Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/323830343a6432383a3a2f33322d3430203d3e203532363034.roa
File:                     323830343a6432383a3a2f33322d3430203d3e203532363034.roa (raw, json)
Hash identifier:          hjegMkes29ZY1hPIMgiYA0L46u/qK8Fcy9hQ94JYs9Y=
Subject key identifier:   FC:26:A1:E3:59:DA:2A:A9:39:DD:DF:93:76:5E:B3:82:CD:D0:84:A1
Certificate issuer:       /CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
Certificate serial:       3D0A97821435E1F2781018172B17201A9DEA96EA
Authority key identifier: 68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/323830343a6432383a3a2f33322d3430203d3e203532363034.roa
Signing time:             Wed 22 Nov 2023 22:00:01 +0000
ROA not before:           Wed 22 Nov 2023 21:55:01 +0000
ROA not after:            Wed 20 Nov 2024 22:00:01 +0000
asID:                     52604
IP address blocks:        2804:d28::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0a:97:82:14:35:e1:f2:78:10:18:17:2b:17:20:1a:9d:ea:96:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
        Validity
            Not Before: Nov 22 21:55:01 2023 GMT
            Not After : Nov 20 22:00:01 2024 GMT
        Subject: CN=FC26A1E359DA2AA939DDDF93765EB382CDD084A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:e9:88:35:1a:56:27:07:7e:a7:b8:a9:13:
                    e1:a9:ef:7b:cd:fd:04:ac:a4:74:8c:a0:92:fd:6e:
                    e1:ea:17:7a:30:0b:9d:02:9e:3f:8e:54:e0:3d:c4:
                    0b:53:c6:64:de:68:5b:8b:22:62:21:32:b3:b4:8f:
                    35:1c:0d:db:e0:49:ea:0d:1e:94:53:03:a8:1b:63:
                    e3:c8:dd:8e:dd:7e:8e:c2:e0:42:25:2e:3d:f6:b6:
                    87:f2:e8:aa:dd:56:5c:f6:5a:f8:cd:be:f3:56:ea:
                    4d:5b:c9:b2:43:ab:1b:76:3b:79:8a:e2:60:be:fc:
                    33:b2:e2:69:ca:c7:63:70:00:6c:b0:79:4d:98:fb:
                    f5:6d:cf:5e:f6:d5:62:d9:91:4b:e7:ff:ab:b0:f3:
                    20:6f:ba:4e:f6:f8:b3:25:98:34:9d:15:57:9b:e9:
                    9f:cd:27:5f:30:b9:d8:4f:49:8d:40:87:0f:ec:b6:
                    78:93:ad:3e:a1:96:6e:dc:7f:11:89:3b:42:a6:0c:
                    16:b1:67:0c:b8:7c:5f:5d:83:c1:a2:c2:2e:07:a4:
                    cc:de:c9:ee:6b:85:63:37:44:49:eb:62:88:b3:b0:
                    dd:bc:51:de:b8:7b:bf:11:82:a2:9b:c5:60:e4:89:
                    d7:cf:5c:a5:49:3d:fe:b2:a8:4a:f1:1e:8f:b8:dc:
                    6e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:26:A1:E3:59:DA:2A:A9:39:DD:DF:93:76:5E:B3:82:CD:D0:84:A1
            X509v3 Authority Key Identifier:
                keyid:68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/323830343a6432383a3a2f33322d3430203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:c0:5c:c1:e2:f0:67:20:83:c9:95:d7:79:8c:0f:e6:5f:
         94:e2:1f:ee:18:89:89:d2:20:ee:1f:aa:e6:75:4e:10:74:e4:
         4c:8a:c7:51:fd:be:d9:de:c3:90:e6:55:cb:80:a1:7d:0f:eb:
         85:09:e4:b7:2a:b1:23:0c:81:94:35:9f:85:f3:d5:ef:99:f3:
         67:c6:e0:f9:73:c0:1c:83:d7:74:9b:0d:72:1a:34:49:8b:5c:
         f1:68:a8:ba:8a:c9:f1:1a:d6:ac:63:6f:79:1b:5c:54:1d:21:
         f1:48:dd:75:50:e0:fc:5f:7e:95:21:6d:bd:7b:82:e4:f0:8f:
         9d:25:97:49:a6:ea:db:ae:8c:85:a0:0c:33:b2:c4:79:00:16:
         21:67:cc:13:a3:19:0e:f8:49:3b:c1:6e:86:07:89:25:e8:b0:
         7c:52:c1:22:af:71:04:13:87:4f:af:f9:08:33:50:80:50:31:
         9e:17:b9:f1:28:ca:f9:a2:e6:c3:6b:f9:8c:c3:f4:70:0a:e6:
         84:ab:e1:e1:ce:91:5c:aa:2a:69:a9:02:81:d0:55:c3:eb:61:
         58:24:35:05:25:01:c0:dc:e3:ed:22:f7:78:21:70:4e:71:f7:
         0b:8a:13:bf:fe:71:bd:4a:d5:4f:a5:d7:06:8d:8a:1f:7c:20:
         f6:6e:f2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org