Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/323830343a343963303a3a2f33322d3438203d3e20323637323031.roa
File:                     323830343a343963303a3a2f33322d3438203d3e20323637323031.roa (raw, json)
Hash identifier:          AVgvO2yNxCTvLxAX05Ba9mL5Gc+F4kiD7wWaF1ieX9w=
Subject key identifier:   7E:1F:31:C4:28:1B:7C:75:D4:7A:1F:D4:26:A6:11:5E:CC:73:A7:57
Certificate issuer:       /CN=85BC1E89231501C6B1D18A71517860BF9606AC7B
Certificate serial:       0D12A7024B2DA0467F6244A5CF5D80B37FBD03F5
Authority key identifier: 85:BC:1E:89:23:15:01:C6:B1:D1:8A:71:51:78:60:BF:96:06:AC:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85BC1E89231501C6B1D18A71517860BF9606AC7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/323830343a343963303a3a2f33322d3438203d3e20323637323031.roa
Signing time:             Sun 05 Nov 2023 05:00:00 +0000
ROA not before:           Sun 05 Nov 2023 04:55:00 +0000
ROA not after:            Sun 03 Nov 2024 05:00:00 +0000
asID:                     267201
IP address blocks:        2804:49c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:12:a7:02:4b:2d:a0:46:7f:62:44:a5:cf:5d:80:b3:7f:bd:03:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85BC1E89231501C6B1D18A71517860BF9606AC7B
        Validity
            Not Before: Nov  5 04:55:00 2023 GMT
            Not After : Nov  3 05:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:f1:e0:8f:99:2f:ec:d9:91:3a:bf:31:5c:
                    09:31:f8:df:b1:aa:fb:32:61:a5:5f:6f:88:33:b1:
                    41:5e:1f:c5:cf:ec:bd:e5:67:c0:db:7c:6e:51:27:
                    45:a5:4f:98:31:29:0e:05:9c:b3:4a:50:d3:f0:61:
                    06:63:e1:9a:60:13:b6:28:bf:87:f0:d5:89:7c:3a:
                    9c:45:18:04:e5:96:41:4c:b4:76:e5:82:cb:82:05:
                    59:32:6c:51:61:e2:8c:f7:04:5b:3b:c1:5c:b6:ab:
                    a2:01:3a:03:46:96:68:ea:87:45:db:68:0e:14:3c:
                    1d:e6:73:fd:2c:ce:0d:89:27:41:32:63:a2:45:2c:
                    ff:82:f1:a6:67:94:6b:8f:11:70:76:21:8e:fd:0c:
                    d6:cb:14:24:18:fb:c3:29:23:7c:86:86:30:c1:a6:
                    79:50:6e:59:67:9f:95:54:59:97:e1:b5:5e:d9:bb:
                    56:c5:69:89:cb:5d:db:a8:93:c3:08:dd:1d:41:0f:
                    cb:03:3e:bf:b2:38:03:e1:bb:df:db:14:1b:56:1c:
                    12:50:cb:a1:6f:2e:10:8f:77:74:4f:c3:1c:8b:96:
                    e0:b7:e1:94:f0:70:1e:81:0a:47:1f:68:98:27:ef:
                    43:ee:94:73:59:a7:f6:07:ba:5b:93:48:a3:30:07:
                    72:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1F:31:C4:28:1B:7C:75:D4:7A:1F:D4:26:A6:11:5E:CC:73:A7:57
            X509v3 Authority Key Identifier:
                keyid:85:BC:1E:89:23:15:01:C6:B1:D1:8A:71:51:78:60:BF:96:06:AC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/85BC1E89231501C6B1D18A71517860BF9606AC7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85BC1E89231501C6B1D18A71517860BF9606AC7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/323830343a343963303a3a2f33322d3438203d3e20323637323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:a3:98:ce:ff:2d:87:6f:49:4c:64:14:6e:6b:3c:2b:ec:b6:
         5d:86:c1:89:e7:a5:51:e8:19:fd:f3:bb:c4:df:6d:f2:b2:e2:
         93:ff:b4:c1:c8:06:4e:16:4b:c6:ec:d8:b7:36:9e:a4:dc:16:
         f5:7a:aa:e0:bb:a0:6d:7b:a7:3d:b3:e6:c1:05:c1:7e:e5:b5:
         a7:82:5a:55:58:60:39:44:74:96:63:43:12:98:b0:c3:45:27:
         fb:da:48:b7:22:25:7b:ea:41:85:ff:66:0e:f4:75:be:02:49:
         98:cc:ab:16:2a:e8:a6:5c:9d:31:29:40:15:5c:71:fb:22:89:
         25:fe:69:70:13:06:b2:45:14:e2:aa:41:d1:93:ba:02:8e:88:
         97:fa:91:42:9b:6f:b3:c8:ac:3a:71:d0:c3:9f:13:5d:a2:18:
         42:1f:9c:f0:88:cf:db:2c:0f:fc:bc:71:31:d7:34:ff:a7:0d:
         02:87:bb:c4:92:af:a2:c4:df:a2:fb:9c:90:f6:df:99:7c:db:
         61:4d:69:c0:25:6a:ed:c5:ac:9b:7b:33:ef:b3:bf:83:4d:80:
         a8:78:ae:70:a0:22:73:ee:1a:b2:9b:6a:de:3d:7a:13:17:11:
         b1:1a:e0:39:52:cd:f4:59:30:73:fd:eb:e6:2c:78:fe:87:e9:
         4a:27:27:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org