Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a323030303a3a2f33362d3336203d3e20323633393438.roa
File:                     323830343a323833383a323030303a3a2f33362d3336203d3e20323633393438.roa (raw, json)
Hash identifier:          AoLNDkb/K3iTCp6aTVx90p8Di8hTcN8bp28mIZlhxr8=
Subject key identifier:   62:08:F2:E7:A5:89:88:EA:1D:1B:DB:3E:41:1B:91:A7:40:AE:43:CD
Certificate issuer:       /CN=A1FBC871EB104DDB5E2BB4BC43A63A35148DB820
Certificate serial:       2FF22D01F0E2B2F4234FC5AC547A78B216058730
Authority key identifier: A1:FB:C8:71:EB:10:4D:DB:5E:2B:B4:BC:43:A6:3A:35:14:8D:B8:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a323030303a3a2f33362d3336203d3e20323633393438.roa
Signing time:             Mon 10 Apr 2023 12:31:10 +0000
ROA not before:           Mon 10 Apr 2023 12:26:10 +0000
ROA not after:            Mon 08 Apr 2024 12:31:10 +0000
asID:                     263948
IP address blocks:        2804:2838:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f2:2d:01:f0:e2:b2:f4:23:4f:c5:ac:54:7a:78:b2:16:05:87:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1FBC871EB104DDB5E2BB4BC43A63A35148DB820
        Validity
            Not Before: Apr 10 12:26:10 2023 GMT
            Not After : Apr  8 12:31:10 2024 GMT
        Subject: CN=6208F2E7A58988EA1D1BDB3E411B91A740AE43CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:6c:dc:ac:e7:56:09:4c:2a:89:ae:f2:d5:
                    a6:f8:67:69:f7:a9:00:47:c2:aa:f3:ef:1f:1c:51:
                    1e:ec:60:22:5a:46:15:24:a3:79:f8:76:e6:e8:b7:
                    a9:14:b4:d1:3f:09:8a:bd:5a:a4:d3:c3:db:5b:12:
                    55:01:41:99:2a:5d:3b:4e:d4:69:5d:86:f8:00:3e:
                    b8:d0:6e:72:28:b5:6a:d1:c7:85:91:b7:72:15:55:
                    60:58:99:fd:f2:8c:16:b5:74:b5:68:ba:9f:d8:63:
                    e8:5d:db:22:a7:0f:55:b6:e8:40:79:8a:a4:71:64:
                    e8:e9:0c:8c:13:41:c2:7f:a3:5a:99:bc:91:91:82:
                    f1:82:26:e4:ba:fb:5d:7e:88:f5:6a:99:0d:ff:52:
                    20:26:62:47:38:2e:2c:30:6a:78:ad:f3:c6:6b:f5:
                    a0:e6:72:09:4e:30:e8:d4:e3:76:0d:2e:5d:41:a9:
                    b8:2c:5f:dc:a7:f9:90:a3:f8:58:62:ab:77:28:e9:
                    65:4b:8a:92:c4:f1:fa:9f:ba:29:d5:df:13:26:fb:
                    0d:c1:82:75:f6:c8:c4:ce:a5:a2:51:c2:1b:91:1e:
                    b8:9f:de:44:05:83:09:07:e4:f3:19:90:8e:47:f0:
                    08:79:29:0f:98:e8:7a:82:ad:28:93:e1:4f:e5:e0:
                    e8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:08:F2:E7:A5:89:88:EA:1D:1B:DB:3E:41:1B:91:A7:40:AE:43:CD
            X509v3 Authority Key Identifier:
                keyid:A1:FB:C8:71:EB:10:4D:DB:5E:2B:B4:BC:43:A6:3A:35:14:8D:B8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a323030303a3a2f33362d3336203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2838:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         e0:b3:93:dc:fb:26:13:cc:76:cd:76:ba:a8:69:ee:96:b3:5d:
         5b:97:c4:60:eb:8c:e8:7c:83:c4:56:56:a9:5e:94:d2:bb:bc:
         b6:58:f5:14:12:a6:c3:12:2a:70:4e:79:7a:66:94:72:f2:41:
         ea:be:60:89:c9:5e:7d:17:74:7f:97:79:72:dc:b1:08:b2:c7:
         ed:4f:24:ef:6b:13:18:6b:51:a3:5d:c1:af:3e:60:59:d6:5b:
         b1:48:b9:14:e9:c0:28:36:50:39:65:5a:b2:ad:db:ac:0c:ad:
         7e:37:1f:0e:2a:fa:a2:7d:6d:39:fe:f1:c7:b5:11:70:e3:95:
         96:d2:b0:79:e8:5a:60:d1:4b:67:ca:c4:65:a8:62:f0:db:9d:
         23:71:25:ef:7c:85:f7:3e:18:22:2b:37:37:68:dc:ef:9d:18:
         f6:c3:a1:62:b2:2e:50:7b:37:d4:e2:60:0c:3b:ff:43:e0:c6:
         5d:ab:83:e3:36:cf:a9:13:09:e9:5d:bb:62:9a:d6:29:ad:f3:
         be:52:ba:06:98:c8:f0:64:ed:2c:db:f9:bc:a5:55:bb:8a:57:
         74:01:e1:80:40:fb:3d:fe:2d:90:83:03:80:f4:4d:b7:43:55:
         a5:c9:c8:8d:71:3a:32:64:fe:a5:3c:ce:f2:16:df:a5:94:67:
         a1:ad:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org