Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa
File:                     323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa (raw, json)
Hash identifier:          8xPCRcvWertcPpMGtsD4tlly9vmdFXhBrnjM+UQeSFM=
Subject key identifier:   F9:84:7A:A6:63:BE:DA:39:99:82:67:02:B8:9D:A6:C4:B4:63:E8:38
Certificate issuer:       /CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
Certificate serial:       4D5F0763AD77EB4361987E7A3EE90BED144A33D4
Authority key identifier: EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa
Signing time:             Mon 15 May 2023 02:00:01 +0000
ROA not before:           Mon 15 May 2023 01:55:01 +0000
ROA not after:            Wed 15 May 2024 02:00:01 +0000
asID:                     270765
IP address blocks:        2804:7114:165::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5f:07:63:ad:77:eb:43:61:98:7e:7a:3e:e9:0b:ed:14:4a:33:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
        Validity
            Not Before: May 15 01:55:01 2023 GMT
            Not After : May 15 02:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:78:fd:72:b7:cf:75:ab:ec:8d:ef:16:b3:
                    48:78:9c:c8:9f:84:95:48:eb:b6:10:33:32:c2:c5:
                    51:12:a9:6f:48:63:f7:38:c5:90:05:e1:ad:01:f0:
                    35:e8:8e:3e:c2:ef:3a:91:f5:47:7c:86:15:b6:09:
                    41:fa:37:3f:69:79:7d:50:62:a7:04:57:8e:97:d5:
                    bc:25:a0:fe:8f:6c:59:47:ac:f3:af:42:0a:7c:81:
                    00:24:1a:9d:b1:4b:c4:0e:a2:0c:44:62:7c:42:0e:
                    b9:62:dc:9f:e1:11:d8:99:37:6a:87:8b:3c:00:6b:
                    42:7c:fe:b6:d1:6d:89:5d:f5:7a:19:22:3e:10:1d:
                    3c:a2:31:77:5f:f8:58:ad:9d:98:16:58:96:94:79:
                    2c:2f:51:1e:3f:4e:d0:0f:f0:59:3c:a6:b7:c8:25:
                    e0:65:90:47:0b:e4:ab:8c:15:00:dc:3e:dc:c6:2e:
                    70:8a:2e:74:db:01:40:fa:99:d8:f2:22:6f:11:bc:
                    35:21:65:89:05:13:51:2a:d4:bc:d0:2c:29:05:14:
                    ae:7f:f2:83:f8:b8:8e:b6:8a:3c:1b:82:ec:27:b7:
                    ef:fd:97:64:81:6e:1a:3f:3f:06:89:33:3d:8e:2c:
                    70:45:b9:40:c6:0d:cc:49:53:1f:1e:3d:fa:25:2d:
                    0b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:84:7A:A6:63:BE:DA:39:99:82:67:02:B8:9D:A6:C4:B4:63:E8:38
            X509v3 Authority Key Identifier:
                keyid:EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114:165::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:0d:de:50:6a:68:f7:a3:ca:60:70:24:c4:56:62:d4:68:79:
         f3:d7:07:88:f7:dd:bf:39:4b:96:a6:ff:e9:02:3b:3c:1c:e7:
         a2:9b:12:34:33:d7:54:4c:72:6d:f6:4a:87:fd:da:1f:9e:6d:
         a2:cd:4e:17:71:be:05:09:44:b3:32:76:8f:66:ad:b2:cd:29:
         79:1b:a8:f8:ad:79:40:b4:d6:b0:43:c3:22:6e:f6:5f:a9:5c:
         40:5a:47:f3:14:45:ce:3c:11:17:45:51:0b:88:47:3f:20:54:
         e1:5d:3a:9b:06:01:a1:63:76:46:00:c4:1b:dc:11:75:dd:79:
         dd:69:b3:79:e9:57:b5:1e:c6:b0:aa:ea:f3:14:29:c9:52:e7:
         f0:e0:13:24:d5:06:3c:0b:80:c5:c9:52:5b:15:a5:62:d5:2d:
         f0:56:73:30:40:a2:bc:64:11:62:94:cc:13:04:c3:1b:a7:aa:
         6d:70:03:2a:b4:a1:b2:c0:32:91:26:58:cc:d5:74:ee:79:cf:
         62:9d:37:d8:5a:93:f1:79:9d:6d:12:03:7e:b5:45:28:a3:8d:
         1a:07:77:63:c7:66:3e:f7:c7:3c:16:af:4a:f4:10:6f:fd:36:
         7d:a4:98:1c:cd:9c:06:4c:e8:99:eb:03:10:c4:a8:e3:56:61:
         0c:10:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org