Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/323830343a343763343a3a2f33322d3332203d3e203532363036.roa
File:                     323830343a343763343a3a2f33322d3332203d3e203532363036.roa (raw, json)
Hash identifier:          JpKxvadDD+xAxdB07L/2WL375Aj3AoNzYXBjX33ysHo=
Subject key identifier:   4E:61:E6:D6:EA:82:B3:22:E5:1A:95:BE:53:A4:22:16:31:D5:92:9E
Certificate issuer:       /CN=66E9523D9F7C86C66D2E586378D3E905BEE51041
Certificate serial:       250E09DD04BF0F7034DE4C353CF590B12C95C549
Authority key identifier: 66:E9:52:3D:9F:7C:86:C6:6D:2E:58:63:78:D3:E9:05:BE:E5:10:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66E9523D9F7C86C66D2E586378D3E905BEE51041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/323830343a343763343a3a2f33322d3332203d3e203532363036.roa
Signing time:             Fri 04 Aug 2023 13:18:11 +0000
ROA not before:           Fri 04 Aug 2023 13:13:11 +0000
ROA not after:            Fri 02 Aug 2024 13:18:11 +0000
asID:                     52606
IP address blocks:        2804:47c4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0e:09:dd:04:bf:0f:70:34:de:4c:35:3c:f5:90:b1:2c:95:c5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66E9523D9F7C86C66D2E586378D3E905BEE51041
        Validity
            Not Before: Aug  4 13:13:11 2023 GMT
            Not After : Aug  2 13:18:11 2024 GMT
        Subject: CN=4E61E6D6EA82B322E51A95BE53A4221631D5929E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:d4:af:5d:e7:ca:56:2b:7f:b0:c8:0d:57:
                    95:32:a3:18:35:be:fe:a6:6a:a2:07:43:7b:0d:c5:
                    70:13:50:ea:3a:e5:8f:e0:a8:ca:48:cb:0b:5f:7b:
                    74:9c:fa:ed:3c:24:8d:1e:44:43:f5:0e:96:6d:cf:
                    30:37:0d:f3:1b:1c:e6:14:55:d4:17:c6:7f:5e:58:
                    be:72:e5:af:79:34:7f:dc:44:c0:9c:09:86:44:ab:
                    49:ad:b8:7b:9b:f7:89:9c:00:c9:a3:8f:9c:54:5a:
                    a2:27:1e:fa:ee:b9:26:78:88:d5:23:d3:76:ea:02:
                    f2:d6:db:e2:07:c6:1a:d9:1f:2c:ba:8d:95:ae:08:
                    a3:24:2c:1c:67:49:ea:94:bd:50:a6:99:01:9d:b6:
                    b3:bb:ea:82:d7:58:6d:b0:4d:b2:0b:ed:dd:5f:56:
                    79:cc:b6:7f:e8:9f:6f:cd:5b:98:ea:29:5c:72:a0:
                    7e:21:22:0f:a2:62:18:51:1f:39:7b:d3:f8:61:6b:
                    2f:be:1f:f2:a1:5c:57:4d:d6:64:91:1d:f7:fd:4e:
                    d9:3f:d4:e6:3d:7d:b7:36:bd:94:68:d6:0e:b7:80:
                    9d:c1:2e:24:8b:12:7a:70:54:ed:ca:28:17:cf:92:
                    35:d6:29:d5:7b:99:6c:50:b8:b3:ad:7f:de:83:b1:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:61:E6:D6:EA:82:B3:22:E5:1A:95:BE:53:A4:22:16:31:D5:92:9E
            X509v3 Authority Key Identifier:
                keyid:66:E9:52:3D:9F:7C:86:C6:6D:2E:58:63:78:D3:E9:05:BE:E5:10:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/66E9523D9F7C86C66D2E586378D3E905BEE51041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66E9523D9F7C86C66D2E586378D3E905BEE51041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/323830343a343763343a3a2f33322d3332203d3e203532363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:f5:aa:4a:17:9d:8d:80:21:5f:00:69:c9:1d:95:8a:09:81:
         38:95:a4:10:ad:2b:a2:3a:20:67:8c:0a:e2:fe:d2:43:27:56:
         ed:16:07:f8:f5:2d:5d:cd:df:9e:92:ad:5b:44:a9:d4:27:97:
         da:d3:a8:9a:ab:4d:8a:c2:ec:8c:e2:87:54:a9:21:7d:27:f6:
         7c:83:e7:c2:fe:41:57:57:85:72:80:ef:e6:2b:27:4e:0d:68:
         3e:f1:1c:3d:29:e4:7f:45:d3:db:98:41:2a:40:0e:ab:e4:c0:
         ff:80:74:db:43:4a:71:53:74:0f:e5:4a:2d:5b:e5:fb:72:e6:
         b0:15:91:78:7f:c0:f4:3e:f0:80:8f:21:c9:53:36:e6:a3:53:
         07:5a:bb:52:23:ff:ab:51:31:37:25:44:8a:fa:c0:53:4a:4d:
         fe:d8:94:f4:a2:c1:e5:4e:ea:07:a1:9a:3e:74:17:f3:6b:74:
         7d:13:2f:e0:ea:e1:c5:36:25:cf:e8:3f:ce:f0:57:40:c4:35:
         73:d5:e3:d0:16:4a:72:55:3d:a6:50:0b:88:d1:98:36:82:3b:
         78:40:f7:e0:c8:7a:b8:1b:a7:cb:f6:21:e5:29:ff:6e:9b:16:
         13:36:b1:b1:07:e1:68:1b:3f:0c:09:07:95:43:da:fd:a8:f5:
         c1:67:44:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org