Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a3a2f33322d3332203d3e20323633363631.roa
File:                     323830343a313132383a3a2f33322d3332203d3e20323633363631.roa (raw, json)
Hash identifier:          T2DveyhwLuxx+q6doCV3WLD84h8SWeTQoKqTdtk4uvc=
Subject key identifier:   75:BB:69:04:AC:DD:79:EF:E5:C7:9E:82:2B:5C:C8:C2:A3:25:CE:D5
Certificate issuer:       /CN=1F461E0163E83106F84ADF1433865326051B09F5
Certificate serial:       70BE9777B294938F79421FE44135A8D04BB79C3B
Authority key identifier: 1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a3a2f33322d3332203d3e20323633363631.roa
Signing time:             Thu 28 Mar 2024 18:44:58 +0000
ROA not before:           Thu 28 Mar 2024 18:39:58 +0000
ROA not after:            Thu 27 Mar 2025 18:44:58 +0000
asID:                     263661
IP address blocks:        2804:1128::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:be:97:77:b2:94:93:8f:79:42:1f:e4:41:35:a8:d0:4b:b7:9c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F461E0163E83106F84ADF1433865326051B09F5
        Validity
            Not Before: Mar 28 18:39:58 2024 GMT
            Not After : Mar 27 18:44:58 2025 GMT
        Subject: CN=75BB6904ACDD79EFE5C79E822B5CC8C2A325CED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:cc:18:53:6a:e9:b7:7c:74:2e:8e:ed:49:
                    d0:94:f0:a1:58:5a:b7:f2:78:0a:bb:cd:63:de:dc:
                    85:87:9b:4c:5b:bd:75:f3:3b:f5:c4:83:9d:9d:4c:
                    55:46:33:2e:fb:3b:dd:17:7e:5e:c3:61:31:98:0e:
                    e6:74:5c:e1:23:45:44:f9:1a:ed:e0:80:3f:1f:cf:
                    ed:c7:29:a9:ea:06:d5:27:32:76:0d:ac:20:f8:4a:
                    aa:32:cd:7d:0b:86:94:80:32:e4:2b:9f:36:7f:a8:
                    9d:f5:4a:69:51:59:b4:cf:b2:a1:d1:57:e2:1c:08:
                    21:c8:54:cf:e8:56:8b:27:a7:bb:ba:a6:64:24:67:
                    54:ad:28:38:b4:1f:91:8b:fc:10:95:1b:30:bf:62:
                    3d:4a:f8:97:f6:f8:a0:e4:31:66:da:1b:c5:7e:20:
                    8a:bd:fb:c9:2c:dc:f9:ec:84:2b:66:a9:dc:b3:e7:
                    1a:2c:a4:94:dd:d3:cd:6d:69:ca:94:f1:84:61:4d:
                    6e:db:e1:bb:13:21:49:5e:ea:90:ff:ca:68:d4:7a:
                    6e:34:5c:2c:6a:14:e2:c9:30:77:c1:80:4c:e4:02:
                    5f:5f:72:8e:b9:2d:d4:1b:f5:08:dd:f9:f7:c4:3a:
                    c8:5d:62:bb:a9:47:b5:b2:d8:cb:21:95:30:72:a2:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BB:69:04:AC:DD:79:EF:E5:C7:9E:82:2B:5C:C8:C2:A3:25:CE:D5
            X509v3 Authority Key Identifier:
                keyid:1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/1F461E0163E83106F84ADF1433865326051B09F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a3a2f33322d3332203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:44:97:16:38:00:4b:45:4e:0c:35:2f:38:08:ca:b0:e7:bc:
         ad:3e:21:00:3d:93:ce:c8:f6:40:b2:46:e9:7c:50:1a:96:f7:
         58:9f:25:04:68:f7:56:15:76:2f:37:88:45:e8:56:52:7d:2b:
         af:3c:2b:1d:9c:78:f2:18:8f:0a:91:ef:6a:2f:74:d2:ec:b8:
         71:c2:8d:5e:7f:1b:4b:83:64:0a:59:b7:6f:3e:f7:c8:1d:2b:
         cf:3d:fa:e8:47:f3:d8:10:c1:0e:fe:b1:dd:ec:db:f7:ac:0c:
         59:2e:21:a6:6d:07:cc:cf:08:8c:c8:78:b0:f9:c3:41:8b:13:
         82:55:18:6d:d5:43:c8:a1:01:a0:a1:b1:8b:a6:4e:13:24:e5:
         cb:93:5d:96:61:49:45:b5:92:c4:bd:cc:99:27:4e:24:18:48:
         65:ce:cd:1c:6a:32:53:a0:92:ca:4f:cb:0e:7d:dc:06:cc:37:
         90:b0:98:53:d4:17:7b:ef:9e:44:9a:54:83:54:b7:da:23:77:
         1e:9e:3a:0f:63:4f:d2:fc:ba:00:8f:fa:7b:c4:3b:90:de:16:
         0b:d3:3e:10:2e:bc:9e:9a:11:d0:e1:ea:aa:b7:4a:50:0f:b0:
         03:4c:3f:82:97:31:d5:f0:37:8f:99:01:a6:25:e7:44:a4:7f:
         54:53:99:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org