Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/323830343a313534383a3a2f33322d3332203d3e20323632363631.roa
File:                     323830343a313534383a3a2f33322d3332203d3e20323632363631.roa (raw, json)
Hash identifier:          PKLHae5bcRTebqqts6Wz9swIwdTWhv1I3D8BDQ4Wzqc=
Subject key identifier:   19:DF:51:F9:F9:EA:ED:C5:82:85:42:9F:18:46:57:81:94:5E:DD:9F
Certificate issuer:       /CN=BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD
Certificate serial:       2B597CF93B7CD8CC2F4080EF5C72B57B87F1D8AC
Authority key identifier: BA:65:05:BD:1E:1E:44:E5:EC:57:6C:32:3E:8F:56:20:F1:5D:BA:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/323830343a313534383a3a2f33322d3332203d3e20323632363631.roa
Signing time:             Mon 24 Jul 2023 23:55:10 +0000
ROA not before:           Mon 24 Jul 2023 23:50:10 +0000
ROA not after:            Mon 22 Jul 2024 23:55:10 +0000
asID:                     262661
IP address blocks:        2804:1548::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:59:7c:f9:3b:7c:d8:cc:2f:40:80:ef:5c:72:b5:7b:87:f1:d8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD
        Validity
            Not Before: Jul 24 23:50:10 2023 GMT
            Not After : Jul 22 23:55:10 2024 GMT
        Subject: CN=19DF51F9F9EAEDC58285429F18465781945EDD9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:21:87:b8:ab:3d:91:db:bb:e8:07:d7:c5:
                    20:28:14:9e:0a:00:62:4d:7a:59:86:94:fd:ba:c5:
                    21:aa:38:c0:94:66:2d:7e:85:0e:0e:59:68:0c:49:
                    1b:a6:11:51:aa:a0:d6:df:1f:45:e6:26:b9:f0:e7:
                    3e:4b:7d:3d:ef:f2:95:e0:86:2d:ef:66:f5:83:52:
                    b4:b4:f5:c8:5b:2c:4a:2e:29:0f:b9:5a:4f:64:92:
                    dc:0f:20:62:97:16:12:02:ec:8d:20:a2:c9:2d:b8:
                    df:43:c7:89:12:9b:d6:7e:45:3b:2d:f6:52:e6:79:
                    aa:29:58:4b:49:69:04:c8:d4:2e:3d:2f:e5:79:e3:
                    23:76:ee:84:d1:11:3b:9c:d2:fb:84:b3:8b:75:b3:
                    9a:34:ab:d5:9c:d8:19:6f:d6:7f:8c:93:38:ba:60:
                    49:5f:d9:8d:32:c9:03:21:aa:19:ef:c5:31:2d:cc:
                    5a:a1:f8:4b:9f:09:13:47:c1:0e:1e:1d:9e:11:e2:
                    65:9a:a8:a1:d0:8c:c9:ce:d6:2c:44:4d:76:9d:c4:
                    4e:05:73:53:c6:8b:2d:15:c8:85:ec:1d:15:8f:04:
                    b1:9a:5e:36:71:6c:50:8c:74:7e:b6:7d:b0:1a:59:
                    5b:c6:80:a4:e9:88:03:09:7f:b0:35:0d:25:1c:95:
                    63:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DF:51:F9:F9:EA:ED:C5:82:85:42:9F:18:46:57:81:94:5E:DD:9F
            X509v3 Authority Key Identifier:
                keyid:BA:65:05:BD:1E:1E:44:E5:EC:57:6C:32:3E:8F:56:20:F1:5D:BA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/323830343a313534383a3a2f33322d3332203d3e20323632363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1548::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:10:8a:26:5e:a4:e8:6a:22:e2:f7:2e:bc:82:8a:ff:dc:35:
         6d:61:a4:8f:bc:af:14:f2:06:34:24:f1:04:d3:8f:e4:b5:00:
         c1:40:f7:9d:81:b7:da:c3:94:a1:8d:b5:c2:7e:5f:95:47:f4:
         5f:d0:35:80:42:07:3c:79:57:60:06:34:3d:8f:21:d6:bb:e9:
         bb:1b:85:22:d7:3f:2f:0a:68:2f:c8:a2:18:2d:38:e9:ce:f5:
         f5:49:31:24:29:b6:28:fe:50:fc:64:29:69:b1:be:f1:26:ef:
         dc:23:f0:4c:cd:0d:48:22:40:7f:f9:47:61:f7:c1:54:7d:f0:
         df:82:76:28:5f:c9:da:86:b8:eb:c9:d7:01:11:89:66:55:b5:
         cf:95:bb:a0:0b:5a:2b:85:ff:f0:05:04:2a:bd:75:88:fe:5d:
         16:6c:54:6b:e0:79:39:3f:79:0f:4c:b3:0e:8a:6d:6c:ad:e2:
         ee:14:4d:f2:fb:3c:08:da:1a:a9:fd:f5:c0:03:10:4b:78:d2:
         45:95:89:2f:0f:d5:70:45:63:9f:00:c4:cf:17:52:45:11:a0:
         3f:be:d8:20:5b:49:c2:96:88:05:fb:94:e2:65:5d:0b:9e:70:
         36:53:28:ce:e7:77:42:b3:e0:bd:8b:be:40:ba:32:96:2c:cb:
         44:2f:74:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org