Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa
File:                     323830343a323833383a3a2f33322d3438203d3e20323633393438.roa (raw, json)
Hash identifier:          LboFsqU8N8f+aXaU6I1rh6jbms/60s8bNngddLy/ofg=
Subject key identifier:   2D:C8:10:62:CC:10:EF:21:49:37:59:1A:B2:87:5F:43:2C:5C:33:AC
Certificate issuer:       /CN=7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8
Certificate serial:       0EB7D0A83676EACE012B27FB8C9025BCA65FF82E
Authority key identifier: 7B:73:D8:6C:CA:23:6A:C5:4D:0C:FC:60:DD:B7:B3:61:0B:C9:8D:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa
Signing time:             Wed 03 Apr 2024 23:43:14 +0000
ROA not before:           Wed 03 Apr 2024 23:38:14 +0000
ROA not after:            Wed 02 Apr 2025 23:43:14 +0000
asID:                     263948
IP address blocks:        2804:2838::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b7:d0:a8:36:76:ea:ce:01:2b:27:fb:8c:90:25:bc:a6:5f:f8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8
        Validity
            Not Before: Apr  3 23:38:14 2024 GMT
            Not After : Apr  2 23:43:14 2025 GMT
        Subject: CN=2DC81062CC10EF214937591AB2875F432C5C33AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:47:d7:48:b1:67:83:3c:da:5f:f8:fa:1b:
                    30:c8:0d:a6:8d:56:d0:fd:ff:57:d1:39:43:29:01:
                    e7:2b:b0:93:16:1f:2c:be:fc:6e:73:ea:16:18:5b:
                    47:70:d3:f7:06:b1:1b:12:1e:af:42:e3:9f:e7:c3:
                    8a:01:57:ee:54:ac:df:3b:6f:13:96:7f:29:a1:95:
                    8d:3f:52:03:2e:be:41:c3:52:f1:2f:3a:5c:4c:c2:
                    91:15:9a:ce:3d:40:ae:ea:cc:8e:4d:37:66:69:51:
                    4e:ec:ac:25:12:1a:16:40:61:7e:0b:3f:11:f7:e6:
                    78:98:68:1a:39:0b:f8:d7:23:04:50:05:c9:7c:17:
                    2c:96:a4:0d:ae:65:6d:e5:50:be:cb:b2:61:fa:1d:
                    e3:59:70:bc:cf:d7:41:77:04:13:ea:02:7d:3b:cd:
                    01:fc:7a:f4:2f:18:5b:22:93:52:e6:00:dd:0e:6e:
                    0f:74:fa:29:19:57:3e:1d:63:d1:48:2c:fb:69:e5:
                    03:e5:56:79:c7:8f:10:74:01:c3:cb:39:dc:ab:37:
                    17:c2:b5:21:1f:fa:0f:31:fb:c2:bc:bd:07:18:36:
                    f0:55:77:e2:a7:cb:ed:91:bb:81:9e:ab:33:9c:07:
                    44:39:0e:a4:87:5e:de:a1:d3:87:95:36:25:8a:a6:
                    ea:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C8:10:62:CC:10:EF:21:49:37:59:1A:B2:87:5F:43:2C:5C:33:AC
            X509v3 Authority Key Identifier:
                keyid:7B:73:D8:6C:CA:23:6A:C5:4D:0C:FC:60:DD:B7:B3:61:0B:C9:8D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2838::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:45:7b:07:0a:80:0b:8a:60:b8:e2:8e:2f:d1:5a:96:de:0b:
         26:fc:70:3e:32:f7:13:8c:43:db:43:bb:04:9d:6c:cb:5d:3e:
         e2:d5:1b:a2:51:b9:ef:6e:2d:46:9d:23:e6:1c:4e:6a:95:53:
         7a:fb:88:ab:1d:85:e8:b2:93:58:fe:5d:0e:b9:77:5d:73:ae:
         c3:87:c5:4e:92:75:50:15:97:ce:50:58:76:b7:30:b6:9b:02:
         81:95:28:2f:40:73:c9:fc:35:e3:7a:58:b9:d7:c6:9a:89:a6:
         31:d7:e3:0e:25:dd:91:27:94:55:34:3c:fb:60:fb:ec:28:62:
         66:e5:7b:f3:f4:bc:1e:4e:37:b4:4f:e9:1e:a1:36:39:07:6c:
         5d:73:f1:92:f0:e7:bb:eb:d0:00:30:e1:51:fe:f0:ab:c1:a5:
         da:b0:43:28:a4:61:0d:6a:43:fd:4f:b0:17:b2:a1:52:a8:78:
         ab:9a:b5:fd:51:a3:58:ba:ae:7d:88:f1:71:b6:1b:02:7b:0a:
         44:67:ae:50:9f:22:db:2d:fe:da:96:b0:a2:25:32:d1:d6:92:
         e8:f1:61:79:41:38:d4:eb:04:fe:a7:9b:22:89:8f:38:3e:64:
         f6:a4:29:b2:50:41:f7:91:33:15:a2:9f:c6:7e:22:22:5e:3f:
         f9:3e:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org