Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/1/323830343a333635633a3a2f33322d313238203d3e20323636333433.roa
File:                     323830343a333635633a3a2f33322d313238203d3e20323636333433.roa (raw, json)
Hash identifier:          /pGnGKd0BF6QI7rYWkcqqgIpYiI7SdtH0VB8sIzm+ak=
Subject key identifier:   65:E1:CC:22:AA:E0:D0:CD:C5:7B:50:5A:4C:A2:32:3B:50:B2:84:DB
Certificate issuer:       /CN=A2EF5A29320B90E1B74D49BF320060FEC27F394F
Certificate serial:       6650CCF6767469028E05805A17D5CDD0121C9E27
Authority key identifier: A2:EF:5A:29:32:0B:90:E1:B7:4D:49:BF:32:00:60:FE:C2:7F:39:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2EF5A29320B90E1B74D49BF320060FEC27F394F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/1/323830343a333635633a3a2f33322d313238203d3e20323636333433.roa
Signing time:             Thu 04 Apr 2024 13:19:01 +0000
ROA not before:           Thu 04 Apr 2024 13:14:01 +0000
ROA not after:            Thu 03 Apr 2025 13:19:01 +0000
asID:                     266343
IP address blocks:        2804:365c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:50:cc:f6:76:74:69:02:8e:05:80:5a:17:d5:cd:d0:12:1c:9e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2EF5A29320B90E1B74D49BF320060FEC27F394F
        Validity
            Not Before: Apr  4 13:14:01 2024 GMT
            Not After : Apr  3 13:19:01 2025 GMT
        Subject: CN=65E1CC22AAE0D0CDC57B505A4CA2323B50B284DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:22:22:14:e7:b0:73:8e:3f:56:04:e0:15:
                    3f:ee:68:ef:5a:f5:b6:5b:2e:76:76:d5:8d:ae:81:
                    b2:fb:f9:d0:69:31:fb:fb:cd:19:13:81:0e:0e:89:
                    d7:08:8a:f2:84:b9:5a:75:4a:96:97:85:b6:d8:0e:
                    32:68:05:34:cd:76:b1:aa:c1:b3:0f:db:5a:40:da:
                    33:8b:26:60:e1:26:4f:89:bf:b5:07:9c:ad:c5:5a:
                    14:6a:b7:64:55:7c:9e:1e:1c:a4:7e:ae:20:7c:88:
                    c5:1c:c8:c3:02:3c:d2:39:1b:82:e3:69:1e:3e:e4:
                    71:e6:2a:09:2d:de:c4:c8:76:30:0a:fe:42:5d:39:
                    3e:c1:8c:c3:0e:ef:00:41:e8:17:eb:fe:7a:78:47:
                    45:d9:ed:80:df:ca:02:67:23:a2:9a:a4:46:f5:75:
                    00:6b:38:0b:96:30:d6:d0:c5:61:c9:9d:4f:09:2b:
                    f3:31:36:17:8a:77:c9:55:6c:4c:a0:71:83:6c:ec:
                    f0:b6:6a:0e:02:19:dc:85:0b:0f:86:8f:30:cf:1d:
                    46:3f:15:c4:34:87:2e:b1:13:31:b4:27:a0:14:d4:
                    96:f4:aa:97:18:e2:db:f1:a5:1d:2b:d9:24:2c:41:
                    32:9f:4e:d7:76:e3:48:11:75:74:9f:ee:bc:e0:13:
                    13:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E1:CC:22:AA:E0:D0:CD:C5:7B:50:5A:4C:A2:32:3B:50:B2:84:DB
            X509v3 Authority Key Identifier:
                keyid:A2:EF:5A:29:32:0B:90:E1:B7:4D:49:BF:32:00:60:FE:C2:7F:39:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/1/A2EF5A29320B90E1B74D49BF320060FEC27F394F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2EF5A29320B90E1B74D49BF320060FEC27F394F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/1/323830343a333635633a3a2f33322d313238203d3e20323636333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:365c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:7e:0c:36:a7:10:0d:6f:ed:32:9b:1b:89:d9:81:f7:3d:8c:
         fe:fd:c8:07:75:e7:ba:a0:c6:73:27:f4:6d:10:06:0b:21:74:
         b5:bd:27:e8:b4:0d:0a:ec:8a:12:60:d4:a5:e8:58:2a:42:20:
         e9:bf:77:a6:98:9b:1b:a2:d8:e7:a4:93:b2:db:9f:28:de:e6:
         d2:b8:91:9a:3b:f0:72:eb:c5:22:c5:79:5f:46:c9:e6:68:3f:
         d1:41:36:a5:fb:ec:66:3a:ae:35:87:7f:c7:a2:19:e4:2b:64:
         09:f6:6b:ae:0b:c8:f7:ff:03:db:5d:44:b7:c6:e5:67:5a:c1:
         b9:03:cb:0d:c4:6f:74:a4:23:ff:a1:ca:c7:aa:1f:71:83:bd:
         11:40:ee:71:f0:23:06:c0:26:9a:6f:bb:c4:ba:f8:7c:ed:b2:
         b7:66:d0:03:c5:64:78:57:2c:99:29:bd:34:5f:fa:dd:4f:a7:
         ee:80:c4:f8:5d:9f:38:07:eb:d0:cb:06:fe:7f:ca:fd:0c:46:
         be:fc:43:68:6e:3d:fa:22:90:cd:0c:b7:c3:5d:fd:9f:a2:c0:
         11:2e:21:3c:76:d8:31:ab:da:fd:9f:7a:ae:0f:29:be:41:8f:
         81:7f:52:2e:87:6b:19:37:0d:c2:8f:38:7d:8b:1e:88:80:70:
         a6:46:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org