Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/323830343a3261383a3a2f33322d313238203d3e20323632383330.roa
File:                     323830343a3261383a3a2f33322d313238203d3e20323632383330.roa (raw, json)
Hash identifier:          Z38aTc3Ah4JVhgW1epL4s0H1ToThJyzTkfLyw2CK9hw=
Subject key identifier:   E1:0F:A3:54:D0:B2:99:35:55:49:99:CE:CF:45:75:25:33:EC:B7:54
Certificate issuer:       /CN=C2E766FF08C2E10FBAC140414BCC53321D358C79
Certificate serial:       04404825A4B5E2E58FB8A04823999DA3C7260C71
Authority key identifier: C2:E7:66:FF:08:C2:E1:0F:BA:C1:40:41:4B:CC:53:32:1D:35:8C:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/323830343a3261383a3a2f33322d313238203d3e20323632383330.roa
Signing time:             Tue 02 Apr 2024 11:31:55 +0000
ROA not before:           Tue 02 Apr 2024 11:26:55 +0000
ROA not after:            Tue 01 Apr 2025 11:31:55 +0000
asID:                     262830
IP address blocks:        2804:2a8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:40:48:25:a4:b5:e2:e5:8f:b8:a0:48:23:99:9d:a3:c7:26:0c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2E766FF08C2E10FBAC140414BCC53321D358C79
        Validity
            Not Before: Apr  2 11:26:55 2024 GMT
            Not After : Apr  1 11:31:55 2025 GMT
        Subject: CN=E10FA354D0B29935554999CECF45752533ECB754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b9:86:a4:2d:f9:5c:42:25:81:0e:95:51:df:
                    63:94:60:d9:ac:af:50:5b:27:67:b7:cb:60:3a:e2:
                    48:c6:09:bf:c5:0d:86:7f:1e:dc:ab:1e:be:62:61:
                    ba:f0:34:af:9d:1a:fc:d4:ab:a4:87:8e:78:68:61:
                    2c:27:ea:d4:b6:5c:78:d6:f0:cf:fc:7a:8c:3c:7d:
                    4e:48:28:d6:97:fb:0f:78:d0:3f:c2:cb:70:3f:8d:
                    77:ef:39:17:32:e1:d7:29:5b:da:ce:26:85:af:ad:
                    36:42:88:84:00:51:32:ce:bf:4b:f4:f7:72:69:d8:
                    5d:9e:d7:ef:ee:56:75:74:d0:fc:9f:6c:bd:98:6d:
                    65:c4:e2:f2:42:13:c1:ec:0f:9a:fc:5f:c3:ad:1e:
                    e8:a9:6a:86:a2:9f:7e:fe:03:21:09:d5:8f:78:8e:
                    c0:cc:62:2d:fa:97:2c:ab:23:52:dc:4a:b6:1e:22:
                    5b:a5:8c:90:69:1f:c3:b4:54:df:71:88:d7:5f:01:
                    9c:29:e6:96:20:73:f7:db:7e:18:ca:01:3a:ec:3d:
                    27:3e:dc:74:c7:db:6c:51:39:03:16:b6:ad:37:d5:
                    8b:f0:30:ed:bf:22:94:e2:ab:b9:f3:e8:ef:fa:79:
                    57:e2:b6:00:ff:c9:bf:5c:d2:0f:0c:44:18:a5:35:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0F:A3:54:D0:B2:99:35:55:49:99:CE:CF:45:75:25:33:EC:B7:54
            X509v3 Authority Key Identifier:
                keyid:C2:E7:66:FF:08:C2:E1:0F:BA:C1:40:41:4B:CC:53:32:1D:35:8C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/323830343a3261383a3a2f33322d313238203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:0f:0c:88:00:5f:d9:fa:fb:b5:3e:34:ca:10:3f:74:76:cd:
         3d:c2:ff:6f:59:19:00:64:26:13:f0:8b:09:da:71:d4:81:a0:
         1f:43:ac:1d:57:46:c0:85:53:0d:8a:86:86:87:e9:9f:b2:47:
         35:ab:2f:0a:2f:bf:a7:6f:bf:5b:7c:e8:3e:1f:49:3c:b7:c3:
         84:75:fc:45:b2:f6:e5:6b:2f:63:7b:c3:e3:ce:99:19:99:aa:
         44:bc:5d:44:20:32:d1:99:c4:aa:6a:10:70:9b:f7:17:9a:e5:
         3b:ef:8a:ec:69:83:07:05:50:8b:1e:ba:e3:84:d2:4f:77:91:
         c5:08:57:3c:3d:ef:2a:d3:12:f2:d2:c6:59:be:e8:63:c1:b4:
         cd:86:55:3e:5c:3c:1e:49:a9:6a:b2:cf:57:9b:ec:0e:d2:d5:
         68:00:b0:86:01:bb:66:f4:88:85:17:3d:ce:c6:23:f4:d7:e2:
         69:88:1a:ca:7f:88:dc:9e:2a:85:78:bb:86:b5:9d:c0:e7:af:
         6a:c7:b8:6b:2e:ec:d5:57:2b:0d:e8:3e:33:6a:6b:40:a3:a7:
         33:68:37:5f:77:07:cb:cd:96:c0:1c:62:67:5d:91:66:b0:3b:
         d9:e7:5a:a5:3d:be:0a:e8:02:af:3c:87:09:5e:8c:1c:90:ff:
         67:0f:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org