Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a303a633a3a2f36342d3634203d3e20323632343933.roa
File:                     323830343a6665633a303a633a3a2f36342d3634203d3e20323632343933.roa (raw, json)
Hash identifier:          ja1LohZUK94Di66RKRNxbVBN5fV5AQlNPLGbzvuton4=
Subject key identifier:   DA:80:4A:25:1C:B9:D4:EB:FD:F2:02:72:64:92:A4:7A:A2:A7:70:26
Certificate issuer:       /CN=0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD
Certificate serial:       6D14292FCEEA80781809B77FBCAD96B2B9E381E7
Authority key identifier: 0D:F8:C6:48:F4:3D:15:1F:7E:0B:2A:65:3C:71:74:F8:8F:FC:EB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a303a633a3a2f36342d3634203d3e20323632343933.roa
Signing time:             Fri 10 Mar 2023 12:54:00 +0000
ROA not before:           Fri 10 Mar 2023 12:49:00 +0000
ROA not after:            Fri 08 Mar 2024 12:54:00 +0000
asID:                     262493
IP address blocks:        2804:fec:0:c::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:14:29:2f:ce:ea:80:78:18:09:b7:7f:bc:ad:96:b2:b9:e3:81:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD
        Validity
            Not Before: Mar 10 12:49:00 2023 GMT
            Not After : Mar  8 12:54:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:00:b8:c1:39:1c:53:0b:a0:85:e2:dd:0c:
                    d2:78:23:df:66:8c:c5:48:dd:6a:35:da:fb:1f:2c:
                    9f:db:9f:7f:e5:5f:c4:d1:5a:d9:08:0e:cb:13:2c:
                    a4:34:82:8d:09:b5:13:dc:cb:ef:84:5c:0f:0d:13:
                    06:cc:66:7e:41:7c:9c:93:24:83:7a:cc:c7:7b:7c:
                    40:eb:af:2f:6a:d8:b9:74:0d:6a:9e:b9:b6:73:e0:
                    a0:53:1c:63:8a:54:a0:29:b6:84:19:ab:93:6a:a1:
                    90:c8:a9:7f:e5:de:2b:0a:a8:12:77:db:31:42:c2:
                    56:b4:29:28:d2:bc:e6:7d:68:8f:1e:ce:33:66:97:
                    f5:25:c4:d5:d8:aa:41:c5:ad:e9:b7:ae:d6:c8:7f:
                    7e:8a:b0:be:84:dd:4e:5f:3b:7d:0c:bf:bb:a3:0a:
                    bd:3a:c4:f2:81:e1:f9:2d:d4:b4:0a:22:df:d9:b3:
                    e8:60:2b:9e:fb:c2:b3:bd:a6:50:6a:5c:13:18:56:
                    fb:6d:79:14:41:05:94:ce:04:39:30:ee:82:62:fc:
                    7d:df:da:fc:b7:3b:17:f2:af:e0:08:d5:75:3d:27:
                    f8:05:7c:22:4d:18:8e:67:f5:2d:70:d1:6f:8b:e1:
                    5c:e1:9d:e0:ca:29:c7:cc:bd:48:4e:00:13:25:df:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:80:4A:25:1C:B9:D4:EB:FD:F2:02:72:64:92:A4:7A:A2:A7:70:26
            X509v3 Authority Key Identifier:
                keyid:0D:F8:C6:48:F4:3D:15:1F:7E:0B:2A:65:3C:71:74:F8:8F:FC:EB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a303a633a3a2f36342d3634203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:0:c::/64

    Signature Algorithm: sha256WithRSAEncryption
         81:ff:19:c2:a3:b2:bb:0d:8b:2c:51:c1:31:95:7c:74:98:4d:
         07:d3:98:3f:17:61:35:ba:00:ef:cd:29:c8:dc:46:3c:3f:72:
         44:86:cc:6f:45:78:b7:4f:1a:ea:00:6f:75:11:2c:01:64:2d:
         19:ed:30:19:99:98:97:4c:77:7d:0c:97:09:7b:14:69:8a:ef:
         28:66:96:16:96:19:3d:ae:4f:e4:1b:d1:33:43:34:63:f7:13:
         39:c3:af:a3:be:48:65:a9:ef:5a:de:c6:cc:8c:0a:01:bf:9c:
         55:c0:41:31:48:b3:e0:e0:18:ae:0a:7e:88:6d:fe:85:c2:31:
         f6:ef:fc:98:f6:e8:53:df:65:6b:bb:24:8d:d3:fe:82:91:d8:
         18:48:1b:53:dc:d1:3c:46:cf:8b:43:86:4a:2d:af:e5:55:16:
         1f:ca:f9:0f:cc:23:8a:84:65:68:14:c4:dc:68:73:de:a5:d8:
         66:69:cf:aa:50:4f:c9:86:61:d8:54:e3:78:f4:97:0e:24:6b:
         03:e8:33:86:9d:94:76:98:e8:49:9c:3d:4e:d7:c7:50:92:34:
         b5:d3:e2:f1:17:4e:7f:a1:7c:38:a0:57:47:45:5c:b4:43:65:
         23:3e:b6:8f:04:f2:c8:d2:92:e5:83:df:64:d4:00:6d:d9:29:
         10:57:fd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org