Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/323830343a336331383a3a2f33332d3333203d3e20323636313930.roa
File:                     323830343a336331383a3a2f33332d3333203d3e20323636313930.roa (raw, json)
Hash identifier:          vW+iJGfoaidM0dPKMtRwTrMs4T51UocHVc8+kmwhHHI=
Subject key identifier:   D6:87:14:65:31:1E:9C:84:74:B4:EF:E3:05:D2:3A:CC:6A:F3:CC:A1
Certificate issuer:       /CN=443C52A1E1B3E17578094AEB52B4600E6650CDD5
Certificate serial:       5FB362A4351E16383DDBA2B5691B595D931FF2E3
Authority key identifier: 44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/323830343a336331383a3a2f33332d3333203d3e20323636313930.roa
Signing time:             Thu 21 Sep 2023 21:30:10 +0000
ROA not before:           Thu 21 Sep 2023 21:25:10 +0000
ROA not after:            Thu 19 Sep 2024 21:30:10 +0000
asID:                     266190
IP address blocks:        2804:3c18::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b3:62:a4:35:1e:16:38:3d:db:a2:b5:69:1b:59:5d:93:1f:f2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443C52A1E1B3E17578094AEB52B4600E6650CDD5
        Validity
            Not Before: Sep 21 21:25:10 2023 GMT
            Not After : Sep 19 21:30:10 2024 GMT
        Subject: CN=D6871465311E9C8474B4EFE305D23ACC6AF3CCA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:12:be:3a:48:fd:3f:f0:7d:56:af:11:9f:
                    65:98:26:c6:b1:f2:5e:6c:0d:ef:84:44:0c:06:9d:
                    dd:56:f1:5f:a5:0c:3c:33:1e:5d:44:7f:24:ef:3d:
                    e4:9b:65:99:f7:31:d7:d9:f5:23:9c:a7:f6:a6:d0:
                    68:72:66:bf:ca:3c:70:a2:29:64:98:d7:eb:d3:94:
                    cb:20:78:bd:c8:88:4d:34:1b:08:df:75:89:b6:5c:
                    b3:67:ba:65:94:33:cc:a4:eb:38:c6:8f:a9:58:72:
                    cb:61:64:fe:f5:99:50:74:95:43:3d:ed:fc:84:f2:
                    fe:f3:aa:a8:11:0f:59:db:24:a8:74:cd:e7:38:bd:
                    27:0b:0f:59:38:fd:a2:9f:db:b6:7f:57:ac:37:31:
                    52:b0:5c:23:d5:2c:e9:5c:58:f3:1d:88:bf:68:eb:
                    89:b8:41:ee:a5:58:93:36:c3:2e:18:c2:47:af:9f:
                    87:d3:dd:6b:83:f4:6c:b7:3c:a0:f8:4a:74:df:bc:
                    67:83:99:ea:0e:b8:d7:39:c4:de:b6:17:72:74:a2:
                    92:84:8c:eb:7c:09:e3:97:33:c2:15:b6:c5:a2:56:
                    87:ef:8f:be:73:17:a7:af:84:df:0c:b7:32:20:e1:
                    e8:46:a9:c2:16:e2:28:35:c2:ec:d5:94:73:49:04:
                    2e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:87:14:65:31:1E:9C:84:74:B4:EF:E3:05:D2:3A:CC:6A:F3:CC:A1
            X509v3 Authority Key Identifier:
                keyid:44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/323830343a336331383a3a2f33332d3333203d3e20323636313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c18::/33

    Signature Algorithm: sha256WithRSAEncryption
         a4:6e:0e:67:38:fd:73:5b:46:98:9a:05:71:9c:80:02:c1:58:
         0c:68:44:9f:d6:0f:4f:4a:8b:ee:3b:ab:c6:9c:53:5c:49:5a:
         4b:45:ed:7d:2c:ba:1d:3f:70:74:23:c4:21:b4:8c:80:e8:46:
         52:4e:2a:79:af:7d:43:e8:64:d5:e8:2d:73:5a:9a:55:af:5b:
         03:1f:21:eb:33:82:c6:b1:5f:ac:e7:7f:ab:4f:2a:7c:86:74:
         d5:67:41:83:92:9f:06:e6:52:cd:eb:eb:4d:d1:42:11:a3:f3:
         e1:2b:76:ff:e9:ee:37:0f:c5:bc:cb:58:04:f9:7a:7b:2f:d1:
         f1:f7:8d:62:f7:5d:77:85:40:a5:5d:52:2f:ff:d1:ac:2c:39:
         cc:69:95:b7:9c:2e:e1:02:3c:3b:2d:5d:4f:e2:03:bc:f9:dc:
         f1:9f:c4:10:e4:2c:f5:2b:7f:e8:88:a0:fe:f4:87:5d:a9:e7:
         0e:29:08:4c:dc:f0:2e:1b:a4:7a:52:ef:31:3a:a1:77:24:da:
         df:73:10:d6:de:cb:a8:69:f5:d4:72:dc:a5:10:fb:44:ef:63:
         e6:81:dc:00:43:68:93:12:b4:93:9b:ae:0a:f3:85:01:b4:1f:
         3a:f0:3e:18:e5:28:99:63:14:0a:09:c9:19:0e:4b:a7:59:ab:
         71:c9:d9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org