Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3a2f33322d3438203d3e20323730373635.roa
File:                     323830343a373131343a3a2f33322d3438203d3e20323730373635.roa (raw, json)
Hash identifier:          p9KDP2FcFDFtiKYymzDwTOvk9OpbG4B1Gs3iv+EaM/U=
Subject key identifier:   7C:33:05:58:88:81:33:EC:60:5C:BD:CA:24:F0:FE:E5:3A:AE:F1:48
Certificate issuer:       /CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
Certificate serial:       4033180F420406FEE245D0B0E0913A66848B8707
Authority key identifier: EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3a2f33322d3438203d3e20323730373635.roa
Signing time:             Mon 15 May 2023 02:00:01 +0000
ROA not before:           Mon 15 May 2023 01:55:01 +0000
ROA not after:            Wed 15 May 2024 02:00:01 +0000
asID:                     270765
IP address blocks:        2804:7114::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:33:18:0f:42:04:06:fe:e2:45:d0:b0:e0:91:3a:66:84:8b:87:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
        Validity
            Not Before: May 15 01:55:01 2023 GMT
            Not After : May 15 02:00:01 2024 GMT
        Subject: CN=3082010A0282010100AE18E89E5FBD8F9A37C42CDF119926A2AEAFAD0D52BD4DBC2B8071140F87C0E813F055D9985C458E473EECE154DB910C61BABFBBDDAD8A47C39924324A462AB5D9E2AD4A2443AE1396051206E19B544CC80B2D724FE3005A05C8CD18F21E6ACAF3BECD6140FBA09025C96FA41E53FD7D1039E0F736F0A590622BB4FC57AFCC395E6F20A9337A557374F16FE2C7E3AAC00634C1658673AF481618E591492320A51F54EA264473A247DC478AFDBDE83CF3C671DCC48029F86263C9BC99D9DB781C3A9AA9EBECC829D07929D16D5B77560FA2D11120E391293F5ABD3DCA7E9534625D1BD127B7FDC04F87148031ABDF58B50C102529E52BCD5205D9EB1B93FCB0330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:e8:9e:5f:bd:8f:9a:37:c4:2c:df:11:99:
                    26:a2:ae:af:ad:0d:52:bd:4d:bc:2b:80:71:14:0f:
                    87:c0:e8:13:f0:55:d9:98:5c:45:8e:47:3e:ec:e1:
                    54:db:91:0c:61:ba:bf:bb:dd:ad:8a:47:c3:99:24:
                    32:4a:46:2a:b5:d9:e2:ad:4a:24:43:ae:13:96:05:
                    12:06:e1:9b:54:4c:c8:0b:2d:72:4f:e3:00:5a:05:
                    c8:cd:18:f2:1e:6a:ca:f3:be:cd:61:40:fb:a0:90:
                    25:c9:6f:a4:1e:53:fd:7d:10:39:e0:f7:36:f0:a5:
                    90:62:2b:b4:fc:57:af:cc:39:5e:6f:20:a9:33:7a:
                    55:73:74:f1:6f:e2:c7:e3:aa:c0:06:34:c1:65:86:
                    73:af:48:16:18:e5:91:49:23:20:a5:1f:54:ea:26:
                    44:73:a2:47:dc:47:8a:fd:bd:e8:3c:f3:c6:71:dc:
                    c4:80:29:f8:62:63:c9:bc:99:d9:db:78:1c:3a:9a:
                    a9:eb:ec:c8:29:d0:79:29:d1:6d:5b:77:56:0f:a2:
                    d1:11:20:e3:91:29:3f:5a:bd:3d:ca:7e:95:34:62:
                    5d:1b:d1:27:b7:fd:c0:4f:87:14:80:31:ab:df:58:
                    b5:0c:10:25:29:e5:2b:cd:52:05:d9:eb:1b:93:fc:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:33:05:58:88:81:33:EC:60:5C:BD:CA:24:F0:FE:E5:3A:AE:F1:48
            X509v3 Authority Key Identifier:
                keyid:EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3a2f33322d3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:03:91:f5:42:9c:31:38:db:69:26:e7:76:4e:71:66:4e:
         48:e2:4b:ab:7d:78:79:71:ad:ec:ba:fa:9a:fe:c9:e8:e2:54:
         3f:6d:34:3e:34:86:2e:43:5a:c9:13:37:9b:4d:b5:74:ea:70:
         8c:81:83:fa:da:75:b0:8e:2b:50:77:a9:b6:14:93:f0:c9:71:
         23:82:73:37:94:2b:22:cf:d5:fc:c6:9d:44:1d:d0:7c:1e:df:
         5f:f5:41:cd:25:64:d8:fd:df:20:d6:ce:8c:40:9e:09:3b:1c:
         8f:64:f5:09:d2:b9:d1:4a:5c:06:99:ea:cb:50:cb:83:8f:8f:
         1f:c2:4b:4d:ad:2b:6c:92:ef:98:e4:e5:10:cb:4b:b4:86:6f:
         2d:b6:3c:be:42:c4:78:db:3c:21:ba:32:2a:31:75:5e:bf:d1:
         18:e3:6b:fe:b0:cc:24:f0:f0:fe:a6:1c:08:64:90:12:5c:32:
         96:99:58:9d:da:cc:fb:83:a4:39:48:f6:25:04:a0:03:96:1b:
         f9:cc:bb:55:f0:12:85:96:87:50:df:68:1b:5a:8c:89:7f:e8:
         9c:94:89:60:ed:32:71:86:19:ed:03:91:42:87:2c:63:8c:e9:
         7e:8b:01:60:3e:3b:dc:cb:88:f3:03:01:c0:c8:13:b4:df:76:
         08:b1:1e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org