Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3730303a3a2f34302d3430203d3e20323633393438.roa
File:                     323830343a323833383a3730303a3a2f34302d3430203d3e20323633393438.roa (raw, json)
Hash identifier:          GCVmahKOKgR6yJPtLc5ievkXD1BlZIM5rqDCenXNDj8=
Subject key identifier:   99:9E:2D:F7:14:65:DE:F4:09:56:FD:2D:6C:C8:B6:50:AB:57:6A:AA
Certificate issuer:       /CN=A1FBC871EB104DDB5E2BB4BC43A63A35148DB820
Certificate serial:       54EA71822429EF0A8A33B095DF9974C09802DB5F
Authority key identifier: A1:FB:C8:71:EB:10:4D:DB:5E:2B:B4:BC:43:A6:3A:35:14:8D:B8:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3730303a3a2f34302d3430203d3e20323633393438.roa
Signing time:             Mon 10 Apr 2023 12:31:10 +0000
ROA not before:           Mon 10 Apr 2023 12:26:10 +0000
ROA not after:            Mon 08 Apr 2024 12:31:10 +0000
asID:                     263948
IP address blocks:        2804:2838:700::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ea:71:82:24:29:ef:0a:8a:33:b0:95:df:99:74:c0:98:02:db:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1FBC871EB104DDB5E2BB4BC43A63A35148DB820
        Validity
            Not Before: Apr 10 12:26:10 2023 GMT
            Not After : Apr  8 12:31:10 2024 GMT
        Subject: CN=999E2DF71465DEF40956FD2D6CC8B650AB576AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:53:0f:f9:34:16:2d:98:d2:4b:58:58:32:e2:
                    9d:b6:96:4e:81:94:4f:fa:3f:c1:6d:b8:5e:30:5e:
                    77:70:3c:c6:31:d6:f9:91:6a:6f:23:4f:ba:ce:c8:
                    8c:85:14:fc:07:b9:20:39:bd:da:cb:1e:be:12:ed:
                    17:19:d5:54:73:2d:77:b5:ef:6d:f6:14:5c:d1:b1:
                    ce:90:c9:a7:c4:7c:0a:f6:83:9f:74:e6:bf:e9:76:
                    e8:6d:86:50:82:e3:27:4d:4b:85:fe:62:c5:c9:cd:
                    89:71:00:24:57:8c:0d:15:88:67:a6:4a:10:2a:cd:
                    3f:f9:e9:2a:de:4e:22:3c:f6:9e:ca:4f:85:1f:d5:
                    14:a2:fa:6f:a9:4c:ed:66:a9:90:5d:bf:8a:14:f6:
                    1b:de:9c:ea:7c:56:0d:55:bc:72:e8:a8:cd:fa:de:
                    d3:cd:12:89:6c:c4:a2:f5:6a:dd:c5:d2:bc:79:be:
                    af:de:91:d5:89:f0:f5:de:a4:2b:b8:09:2c:94:b4:
                    8f:a8:ac:62:cf:bb:0b:69:c3:3f:85:d2:01:1d:c3:
                    a2:b0:b5:27:26:83:8d:ad:87:18:f8:6d:43:c8:60:
                    fc:a6:a4:6d:d4:12:f4:db:bd:a3:99:75:8f:58:96:
                    4b:37:af:e4:47:37:c1:46:99:91:8e:59:d8:d7:25:
                    e4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9E:2D:F7:14:65:DE:F4:09:56:FD:2D:6C:C8:B6:50:AB:57:6A:AA
            X509v3 Authority Key Identifier:
                keyid:A1:FB:C8:71:EB:10:4D:DB:5E:2B:B4:BC:43:A6:3A:35:14:8D:B8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3730303a3a2f34302d3430203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2838:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:b8:9b:9e:94:fc:26:74:48:e6:64:a9:93:1a:cd:0d:0a:72:
         23:16:64:d5:18:92:94:ea:19:05:d1:5a:48:52:f5:34:d6:fe:
         c6:a0:6b:57:5c:e9:41:0d:45:93:4b:b7:71:ec:c9:a6:51:cd:
         b7:8e:0c:70:8a:f9:09:62:2d:67:02:7a:27:5c:04:fc:28:39:
         40:a2:d2:8b:1c:5d:bb:a9:2d:0a:5f:a3:7d:c0:4f:e3:81:cd:
         98:c7:57:67:02:ee:db:03:c7:3a:e5:09:e4:5f:3f:07:81:3c:
         29:9d:5b:6a:b2:0e:72:92:f5:7e:ec:12:e4:29:27:bf:f3:0d:
         00:53:dc:85:62:10:4a:f0:bc:31:af:fd:26:3b:ef:fc:db:4b:
         f7:9b:ca:0b:09:82:63:98:13:82:73:62:3d:3c:47:e2:85:c7:
         54:12:67:e4:aa:d7:71:f0:82:f3:69:ad:b9:43:88:a1:e3:d2:
         54:5f:d5:5b:8e:d8:b6:7d:2d:46:fa:06:d7:ac:ef:87:8f:ac:
         0d:84:56:b8:bc:8d:e3:a9:6b:1a:29:ce:8e:04:05:f6:0c:f5:
         6a:8b:34:11:b6:c5:f0:eb:53:02:8d:e4:45:c5:35:10:8a:58:
         cb:2c:50:26:2f:1e:58:60:af:ca:ff:10:ba:a4:e9:2d:65:c0:
         53:0d:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org