Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a383030303a3a2f33342d3334203d3e20323637363638.roa
File:                     323830343a343530383a383030303a3a2f33342d3334203d3e20323637363638.roa (raw, json)
Hash identifier:          +nXAJVqAr0c+cUCcp9DE/lAxhJfG5TFg7rPLzUspxfE=
Subject key identifier:   A4:F2:4C:53:63:85:F2:8C:EE:FA:D7:B5:2B:8E:6C:0D:33:01:D7:26
Certificate issuer:       /CN=D04F30B05726FA543C147DA94BFBD44C1D936300
Certificate serial:       21E9962A58C954009A469F277FAF0CBD528FAF31
Authority key identifier: D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a383030303a3a2f33342d3334203d3e20323637363638.roa
Signing time:             Tue 13 Feb 2024 19:17:04 +0000
ROA not before:           Tue 13 Feb 2024 19:12:04 +0000
ROA not after:            Tue 11 Feb 2025 19:17:04 +0000
asID:                     267668
IP address blocks:        2804:4508:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e9:96:2a:58:c9:54:00:9a:46:9f:27:7f:af:0c:bd:52:8f:af:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04F30B05726FA543C147DA94BFBD44C1D936300
        Validity
            Not Before: Feb 13 19:12:04 2024 GMT
            Not After : Feb 11 19:17:04 2025 GMT
        Subject: CN=A4F24C536385F28CEEFAD7B52B8E6C0D3301D726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:f1:9b:53:02:70:ac:16:da:66:11:14:17:
                    cb:78:0f:1a:f6:9d:37:3c:fc:65:11:0b:01:ab:e2:
                    f1:bf:ea:7d:75:87:f8:11:1c:b2:a4:f8:d7:7c:f3:
                    5c:b1:a5:46:52:6a:23:32:95:56:19:43:77:6e:12:
                    18:60:7c:e2:4a:b3:13:29:7c:64:c8:a3:5f:78:67:
                    b4:b2:da:07:f6:8b:ff:a6:b5:99:f9:2f:16:d6:86:
                    2e:9f:a6:ed:9e:d9:0b:75:90:11:a1:d3:bf:43:b9:
                    dc:44:15:85:56:fa:0f:ce:6a:f7:02:f3:b1:96:17:
                    d9:cf:46:c8:0a:9e:2f:5b:e2:0e:05:16:5e:7f:7d:
                    5f:70:03:05:26:06:91:ec:a9:9d:67:3b:b3:c9:25:
                    01:07:11:f7:74:9e:f9:96:b3:49:0e:5c:92:89:06:
                    c2:55:6e:96:2a:50:4e:7f:8b:7a:1e:47:b1:e3:0e:
                    28:9a:2f:01:a8:39:ee:f5:1e:96:a5:3a:f6:3d:17:
                    78:4f:ac:92:25:fd:c5:03:c3:de:83:17:de:63:2a:
                    93:5f:1d:78:dd:55:c4:0f:85:d0:a2:1e:ea:45:7b:
                    fd:9d:66:af:b8:0e:83:86:96:14:3f:ec:dc:4c:9d:
                    cd:70:22:df:ba:35:b6:3b:46:4a:7b:09:e4:d9:77:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F2:4C:53:63:85:F2:8C:EE:FA:D7:B5:2B:8E:6C:0D:33:01:D7:26
            X509v3 Authority Key Identifier:
                keyid:D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/D04F30B05726FA543C147DA94BFBD44C1D936300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a383030303a3a2f33342d3334203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:52:69:4d:cf:7f:90:d2:52:7f:9e:b3:d5:ea:92:d8:8b:a9:
         77:c9:2b:b3:04:9f:57:72:c7:2b:08:ca:c9:64:a0:87:3b:23:
         bb:ed:02:66:f7:7d:22:05:3a:bf:2f:4e:fc:c4:5b:f9:4a:ab:
         25:05:52:fc:a7:56:8f:41:ec:69:72:32:cc:a7:a3:56:2e:9e:
         cb:f7:27:cb:2a:bc:66:32:ed:cf:8c:4f:ef:bc:cb:cf:5a:22:
         17:65:26:0e:47:54:00:2f:52:eb:74:71:bb:a8:ec:6d:00:0c:
         27:cb:fb:cd:40:57:0b:e7:65:e8:bf:8b:ed:87:da:12:0b:81:
         97:40:db:e6:a3:05:56:99:7d:b7:d5:8d:56:f8:d0:31:8e:c8:
         bd:c0:91:63:75:43:3d:39:4a:bd:73:a4:4e:33:95:e3:1a:66:
         ec:2b:b7:50:99:ab:dd:0b:93:58:55:18:c9:76:c8:0b:a5:4a:
         4d:47:f5:8f:7c:7d:05:1f:59:2c:d1:f4:8f:b7:1a:c0:06:a2:
         a4:f0:12:69:e7:3b:44:3b:7e:15:78:6a:f6:33:87:d3:94:cd:
         e3:b7:4c:61:b0:25:91:b4:24:9d:38:f9:de:5f:51:47:5c:c5:
         f0:cb:32:6a:4c:f7:28:6e:99:ca:0c:4b:e6:10:9b:19:8c:c6:
         42:50:e2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org