Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3332203d3e20323633393438.roa
File:                     323830343a323833383a3a2f33322d3332203d3e20323633393438.roa (raw, json)
Hash identifier:          5Zfd6GlJ1uRxtW5OJjPidTO6hkjLVPCF/T5iNqbZcIU=
Subject key identifier:   B6:E4:6E:35:9F:7C:EA:0D:B6:81:37:FC:55:B1:42:AF:21:DF:DE:75
Certificate issuer:       /CN=A1FBC871EB104DDB5E2BB4BC43A63A35148DB820
Certificate serial:       69DD53D9BF53D7649EDCAD55240CB598D57E3760
Authority key identifier: A1:FB:C8:71:EB:10:4D:DB:5E:2B:B4:BC:43:A6:3A:35:14:8D:B8:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3332203d3e20323633393438.roa
Signing time:             Mon 10 Apr 2023 12:31:10 +0000
ROA not before:           Mon 10 Apr 2023 12:26:10 +0000
ROA not after:            Mon 08 Apr 2024 12:31:10 +0000
asID:                     263948
IP address blocks:        2804:2838::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:dd:53:d9:bf:53:d7:64:9e:dc:ad:55:24:0c:b5:98:d5:7e:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1FBC871EB104DDB5E2BB4BC43A63A35148DB820
        Validity
            Not Before: Apr 10 12:26:10 2023 GMT
            Not After : Apr  8 12:31:10 2024 GMT
        Subject: CN=B6E46E359F7CEA0DB68137FC55B142AF21DFDE75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e5:2b:d9:20:7c:87:bd:b5:7f:1b:90:1f:f1:
                    14:0a:77:a7:7d:82:b3:69:2a:c3:62:da:ef:5e:59:
                    23:a7:91:af:cd:6d:e5:33:d1:fc:3a:24:34:06:6e:
                    55:72:4a:62:fb:32:52:0d:dd:f5:4c:df:a2:83:ad:
                    4c:fe:ab:35:e4:5d:63:12:37:93:54:7a:1c:60:b4:
                    e0:7b:ff:72:7a:6f:cf:50:1b:ca:ea:b6:f6:c7:46:
                    54:92:a6:bd:12:20:15:12:a6:44:f2:53:7e:0c:0f:
                    e8:e3:3c:0a:a6:7f:c8:5b:35:55:28:8e:e6:aa:2d:
                    21:9b:b0:93:8e:d5:3f:52:54:8e:97:cd:c0:30:a6:
                    0d:c0:aa:e6:53:de:00:02:2d:6d:51:81:8d:63:f6:
                    1a:a2:f9:28:6e:c4:b4:ff:cf:bd:e0:22:26:0a:58:
                    f9:a6:8e:0e:10:63:ac:6d:8f:ae:a7:3d:81:06:0e:
                    ca:92:6b:6c:25:f0:2e:9a:91:98:37:6a:a5:30:06:
                    8b:fe:20:18:b2:74:5a:c1:f7:83:3e:8a:a9:c4:b0:
                    49:c2:6a:39:3d:c6:87:0e:17:fc:19:b0:4d:d6:69:
                    5a:44:79:0b:6d:5f:d8:3f:1d:77:0c:c1:b8:ce:8d:
                    f0:51:68:3b:79:68:ea:d1:59:50:cc:8f:b6:74:e6:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E4:6E:35:9F:7C:EA:0D:B6:81:37:FC:55:B1:42:AF:21:DF:DE:75
            X509v3 Authority Key Identifier:
                keyid:A1:FB:C8:71:EB:10:4D:DB:5E:2B:B4:BC:43:A6:3A:35:14:8D:B8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3332203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2838::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:24:86:f3:f4:30:42:02:eb:0f:b9:f0:6b:4f:14:d0:d6:42:
         67:48:6e:8b:cd:3f:06:be:3c:6c:34:04:db:48:f5:00:3f:19:
         3d:cf:96:96:89:a3:6c:3b:11:18:0d:1e:bd:fd:3a:6b:76:17:
         29:1e:89:f5:64:5e:0d:ff:07:77:46:73:e9:2b:45:7a:a9:83:
         83:69:40:c5:51:26:0a:28:99:6c:56:d7:dc:7a:1f:73:78:1c:
         f2:e2:f9:2c:79:fd:80:4a:49:53:31:d3:cd:f9:b9:12:54:82:
         5a:94:76:08:66:40:a5:77:4c:65:29:81:30:bc:70:8a:fc:43:
         1e:5d:1e:ae:1e:1f:78:45:34:61:b4:18:bb:e1:6a:8b:66:a9:
         44:cd:90:f2:27:2a:36:0f:9f:34:0b:b0:0b:da:81:97:0d:9c:
         a8:a2:4b:75:4c:a9:38:65:a2:d7:04:48:9c:f9:5f:0f:87:aa:
         ba:26:6a:6d:99:56:77:cf:38:71:a0:13:c6:b4:f1:82:62:8d:
         58:49:b1:79:48:4d:3e:eb:bd:1e:d8:d5:4a:8a:05:16:33:75:
         09:83:78:8d:85:1b:86:fb:50:a3:47:b9:52:1b:f0:d0:68:ce:
         bc:ee:16:84:88:d2:79:f2:81:b5:86:7d:68:74:8d:0e:c1:08:
         b2:b2:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org