:22:2d:ea:
                    f1:57:bf:9c:af:0b:d2:f2:f5:13:5b:c5:4f:ee:6a:
                    60:72:a1:ca:25:82:d9:a0:7e:8a:64:72:3d:78:b7:
                    e6:16:b0:56:6f:52:46:6d:d0:31:d6:85:bc:ec:29:
                    60:f3:60:04:12:c1:1b:fe:26:e3:7e:6f:04:03:28:
                    09:10:15:26:ab:e3:d7:9b:72:d1:95:35:39:3f:50:
                    5a:e9:98:b5:be:6c:a0:1d:f9:3b:c7:25:2b:d3:e2:
                    f6:4c:da:4e:1f:34:99:f1:f2:90:a4:fe:3d:92:d9:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DF:B2:07:B7:05:B0:39:50:97:C9:C9:C3:B3:BD:39:B0:95:EA:58
            X509v3 Authority Key Identifier:
                keyid:1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a666661313a3a2f34382d3438203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354:ffa1::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:b0:60:05:19:26:39:77:fb:5e:05:f9:dd:00:90:fd:2e:4d:
         de:32:9f:50:5f:32:6a:63:7b:1d:64:04:78:2b:06:cd:bb:a5:
         3b:03:25:9a:5c:48:58:6e:ed:4b:2f:82:e3:de:8a:33:c4:11:
         8d:8e:02:89:1a:31:52:b8:d5:70:bd:c4:3a:a7:9e:c7:bb:e2:
         6a:22:29:88:44:e8:8b:e2:b2:33:31:94:7d:7a:8c:18:2c:43:
         38:94:a3:b1:20:f9:f3:26:c1:21:33:d9:78:d9:19:97:aa:bd:
         a1:46:c9:e7:26:6d:86:7b:1f:f6:61:6d:60:85:cc:cb:47:80:
         cc:fa:3c:fd:42:cd:6e:a9:e3:f9:78:ab:de:cc:3a:b5:2f:d1:
         f8:47:e3:4e:78:a4:09:7a:c8:f0:d6:cd:f3:c2:ef:b8:36:73:
         b5:76:cd:08:f5:6a:e9:66:a4:88:fb:cb:0c:00:57:2c:da:1c:
         cd:69:da:61:bf:a2:f5:92:72:b2:67:6d:4c:87:e7:26:c9:c9:
         ad:f1:ae:a6:05:bd:d8:b8:9a:47:4c:7d:ff:be:15:c7:a5:7c:
         94:da:3a:4b:1e:66:1d:4b:6c:ad:f3:26:28:2e:37:15:99:df:
         03:98:f7:91:dd:33:b1:eb:d4:44:e8:2b:ef:e6:1c:25:da:dd:
         9d:e4:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org