Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31313a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a31313a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          mu6FEZ1I05BdbekkbtSTROMb8dPlhuvpx/zEqUeqlAc=
Subject key identifier:   6D:19:4A:EA:D2:44:1B:62:37:63:7C:C0:98:ED:44:57:03:6F:5B:B7
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       65CF840E65919C305DDB91A592378425D368D43E
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31313a3a2f34382d3438203d3e203532353830.roa
Signing time:             Mon 25 Mar 2024 16:38:00 +0000
ROA not before:           Mon 25 Mar 2024 16:33:00 +0000
ROA not after:            Mon 24 Mar 2025 16:38:00 +0000
asID:                     52580
IP address blocks:        2804:cf8:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:cf:84:0e:65:91:9c:30:5d:db:91:a5:92:37:84:25:d3:68:d4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Mar 25 16:33:00 2024 GMT
            Not After : Mar 24 16:38:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c4:a4:f6:00:a8:8b:a3:1c:ec:33:e9:f3:68:
                    10:33:45:2c:ec:ce:dc:88:fa:b3:2a:ff:49:06:19:
                    fe:68:2f:7a:58:90:25:8d:d4:31:8e:3b:20:4d:50:
                    4f:b2:95:ef:0d:97:f1:47:ce:86:bd:82:8b:b9:ca:
                    76:55:7e:3b:83:f5:97:1d:6e:0b:36:86:33:a3:99:
                    ba:d2:b7:db:13:72:a6:46:95:69:96:87:fb:b3:27:
                    fc:73:80:6d:2a:ff:b8:77:15:1e:fc:17:91:3e:e3:
                    28:af:03:f9:50:14:c1:fe:45:78:f1:10:cd:76:52:
                    15:59:8d:20:e0:29:9a:1b:83:d8:30:d0:70:31:5f:
                    04:9f:00:62:9c:39:6b:9f:a6:a4:d4:77:ad:0d:4e:
                    4e:cb:11:01:7f:cf:db:de:3f:81:af:b2:6e:d1:e6:
                    d8:f8:6b:87:8c:65:cc:cd:b5:7c:20:4a:e3:40:bd:
                    f7:95:79:ea:77:7e:aa:e8:ed:18:f8:cc:e9:6b:38:
                    37:58:69:8e:bb:92:6c:b6:be:21:44:ff:31:b8:77:
                    71:48:d9:f0:08:69:41:dd:48:88:0f:87:92:fd:20:
                    b0:78:53:64:78:bd:5e:5a:90:81:a6:6d:6b:e8:57:
                    ef:31:d1:98:c4:71:7e:ba:21:00:9a:0d:98:2a:c8:
                    0d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:19:4A:EA:D2:44:1B:62:37:63:7C:C0:98:ED:44:57:03:6F:5B:B7
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31313a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:6e:25:ee:25:a4:c1:8c:f7:f5:1a:5d:50:a3:51:35:ce:51:
         e8:cd:a7:1c:72:a9:f3:a3:98:7d:5c:b0:3e:49:8a:c2:30:07:
         17:75:36:ef:9d:c4:75:b9:f7:48:65:d4:b5:20:6d:c8:c4:f5:
         2e:c0:f9:9a:2b:3c:e6:21:5d:b1:d1:11:2f:e0:6a:b3:6c:b9:
         2f:66:15:e6:86:77:ce:12:62:dd:f9:e5:76:2d:08:7a:6e:78:
         03:50:9b:03:6c:f8:4d:9a:26:00:dd:bf:75:54:eb:a3:90:7f:
         30:a9:7e:6d:9c:22:21:05:c2:ff:61:72:bb:d0:80:ef:0b:2c:
         06:05:f7:56:c9:48:c0:a1:a9:6d:8c:8d:82:7a:39:a0:d9:2b:
         18:ca:e4:2c:6f:f9:06:22:5e:c0:9d:86:2d:b1:76:a6:ab:08:
         27:b6:8e:ba:e2:cb:d9:f2:99:4d:d5:b7:05:36:7f:ef:9d:cf:
         e5:9a:91:94:25:e5:5e:7b:19:d0:f7:4d:0a:15:66:28:85:19:
         79:1c:75:90:e4:e2:50:87:a6:5e:1e:92:56:1e:25:c5:f3:99:
         9a:34:57:25:c9:a6:f2:e5:bc:82:66:d1:7d:b9:df:0a:7c:73:
         8b:53:26:81:fe:58:a8:08:a1:7c:cc:e9:f3:d6:e8:3f:b6:33:
         8e:ab:d5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org