Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/0/323830343a343634343a3a2f33322d3334203d3e20323636393739.roa
File:                     323830343a343634343a3a2f33322d3334203d3e20323636393739.roa (raw, json)
Hash identifier:          jCuvpOlMpmP8skwFwmhZubkuI3zp36mfHthDdplAHZw=
Subject key identifier:   02:DF:32:02:5D:A7:46:89:8B:9E:D2:72:6A:E8:B1:61:EB:F9:2F:D7
Certificate issuer:       /CN=2846EF00ABCF957143EA63F63FEA122DA8D3143E
Certificate serial:       096BAA63744C14AF436B0EE0BE5289B1930BBFB3
Authority key identifier: 28:46:EF:00:AB:CF:95:71:43:EA:63:F6:3F:EA:12:2D:A8:D3:14:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2846EF00ABCF957143EA63F63FEA122DA8D3143E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/0/323830343a343634343a3a2f33322d3334203d3e20323636393739.roa
Signing time:             Sat 15 Jul 2023 16:00:00 +0000
ROA not before:           Sat 15 Jul 2023 15:55:00 +0000
ROA not after:            Mon 15 Jul 2024 16:00:00 +0000
asID:                     266979
IP address blocks:        2804:4644::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6b:aa:63:74:4c:14:af:43:6b:0e:e0:be:52:89:b1:93:0b:bf:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2846EF00ABCF957143EA63F63FEA122DA8D3143E
        Validity
            Not Before: Jul 15 15:55:00 2023 GMT
            Not After : Jul 15 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a1:41:22:37:85:24:3c:9d:bd:ac:0d:74:90:
                    6b:c4:7e:5a:3c:4e:6f:5b:d0:bb:0f:e6:c0:bb:ad:
                    74:f5:8b:46:d4:25:a6:80:9f:c8:e0:0a:ff:75:68:
                    eb:3c:39:82:76:96:6e:7b:1e:0e:dd:60:c5:ae:f2:
                    ba:a4:39:c3:59:70:57:83:54:33:d2:10:66:a0:0a:
                    94:02:79:ca:6e:ec:76:ea:41:a4:b4:40:c8:ae:c7:
                    26:bd:e1:44:f0:71:dc:30:88:63:d1:07:25:d3:43:
                    83:f8:0d:fa:84:1d:1a:b0:80:31:e3:f7:ff:a4:57:
                    c3:3e:ba:21:80:f4:bb:66:a6:1a:d8:2b:72:45:4c:
                    7c:40:86:50:db:9b:7f:a0:8f:ee:5a:47:fc:b3:0d:
                    dc:25:6d:f9:c3:88:56:d6:b3:9e:ff:2e:56:b0:c6:
                    2c:ec:e6:1b:31:6e:c7:b0:58:14:95:79:9e:1b:e4:
                    2d:2c:4f:a9:73:d7:d0:04:d3:32:ad:cc:cc:e9:bd:
                    f7:32:a8:7e:62:10:27:d4:96:e3:06:ae:ec:b8:c6:
                    bc:12:dd:9c:a9:06:47:f4:24:a0:2a:98:e2:d9:31:
                    16:ce:7a:ed:b2:d1:7d:42:10:d3:89:99:77:a5:ff:
                    7e:0e:4e:f7:9d:3f:dd:ab:7f:a5:bc:05:b9:78:ed:
                    c3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DF:32:02:5D:A7:46:89:8B:9E:D2:72:6A:E8:B1:61:EB:F9:2F:D7
            X509v3 Authority Key Identifier:
                keyid:28:46:EF:00:AB:CF:95:71:43:EA:63:F6:3F:EA:12:2D:A8:D3:14:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/0/2846EF00ABCF957143EA63F63FEA122DA8D3143E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2846EF00ABCF957143EA63F63FEA122DA8D3143E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/0/323830343a343634343a3a2f33322d3334203d3e20323636393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4644::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:46:6f:9c:c8:72:8d:ef:ee:e4:28:be:61:68:9e:42:c4:0a:
         53:9b:3e:2a:3f:63:60:3e:71:35:03:73:50:06:d3:29:2b:06:
         e8:b3:9d:ff:dd:53:23:4b:b6:57:71:af:8b:3e:cf:ed:09:c1:
         10:ce:5e:91:15:16:47:55:96:b5:0c:69:e7:c6:5c:aa:77:fd:
         52:b6:93:4c:60:ac:c1:b9:90:7b:58:b8:6a:6b:15:ec:a0:d0:
         8f:c1:6f:2d:9a:5e:36:ba:18:ff:f2:88:ab:76:0b:7a:f8:b6:
         2c:f7:bd:1b:f5:46:ca:2b:1a:36:b6:6b:a1:05:d9:87:93:84:
         ed:7d:2f:37:06:2b:16:4e:97:0a:d7:b3:35:05:66:7e:de:61:
         db:8f:c3:b8:a0:e0:56:0f:e1:bf:22:b1:d0:4b:3c:5f:fa:53:
         16:a7:c7:5d:cc:68:e3:75:a1:e0:4f:ad:28:ef:96:b4:45:10:
         7b:5d:63:fd:f0:76:65:d0:69:b7:9a:62:5d:19:b5:f6:39:46:
         f1:4c:e1:6c:72:e6:a5:0e:e8:8c:5b:99:a1:b7:c9:2e:9c:a1:
         83:7c:56:2f:3b:14:86:bf:2b:5a:a2:4c:df:ba:64:81:3b:00:
         18:04:90:8f:4f:dc:33:29:11:51:4f:8c:66:e7:66:e9:f6:6b:
         56:51:a5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org