Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a313030303a3a2f34302d3430203d3e20323637363638.roa
File:                     323830343a343530383a313030303a3a2f34302d3430203d3e20323637363638.roa (raw, json)
Hash identifier:          zRh2ZI18+Z6bWamnR24BCij5xOtbbENeUhv4Pf0YskQ=
Subject key identifier:   06:F1:A2:0A:1D:B6:75:B4:57:D0:06:BB:61:CF:D5:6E:3E:6A:16:A8
Certificate issuer:       /CN=EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD
Certificate serial:       293E1270E6B57A68F2B47E9C37F2DCD5D6342FBA
Authority key identifier: EC:25:BD:62:AE:2E:72:DD:FA:24:A0:80:4A:B5:C7:F7:2A:1F:F0:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a313030303a3a2f34302d3430203d3e20323637363638.roa
Signing time:             Thu 06 Apr 2023 18:51:06 +0000
ROA not before:           Thu 06 Apr 2023 18:46:06 +0000
ROA not after:            Thu 04 Apr 2024 18:51:06 +0000
asID:                     267668
IP address blocks:        2804:4508:1000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3e:12:70:e6:b5:7a:68:f2:b4:7e:9c:37:f2:dc:d5:d6:34:2f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD
        Validity
            Not Before: Apr  6 18:46:06 2023 GMT
            Not After : Apr  4 18:51:06 2024 GMT
        Subject: CN=06F1A20A1DB675B457D006BB61CFD56E3E6A16A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:33:3a:d5:f0:d5:3a:28:85:f8:6e:3b:89:ef:
                    08:a3:c2:c3:12:36:ca:bf:81:12:a8:a2:ab:4c:16:
                    02:f2:80:b5:1b:d5:d8:20:cc:51:51:8c:8c:2d:4b:
                    ab:85:02:1e:76:2d:e8:94:cd:b0:09:dc:6d:3a:5b:
                    2b:61:a0:bb:f1:72:0d:91:0a:b8:29:44:c2:53:1c:
                    2e:5a:2d:8b:8f:9e:df:cd:c1:fd:e7:2a:70:3f:d8:
                    c1:06:79:57:ad:74:a2:1d:17:45:14:72:d8:90:73:
                    2b:81:00:5f:8b:48:c0:27:b0:59:ae:61:91:73:1c:
                    5b:69:0d:70:84:c8:40:33:ae:86:8d:3f:68:5a:3b:
                    d5:d7:8f:8b:21:ec:4d:c7:f6:3c:af:e1:b4:c7:5d:
                    5c:88:12:4a:29:2b:81:c2:94:80:d8:63:d4:7e:3b:
                    e3:a7:bd:65:c8:d8:73:78:86:20:84:c8:ee:61:ef:
                    1e:16:1d:07:ae:34:af:18:aa:ed:e8:9e:61:ae:87:
                    28:46:4e:47:33:58:f6:c6:63:b2:35:9b:53:61:3e:
                    75:97:bd:0b:5e:7e:f3:e3:b3:52:ba:c9:96:f4:da:
                    96:4d:77:27:0d:9b:7d:68:5e:6c:cd:9a:5a:ff:5d:
                    55:90:52:05:15:3b:d7:35:5f:83:35:24:70:8c:15:
                    9d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F1:A2:0A:1D:B6:75:B4:57:D0:06:BB:61:CF:D5:6E:3E:6A:16:A8
            X509v3 Authority Key Identifier:
                keyid:EC:25:BD:62:AE:2E:72:DD:FA:24:A0:80:4A:B5:C7:F7:2A:1F:F0:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a313030303a3a2f34302d3430203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:ba:18:75:92:ec:27:43:a8:68:c1:1c:63:d8:42:d8:43:23:
         0c:33:20:c5:c7:42:0b:c1:91:fe:58:1e:70:cc:3c:31:ac:37:
         b3:35:44:2f:5c:45:62:0e:c5:97:a5:31:61:2e:f4:a1:d7:7d:
         5d:88:2e:b7:5f:76:a6:83:9f:f6:08:2f:51:33:e7:a6:df:cf:
         95:71:42:10:a3:c2:ae:a9:99:18:41:d8:06:a3:2b:11:7d:be:
         a9:5e:80:f8:71:01:6b:ca:f6:8d:48:6a:24:01:a6:fc:19:eb:
         bc:62:21:40:c3:bb:26:f5:c9:05:30:03:60:d3:6f:50:c4:75:
         42:7c:f9:b3:27:6b:72:59:84:2b:d4:a3:a2:d0:13:58:d2:1b:
         9a:b8:39:23:cf:f1:55:66:38:af:f3:5e:b3:a7:d3:76:0a:37:
         db:d0:6e:47:d8:ee:f4:a0:00:73:18:2c:96:c4:3a:52:c3:0f:
         26:3b:6e:70:f5:f9:04:b6:f5:32:cb:cc:67:97:f8:b8:c7:19:
         4c:2e:06:9d:67:57:67:2e:53:c7:54:cf:cb:8c:f2:fa:62:76:
         17:41:4c:a1:d3:42:c4:14:9c:1e:04:65:33:f8:77:a0:6f:e3:
         77:20:08:da:1f:64:98:de:8a:3b:8f:9a:a5:98:26:24:1d:36:
         05:74:27:7b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKT4ScOa1emjytH6cN/Lc1dY0L7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyNUJENjJBRTJFNzJEREZBMjRBMDgwNEFCNUM3Rjcy
QTFGRjBERDAeFw0yMzA0MDYxODQ2MDZaFw0yNDA0MDQxODUxMDZaMDMxMTAvBgNV
BAMTKDA2RjFBMjBBMURCNjc1QjQ1N0QwMDZCQjYxQ0ZENTZFM0U2QTE2QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTMzrV8NU6KIX4bjuJ7wijwsMS
Nsq/gRKooqtMFgLygLUb1dggzFFRjIwtS6uFAh52LeiUzbAJ3G06WythoLvxcg2R
CrgpRMJTHC5aLYuPnt/Nwf3nKnA/2MEGeVetdKIdF0UUctiQcyuBAF+LSMAnsFmu
YZFzHFtpDXCEyEAzroaNP2haO9XXj4sh7E3H9jyv4bTHXVyIEkopK4HClIDYY9R+
O+OnvWXI2HN4hiCEyO5h7x4WHQeuNK8Yqu3onmGuhyhGTkczWPbGY7I1m1NhPnWX
vQtefvPjs1K6yZb02pZNdycNm31oXmzNmlr/XVWQUgUVO9c1X4M1JHCMFZ3BAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUBvGiCh22dbRX0Aa7Yc/Vbj5qFqgwHwYDVR0j
BBgwFoAU7CW9Yq4uct36JKCASrXH9yof8N0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVVicEZZS1RRc21WcG45b3dqcUN2TnlxQ3NCM1hkNzJOVzVnWkd5aWt5
TGEvMC9FQzI1QkQ2MkFFMkU3MkRERkEyNEEwODA0QUI1QzdGNzJBMUZGMERELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VDMjVCRDYyQUUyRTcyRERG
QTI0QTA4MDRBQjVDN0Y3MkExRkYwREQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVYnBGWUtUUXNtVnBuOW93anFDdk55cUNzQjNYZDcyTlc1Z1pHeWlreUxhLzAv
MzIzODMwMzQzYTM0MzUzMDM4M2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzM2MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgERQgQMA0GCSqGSIb3DQEBCwUA
A4IBAQCfuhh1kuwnQ6howRxj2ELYQyMMMyDFx0ILwZH+WB5wzDwxrDezNUQvXEVi
DsWXpTFhLvSh131diC63X3amg5/2CC9RM+em38+VcUIQo8KuqZkYQdgGoysRfb6p
XoD4cQFryvaNSGokAab8Geu8YiFAw7sm9ckFMANg029QxHVCfPmzJ2tyWYQr1KOi
0BNY0huauDkjz/FVZjiv816zp9N2Cjfb0G5H2O70oABzGCyWxDpSww8mO25w9fkE
tvUyy8xnl/i4xxlMLgadZ1dnLlPHVM/LjPL6YnYXQUyh00LEFJweBGUz+Hegb+N3
IAjaH2SY3oo7j5qlmCYkHTYFdCd7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org