Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a383030303a3a2f34302d3430203d3e20323633363631.roa
File:                     323830343a313132383a383030303a3a2f34302d3430203d3e20323633363631.roa (raw, json)
Hash identifier:          pcdnxZmX6o7NO9OmUhpzXo1fHTo5T6DR5dXSlW3Dc9g=
Subject key identifier:   18:8E:5D:4C:C3:8F:A1:95:86:CD:B7:AC:7B:E3:07:01:7B:01:B4:10
Certificate issuer:       /CN=1F461E0163E83106F84ADF1433865326051B09F5
Certificate serial:       765FA955011ED588163354537846D9F404F3B4C3
Authority key identifier: 1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a383030303a3a2f34302d3430203d3e20323633363631.roa
Signing time:             Thu 28 Mar 2024 18:45:06 +0000
ROA not before:           Thu 28 Mar 2024 18:40:06 +0000
ROA not after:            Thu 27 Mar 2025 18:45:06 +0000
asID:                     263661
IP address blocks:        2804:1128:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5f:a9:55:01:1e:d5:88:16:33:54:53:78:46:d9:f4:04:f3:b4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F461E0163E83106F84ADF1433865326051B09F5
        Validity
            Not Before: Mar 28 18:40:06 2024 GMT
            Not After : Mar 27 18:45:06 2025 GMT
        Subject: CN=188E5D4CC38FA19586CDB7AC7BE307017B01B410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:cd:e0:33:fc:2d:cd:59:60:dc:a1:2b:39:
                    16:0b:7e:6b:40:21:a5:b6:4b:3d:5b:a3:36:84:4d:
                    8c:f9:5f:46:8e:fc:07:1c:76:b0:ed:63:91:e3:66:
                    7a:f4:ae:db:26:54:00:c2:97:98:d4:54:6c:5f:9d:
                    46:1c:23:c3:8c:04:1c:cf:31:f7:ea:26:fc:f9:bf:
                    63:cc:a6:96:15:c7:53:52:1f:33:22:e6:42:12:38:
                    de:5b:00:00:00:4c:d9:7e:ee:9f:76:07:34:a7:77:
                    8f:4a:cb:ac:08:2c:b5:0e:8b:25:15:fd:c3:87:ec:
                    b7:0e:05:dd:f7:e1:91:0e:b3:ce:59:fa:06:e9:85:
                    12:33:26:74:21:24:0a:5c:67:48:5c:2b:21:6a:a3:
                    62:5d:a8:39:25:e0:cc:23:20:6b:d2:2c:f0:67:f2:
                    6a:ae:41:67:74:ca:3c:45:27:9e:cf:b3:97:6a:42:
                    59:99:0e:19:ac:86:1e:7f:b9:5e:80:f3:2c:23:27:
                    d0:ef:33:e9:e0:93:c8:ac:d4:94:a1:dc:e2:aa:89:
                    02:aa:3b:1f:db:43:31:38:0d:3f:1a:4b:bf:2b:78:
                    24:10:7f:15:23:2b:d7:a9:42:f3:85:7c:da:bf:f4:
                    06:5b:a4:a1:ee:f8:78:d8:a6:ff:20:01:9d:e1:14:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8E:5D:4C:C3:8F:A1:95:86:CD:B7:AC:7B:E3:07:01:7B:01:B4:10
            X509v3 Authority Key Identifier:
                keyid:1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/1F461E0163E83106F84ADF1433865326051B09F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a383030303a3a2f34302d3430203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:13:c8:19:06:10:68:05:82:62:a8:86:95:6d:8d:8e:0b:ec:
         28:41:be:4a:f3:1e:e6:aa:41:01:e8:31:d1:f0:5f:57:89:a6:
         f0:45:8d:66:ff:04:66:fb:34:4b:83:96:df:51:de:70:40:ef:
         0a:8f:0d:b4:d7:cc:85:3e:ba:b4:af:8d:0f:17:46:14:ce:5a:
         52:d6:cf:e3:24:ce:62:59:0f:f2:2d:6b:6a:4d:9e:6f:9e:b1:
         79:ea:d7:82:4d:06:4e:a9:a1:35:04:7c:3f:eb:4a:d5:39:8d:
         ea:3d:51:15:5f:4f:37:01:05:b5:36:df:fb:fa:14:b2:4b:ea:
         6d:43:49:52:0b:e3:31:99:69:23:22:0a:aa:38:7a:a7:b1:71:
         12:22:fb:a4:31:6f:bd:29:b4:64:57:7f:18:4c:3c:11:5d:d6:
         29:90:a5:c0:d1:35:b9:6c:f1:b8:35:d8:15:58:cf:ad:6e:65:
         4b:1a:2a:53:c1:fc:bf:89:cc:b6:35:22:3e:4c:9d:f7:f6:1a:
         47:95:b3:f0:81:7e:5f:1d:c8:fa:0e:5c:59:23:79:cb:62:ea:
         cb:69:ff:63:2f:4e:dc:12:9c:83:56:38:7b:a1:b9:36:1a:3f:
         b6:62:8d:cc:f8:7f:b1:8e:24:b9:69:a1:f8:65:d1:c3:e7:73:
         34:8b:a2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org