Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/323830343a346338303a383030303a3a2f33342d3334203d3e20323637333734.roa
File:                     323830343a346338303a383030303a3a2f33342d3334203d3e20323637333734.roa (raw, json)
Hash identifier:          xsYlM6D42ZF3iHbbEhwYD8bEUUE/xe9bS3mvEkkyFug=
Subject key identifier:   58:07:83:2F:C4:E1:60:D8:5E:EC:41:67:70:46:04:E8:04:40:07:B9
Certificate issuer:       /CN=C88D10B687ABB2F8DC649DC753A12E98C0539139
Certificate serial:       6E471F791D552AF509E664C490E28F2B3224A182
Authority key identifier: C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/323830343a346338303a383030303a3a2f33342d3334203d3e20323637333734.roa
Signing time:             Tue 27 Jun 2023 18:39:45 +0000
ROA not before:           Tue 27 Jun 2023 18:34:45 +0000
ROA not after:            Tue 25 Jun 2024 18:39:45 +0000
asID:                     267374
IP address blocks:        2804:4c80:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:47:1f:79:1d:55:2a:f5:09:e6:64:c4:90:e2:8f:2b:32:24:a1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C88D10B687ABB2F8DC649DC753A12E98C0539139
        Validity
            Not Before: Jun 27 18:34:45 2023 GMT
            Not After : Jun 25 18:39:45 2024 GMT
        Subject: CN=5807832FC4E160D85EEC4167704604E8044007B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:7e:5c:a0:08:2f:80:07:70:69:51:0c:36:
                    14:e7:97:48:74:d6:32:9f:04:aa:b9:b8:d3:23:e4:
                    81:d5:f5:05:ba:83:55:27:2c:ed:53:bb:21:e8:56:
                    e7:c4:11:77:1e:0b:f4:db:17:9b:40:ce:43:5b:d7:
                    f2:21:bf:b6:1d:6f:b7:d0:12:db:60:09:e9:1e:6d:
                    ef:71:d2:5d:c1:c4:64:6b:c9:e3:58:fc:07:03:13:
                    59:cc:32:42:ff:7e:55:a8:87:65:16:db:aa:4f:f8:
                    6b:d1:f4:5b:51:50:e9:03:8f:5a:e5:af:8b:71:a0:
                    3d:43:df:53:43:0f:9e:68:a0:c0:7a:6d:df:9f:b0:
                    76:60:b9:78:52:46:ed:ed:5f:98:00:b6:e1:2c:63:
                    d3:16:e5:41:d3:a3:c0:a9:97:56:cf:6a:be:c6:32:
                    b8:d2:f4:f7:91:13:bb:77:1a:2b:29:2e:42:3b:06:
                    17:e9:45:3d:ad:7c:d3:53:00:ef:5c:15:23:88:c1:
                    d6:5d:b5:ce:24:18:b9:94:6d:0e:84:b1:bf:87:bc:
                    b0:b9:74:d7:c3:07:8b:06:6b:a5:b0:d7:83:5f:9a:
                    dc:59:4c:c5:d2:52:e1:7d:cd:42:1a:4a:95:d5:51:
                    a8:1c:47:f1:f8:73:db:14:fa:39:d0:3d:bd:f2:9a:
                    ac:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:07:83:2F:C4:E1:60:D8:5E:EC:41:67:70:46:04:E8:04:40:07:B9
            X509v3 Authority Key Identifier:
                keyid:C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/323830343a346338303a383030303a3a2f33342d3334203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c80:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8e:3e:1c:10:d9:8c:c0:56:95:44:c8:00:f1:ef:9f:4d:9a:01:
         f7:c4:00:03:3e:bb:43:d8:df:2a:b1:9b:66:48:2f:af:1b:ae:
         64:34:c4:f2:c6:c2:79:3d:f0:e0:51:e6:80:6f:23:e0:53:88:
         48:58:ea:a6:a6:b1:e8:e5:87:2b:fc:4c:3e:8d:49:b9:2e:1e:
         83:f5:e6:b4:10:dd:e8:c5:cf:fb:10:c4:71:c0:7a:8b:1a:0c:
         17:b8:e5:cf:93:b4:5d:51:e1:01:c9:c0:f3:26:a2:c7:b1:22:
         18:1a:96:30:e8:19:70:c5:b6:d9:90:0b:48:e3:7b:45:68:d6:
         ac:e2:96:92:2a:8b:53:e6:b7:8b:7f:43:fc:ef:2b:8c:0a:e0:
         af:1b:50:dc:6f:5a:58:2a:9a:89:40:fa:1c:0d:f5:00:b5:16:
         8b:73:4f:30:3d:33:39:1a:93:1a:24:a9:ed:a1:b4:ef:af:cd:
         75:71:76:69:34:76:87:04:e5:b1:7e:48:c7:23:1a:a8:5f:d1:
         1e:f5:e9:df:6b:4f:dd:06:11:0e:0d:71:71:05:1b:e5:6d:f1:
         21:99:77:6f:6e:e9:6a:4f:02:29:08:d9:09:c0:1c:ec:44:82:
         b7:1e:a7:21:8d:8c:a9:7f:a9:06:e7:1f:06:4c:29:72:b1:ff:
         69:cb:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org