Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa
File:                     323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa (raw, json)
Hash identifier:          iXIqeVW+/LtsuE6Iel5qqLAfeAx6mCFvvVV/tAru9Ng=
Subject key identifier:   79:9B:86:C9:B9:BB:85:A0:06:0B:A0:CC:21:3B:9B:59:9E:39:F1:E6
Certificate issuer:       /CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
Certificate serial:       05072236B5B0CF3EBB709DB7335D3FD8515624B2
Authority key identifier: EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa
Signing time:             Mon 15 May 2023 02:00:00 +0000
ROA not before:           Mon 15 May 2023 01:55:00 +0000
ROA not after:            Wed 15 May 2024 02:00:00 +0000
asID:                     270765
IP address blocks:        2804:7114:167::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:07:22:36:b5:b0:cf:3e:bb:70:9d:b7:33:5d:3f:d8:51:56:24:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
        Validity
            Not Before: May 15 01:55:00 2023 GMT
            Not After : May 15 02:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:6d:c1:76:fd:b3:a9:4e:87:23:0e:de:88:
                    e4:3e:0d:03:35:d5:f5:bb:17:bf:d8:ef:e6:1f:c8:
                    20:c6:d0:86:b0:be:21:ae:38:de:6d:71:3f:1a:65:
                    ac:5f:7a:1a:d7:f8:3b:8f:69:01:c0:3d:ea:77:0c:
                    d8:71:f0:5d:2b:af:78:0e:ab:bf:33:12:a3:49:f0:
                    5e:3e:31:c8:fb:4d:66:97:31:35:4b:4c:50:0a:db:
                    0a:b0:ce:fc:51:bc:a8:41:34:6e:6a:4b:0c:f4:61:
                    0d:e9:32:c9:bb:30:34:d2:44:6f:6f:0d:87:b6:6e:
                    14:5f:2c:c6:8a:cd:e6:74:04:34:4f:88:52:60:cb:
                    c1:0c:09:7c:08:ea:77:96:cd:75:4b:31:f6:28:2f:
                    c9:db:2c:58:18:a2:00:77:23:2b:d1:55:0d:ee:c5:
                    f4:c3:e3:ff:9d:2c:23:3b:87:70:9c:3b:f6:c7:02:
                    2e:b3:d4:42:62:0e:49:8a:c8:35:1c:1c:21:46:77:
                    11:21:09:4f:22:7d:3e:fa:9a:ad:a1:1b:f7:92:c0:
                    1c:c4:e8:93:5a:cc:3a:85:84:98:69:03:1e:3d:b1:
                    d5:2f:c5:7e:9f:c0:ac:fc:a7:2a:f1:41:ac:c6:23:
                    53:c2:67:a3:97:67:a4:27:35:59:fd:79:96:dc:18:
                    b2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9B:86:C9:B9:BB:85:A0:06:0B:A0:CC:21:3B:9B:59:9E:39:F1:E6
            X509v3 Authority Key Identifier:
                keyid:EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114:167::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:8f:d6:8e:b5:9b:25:44:28:5c:79:c7:d6:18:1a:7c:af:69:
         0c:0a:a2:fb:87:ae:95:6c:68:30:8b:3e:3f:9e:d7:ed:32:1a:
         ed:38:05:3b:83:40:4e:c4:af:e1:df:e4:b1:11:f8:7d:c6:61:
         84:35:8e:6f:bf:9b:fb:b4:80:28:b5:c5:6c:77:98:4a:e5:0a:
         42:b9:58:90:d9:24:b5:63:e0:7b:38:bd:af:d4:23:de:54:54:
         98:94:b8:59:12:bc:e9:b1:bd:54:a2:27:f0:ec:68:fa:b6:5f:
         06:7b:37:ff:b9:cd:61:1e:a0:1e:2a:53:45:ca:fb:7d:30:3c:
         1a:ed:f7:ce:f5:7d:8c:64:77:f9:6a:2d:e2:8a:ba:e4:b3:cd:
         e3:a9:02:f2:44:4b:39:30:0a:21:13:61:77:1e:b9:d0:02:d0:
         d0:7d:9f:56:02:f2:4d:84:b1:45:bd:66:b3:3a:c3:aa:41:a3:
         40:38:47:35:34:9d:bb:d9:85:67:c7:3a:93:a7:3b:54:47:30:
         11:b4:03:1b:44:20:ed:cb:85:a7:93:e4:1b:e9:63:c4:cd:d9:
         f6:be:21:06:be:66:f7:bf:0f:f4:bc:97:de:38:ad:0b:96:d9:
         e7:0b:b9:16:64:ec:8b:48:bf:c8:bd:87:ae:c4:0a:80:81:cf:
         8c:58:2c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org