Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkBKdGsNfMsUEcRXEebjwZnRQrmYwaUSfC33oUEwL1kk/0/323830343a383431343a3a2f33322d3335203d3e20323732323338.roa
File:                     323830343a383431343a3a2f33322d3335203d3e20323732323338.roa (raw, json)
Hash identifier:          1Bll7/YlXjJJPQ+mxn0ZrlJGud1+3zur1Cjba5b4kHc=
Subject key identifier:   AE:4A:F4:54:F9:39:6F:08:61:6D:FF:D7:86:0D:A9:A3:02:69:7D:F1
Certificate issuer:       /CN=B250002719185DD54D0981671055A73F20A50CA0
Certificate serial:       0C5136588A1E993411EAEFBFAE40A800B213BE45
Authority key identifier: B2:50:00:27:19:18:5D:D5:4D:09:81:67:10:55:A7:3F:20:A5:0C:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B250002719185DD54D0981671055A73F20A50CA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkBKdGsNfMsUEcRXEebjwZnRQrmYwaUSfC33oUEwL1kk/0/323830343a383431343a3a2f33322d3335203d3e20323732323338.roa
Signing time:             Thu 26 Jan 2023 19:28:51 +0000
ROA not before:           Thu 26 Jan 2023 19:23:51 +0000
ROA not after:            Thu 25 Jan 2024 19:28:51 +0000
asID:                     272238
IP address blocks:        2804:8414::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:51:36:58:8a:1e:99:34:11:ea:ef:bf:ae:40:a8:00:b2:13:be:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B250002719185DD54D0981671055A73F20A50CA0
        Validity
            Not Before: Jan 26 19:23:51 2023 GMT
            Not After : Jan 25 19:28:51 2024 GMT
        Subject: CN=AE4AF454F9396F08616DFFD7860DA9A302697DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:15:7d:f6:59:a7:75:51:93:f6:19:70:a0:
                    52:d5:cf:c4:14:52:ef:45:3d:83:43:4f:a0:81:75:
                    8a:86:46:1d:9e:25:fd:72:a3:64:19:0d:04:97:c3:
                    27:e3:71:f9:59:c3:85:d9:9a:91:19:e9:e5:b4:d2:
                    51:72:c0:27:bc:ec:1d:7a:f1:30:7c:e0:1d:a7:63:
                    4e:b7:84:49:95:6a:dc:3a:3f:29:c0:14:19:cf:34:
                    73:3c:41:c7:0c:a4:f9:59:0a:9d:97:31:1d:cf:4f:
                    e4:61:ab:af:18:6b:8b:b9:59:4c:09:74:4b:02:08:
                    f5:bf:fc:95:f6:39:2f:f9:6e:7f:52:48:85:61:9a:
                    5d:1b:8d:73:b2:78:21:da:8c:52:62:ad:11:38:9c:
                    63:f0:b6:0c:d0:ee:00:a8:54:2a:9e:0e:7b:1a:4f:
                    e0:87:59:51:3f:b1:7e:a3:79:d9:2e:09:dc:af:75:
                    f1:5c:40:9c:f9:b4:78:02:fd:46:7a:24:24:4d:65:
                    27:93:7f:3a:0c:c0:c1:03:fa:56:a7:bd:e6:13:a0:
                    d4:11:b7:88:fc:b3:34:ae:de:c5:cf:54:e0:86:98:
                    09:91:b5:1e:87:84:6d:a0:53:19:e7:df:3b:8d:a5:
                    6f:f0:f6:db:a1:a8:35:75:52:8e:01:15:6d:5a:ea:
                    e8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4A:F4:54:F9:39:6F:08:61:6D:FF:D7:86:0D:A9:A3:02:69:7D:F1
            X509v3 Authority Key Identifier:
                keyid:B2:50:00:27:19:18:5D:D5:4D:09:81:67:10:55:A7:3F:20:A5:0C:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkBKdGsNfMsUEcRXEebjwZnRQrmYwaUSfC33oUEwL1kk/0/B250002719185DD54D0981671055A73F20A50CA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B250002719185DD54D0981671055A73F20A50CA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkBKdGsNfMsUEcRXEebjwZnRQrmYwaUSfC33oUEwL1kk/0/323830343a383431343a3a2f33322d3335203d3e20323732323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8414::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:22:d5:cc:b6:7f:00:cf:74:2a:47:99:24:e6:4b:c4:de:e3:
         9c:b6:5b:a5:fe:37:ae:b4:d6:d4:8c:81:4f:a0:b6:62:9f:4c:
         65:c4:e1:8b:90:f7:bd:19:28:a2:d6:07:18:e0:5e:c4:d1:88:
         7f:5e:33:3a:dd:4e:af:90:16:78:c7:6c:5b:21:4e:fc:2c:f9:
         49:3a:8d:9c:df:77:b4:b0:47:a3:80:04:87:bd:d6:0f:09:01:
         0a:3a:5e:aa:9c:8f:4e:ba:11:ca:e7:81:48:24:3e:37:24:fb:
         6f:f9:bd:90:45:dc:c6:91:8d:8a:4c:94:5d:92:1e:89:25:b7:
         29:d1:c0:5b:89:31:15:91:96:07:90:ef:2e:0d:68:b1:11:64:
         65:10:b7:57:d0:79:d5:11:8e:a2:a8:71:e4:05:48:9d:94:1e:
         21:78:17:f6:c4:9e:b2:e4:80:82:5d:62:22:ba:64:ce:8e:75:
         fb:82:2f:f3:02:49:df:29:43:b6:2a:5f:8a:48:ea:e7:b1:36:
         95:0a:8b:11:0b:1f:f7:46:77:62:51:84:b6:e7:55:23:ba:f3:
         7c:7c:98:06:b3:ee:f1:6f:56:49:61:02:ea:3b:61:e3:7f:ad:
         71:63:66:7d:26:40:67:f2:27:ba:a9:6a:03:4b:c8:3a:2a:8e:
         b3:e1:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org