Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31303a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a31303a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          NDhynySuGIjMsbDO7x0n1TPirOI7f8kevt+OsaMXYJM=
Subject key identifier:   95:94:6E:5C:B6:1E:41:14:24:9F:62:3A:FC:C4:BF:8A:0F:42:CD:CB
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       66E9BF51A61401473D43CE9EB3D83096361E66A6
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31303a3a2f34382d3438203d3e203532353830.roa
Signing time:             Tue 20 Feb 2024 13:28:00 +0000
ROA not before:           Tue 20 Feb 2024 13:23:00 +0000
ROA not after:            Tue 18 Feb 2025 13:28:00 +0000
asID:                     52580
IP address blocks:        2804:cf8:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e9:bf:51:a6:14:01:47:3d:43:ce:9e:b3:d8:30:96:36:1e:66:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Feb 20 13:23:00 2024 GMT
            Not After : Feb 18 13:28:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:2c:ee:10:dd:81:a1:8d:67:53:ef:71:b2:
                    84:e1:fb:c1:96:f5:da:37:be:c6:ec:a0:a5:43:1b:
                    77:00:8c:c6:87:1b:91:19:0b:67:ec:45:d9:00:fd:
                    95:f1:93:65:26:60:f9:24:68:38:13:eb:0f:c3:61:
                    04:14:c2:d6:56:74:7c:25:7f:37:cb:f8:57:c5:44:
                    33:d9:7c:e5:29:24:f2:e8:71:4c:5e:c2:2f:7a:1e:
                    24:1a:cb:41:50:ac:11:f0:17:f8:dd:77:95:8a:7c:
                    13:a3:b7:ce:81:b7:17:8c:a9:ea:98:30:f2:61:e9:
                    b0:58:c0:7e:05:5e:5c:eb:1a:7c:fb:0a:0a:ed:7f:
                    bc:c7:8c:67:af:05:f5:4d:7c:8c:1c:73:75:ff:5a:
                    ef:d8:85:8b:93:4b:a0:7c:fd:02:db:f1:ec:9c:d4:
                    75:55:1d:f2:d0:78:9f:58:83:e5:ab:7c:97:24:d8:
                    e8:34:31:a1:2b:7e:c3:c4:6e:14:1e:41:77:d6:b7:
                    02:80:ef:36:e1:ab:64:ce:7f:ae:24:68:9c:92:a6:
                    18:d8:09:82:02:a1:95:a1:27:bd:06:9e:c2:b4:aa:
                    cd:5c:13:af:7a:ee:85:c5:86:b8:76:d1:b1:67:e9:
                    e7:a2:96:29:e8:9b:db:8d:d2:88:63:b0:01:4c:8e:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:94:6E:5C:B6:1E:41:14:24:9F:62:3A:FC:C4:BF:8A:0F:42:CD:CB
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31303a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:84:2e:3a:75:33:b9:98:bf:82:eb:45:0d:15:a7:7b:d7:9b:
         59:fa:79:de:36:ae:aa:82:98:ce:e0:a0:e2:e5:66:aa:16:83:
         cd:a8:54:c4:6b:d0:1a:02:4e:7c:c6:27:59:5c:c7:c6:11:da:
         6d:de:90:56:2d:37:37:0d:c4:9b:52:1a:f9:23:fc:08:b0:00:
         8e:02:40:f6:84:7e:8c:97:27:e1:25:53:d7:e0:ae:cf:d9:82:
         4a:5b:99:18:03:25:44:fa:24:0d:fa:4a:53:e6:40:58:f0:94:
         e3:5e:cc:ad:a5:37:d5:96:d3:37:9a:a4:58:88:40:c3:1b:42:
         20:42:c8:10:11:27:73:ca:8a:c6:83:9f:51:73:02:bb:78:44:
         1e:be:8b:38:a1:98:8f:f2:f4:cb:84:e4:92:e7:1c:da:3e:8d:
         48:2b:09:99:16:24:89:ca:f2:36:c3:3f:1f:86:f6:82:dd:d0:
         e4:26:a0:b2:11:f8:37:06:38:88:53:da:4f:30:e4:7e:26:31:
         14:d7:2e:32:1c:c6:9f:10:2d:7f:9e:18:4a:f1:0d:70:4c:f1:
         80:e0:bc:77:5d:10:cf:d5:28:a9:4a:aa:af:a6:2c:dc:dc:e9:
         40:f6:e7:99:61:07:24:7e:ee:58:2f:dd:f7:56:20:12:37:31:
         5f:6b:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org