Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/323830343a366231303a3a2f33322d3334203d3e20323730333735.roa
File:                     323830343a366231303a3a2f33322d3334203d3e20323730333735.roa (raw, json)
Hash identifier:          oZzwiJitd534jUbM3hZylfH7jD5dgJktcmX26VoII6s=
Subject key identifier:   89:F7:DF:12:F6:61:F0:C0:56:44:35:50:A3:E1:4C:1E:9F:27:6C:44
Certificate issuer:       /CN=EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903
Certificate serial:       09FF401C59D97609479DBAA1EAF44B3FC92C8B6F
Authority key identifier: EE:11:EB:5B:E8:9E:5E:D3:D4:30:0D:CC:DE:C1:E4:0A:D0:EE:E9:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/323830343a366231303a3a2f33322d3334203d3e20323730333735.roa
Signing time:             Mon 24 Apr 2023 16:36:13 +0000
ROA not before:           Mon 24 Apr 2023 16:31:13 +0000
ROA not after:            Mon 22 Apr 2024 16:36:13 +0000
asID:                     270375
IP address blocks:        2804:6b10::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ff:40:1c:59:d9:76:09:47:9d:ba:a1:ea:f4:4b:3f:c9:2c:8b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903
        Validity
            Not Before: Apr 24 16:31:13 2023 GMT
            Not After : Apr 22 16:36:13 2024 GMT
        Subject: CN=89F7DF12F661F0C056443550A3E14C1E9F276C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:fd:55:a1:0a:21:1e:c8:91:cb:b3:73:8a:
                    d0:6b:e0:29:4c:70:16:41:62:0d:0d:2d:7b:f2:93:
                    f4:32:96:5e:2d:d4:81:0d:8e:e2:9f:ce:64:eb:64:
                    82:90:06:f4:0e:b1:e0:f9:7a:f3:89:1f:31:01:f1:
                    9d:b2:7f:6b:29:07:cd:61:f7:86:13:14:13:50:b5:
                    87:1a:5c:61:34:f4:e9:9d:45:64:ce:be:54:1b:d5:
                    52:a9:dd:ae:fd:e6:14:22:c9:0b:26:b2:44:e1:23:
                    5b:99:fa:c6:9a:b2:3e:02:e4:9c:1c:92:72:48:3f:
                    b5:0c:fb:ce:b9:de:d9:48:73:13:b9:9b:cb:c6:ae:
                    92:ae:68:e9:6b:05:21:f8:ec:fa:eb:12:e6:84:21:
                    0e:2d:2b:cc:53:81:c9:d7:b8:4d:85:86:40:33:15:
                    f3:07:d1:54:cd:d9:db:9b:cb:55:c4:f9:35:80:ca:
                    2a:3d:fd:79:5c:36:79:51:f9:c5:44:a0:1b:de:f6:
                    6c:6c:2c:8d:39:d7:ca:23:e5:93:e8:5b:4e:1b:8c:
                    e3:07:0f:29:ac:42:7f:77:58:7e:0a:c5:a1:20:3a:
                    76:17:07:32:d8:d0:3f:a5:88:dd:9b:34:24:cd:56:
                    85:36:a2:6f:b5:5d:b2:71:98:99:4c:4b:d8:bb:14:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F7:DF:12:F6:61:F0:C0:56:44:35:50:A3:E1:4C:1E:9F:27:6C:44
            X509v3 Authority Key Identifier:
                keyid:EE:11:EB:5B:E8:9E:5E:D3:D4:30:0D:CC:DE:C1:E4:0A:D0:EE:E9:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/323830343a366231303a3a2f33322d3334203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:ef:d6:10:bf:ad:db:cb:67:b6:0c:6f:4a:7f:ba:4a:bd:1b:
         4d:8c:25:e0:0d:26:cf:12:4c:ba:04:d1:de:bc:db:5d:e4:46:
         7c:9a:13:0f:f0:3f:f4:94:ed:35:7c:5d:c3:73:e3:a9:e6:5c:
         22:22:d4:af:55:20:b3:f5:b6:37:26:f8:bf:03:db:9d:43:bc:
         34:15:9a:6a:62:90:39:99:6f:cc:4f:4c:15:97:da:47:87:20:
         e2:e4:97:8c:ab:71:50:8c:7c:27:1a:68:b8:10:06:ae:58:f6:
         a1:19:5a:8a:44:96:03:78:16:21:fc:f2:0e:fb:05:58:94:6d:
         1c:e3:fa:e1:31:21:94:92:47:34:7a:0d:86:d4:85:ef:6c:b2:
         2d:73:82:27:99:6e:a0:02:18:c5:f7:9d:ed:8e:44:0c:6d:b5:
         a4:23:27:9d:4e:f0:19:10:c3:d9:7b:54:96:09:e8:b1:b4:29:
         24:2a:2c:ff:87:a1:48:22:a4:3a:6f:f3:d5:2a:ba:77:4b:68:
         9a:3c:96:45:2c:b9:e5:3f:dc:0c:a9:ec:7d:ef:00:d1:c7:ba:
         bd:99:b0:b3:f5:50:87:1d:aa:c5:b4:a0:71:4e:1b:03:a3:9f:
         d0:c7:3d:0e:e4:4e:00:da:26:06:2b:8b:bb:f2:2f:56:c7:93:
         b7:24:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:53 2024 by rpki-client on console-ams.rpki-client.org