Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31323a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a31323a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          gZbRps0+5kBbEUSthM3quyAoj+baQN9RL8vG+2ugJpU=
Subject key identifier:   33:76:AE:20:FB:E6:F7:57:34:B9:96:03:57:B5:5F:C3:91:CE:1D:A2
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       413E6FE48C7B9D1C029656477C3553D473408FC7
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31323a3a2f34382d3438203d3e203532353830.roa
Signing time:             Wed 12 Jul 2023 14:35:31 +0000
ROA not before:           Wed 12 Jul 2023 14:30:31 +0000
ROA not after:            Wed 10 Jul 2024 14:35:31 +0000
asID:                     52580
IP address blocks:        2804:cf8:12::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3e:6f:e4:8c:7b:9d:1c:02:96:56:47:7c:35:53:d4:73:40:8f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jul 12 14:30:31 2023 GMT
            Not After : Jul 10 14:35:31 2024 GMT
        Subject: CN=3082010A0282010100E710FF93B17F823E399058B911423F67604039C7E914B1163D02C16A632A5C1FADA86BBC3597E525BBFF5ABFBF2A8A4EE939799D003F169680B1069666DDB418F8EC3BAD330D2D3AD24DFF0C15BB13617B61F44EC1ADB8263A36B597A0005DF84ABC138D7D4282E2019176B45084336DD479DAAFDA436209DF92D8FF1F35033E21C4407A312DC3AE01CE0B63F45A7B716C2354B4FF9D50A4A2615A248E8565E4FBFF072C4B4A1566C8DEFA8734D3D816397F23E73FE271471463AFD4C8A70F1A467C479909A0DE395EAE3BFC26356BAE8E3DF74FFA9B5F9E79C64FC9442DA89048FFA5CE8A97D10C592608D21ED96A79DE26D9F85E455718E2784CA78077C0830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:10:ff:93:b1:7f:82:3e:39:90:58:b9:11:42:
                    3f:67:60:40:39:c7:e9:14:b1:16:3d:02:c1:6a:63:
                    2a:5c:1f:ad:a8:6b:bc:35:97:e5:25:bb:ff:5a:bf:
                    bf:2a:8a:4e:e9:39:79:9d:00:3f:16:96:80:b1:06:
                    96:66:dd:b4:18:f8:ec:3b:ad:33:0d:2d:3a:d2:4d:
                    ff:0c:15:bb:13:61:7b:61:f4:4e:c1:ad:b8:26:3a:
                    36:b5:97:a0:00:5d:f8:4a:bc:13:8d:7d:42:82:e2:
                    01:91:76:b4:50:84:33:6d:d4:79:da:af:da:43:62:
                    09:df:92:d8:ff:1f:35:03:3e:21:c4:40:7a:31:2d:
                    c3:ae:01:ce:0b:63:f4:5a:7b:71:6c:23:54:b4:ff:
                    9d:50:a4:a2:61:5a:24:8e:85:65:e4:fb:ff:07:2c:
                    4b:4a:15:66:c8:de:fa:87:34:d3:d8:16:39:7f:23:
                    e7:3f:e2:71:47:14:63:af:d4:c8:a7:0f:1a:46:7c:
                    47:99:09:a0:de:39:5e:ae:3b:fc:26:35:6b:ae:8e:
                    3d:f7:4f:fa:9b:5f:9e:79:c6:4f:c9:44:2d:a8:90:
                    48:ff:a5:ce:8a:97:d1:0c:59:26:08:d2:1e:d9:6a:
                    79:de:26:d9:f8:5e:45:57:18:e2:78:4c:a7:80:77:
                    c0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:76:AE:20:FB:E6:F7:57:34:B9:96:03:57:B5:5F:C3:91:CE:1D:A2
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31323a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:f0:2b:4d:d0:97:01:84:61:00:6f:97:27:c0:c6:d6:1f:35:
         49:95:87:c7:fc:37:71:09:7c:c3:df:87:4d:94:8d:50:15:e0:
         34:8b:dc:16:ab:61:91:c8:c8:a5:22:cc:6d:3f:0e:f1:40:60:
         29:cb:bb:6f:7a:8a:4f:1d:29:84:b2:04:9e:21:cf:d4:20:0e:
         64:4c:bf:e7:9b:55:29:64:c1:85:31:1f:d3:7f:d0:cb:3c:b7:
         22:ad:f5:1d:7f:e3:07:f1:e5:9a:b2:4f:01:a9:e3:5b:f0:48:
         d4:25:99:0d:d7:07:ab:fc:94:c7:4f:4f:a5:9f:00:c9:dd:7b:
         5c:ee:a9:c6:8a:2a:5b:2e:d8:df:41:3d:33:08:12:36:29:42:
         33:d3:3c:f7:9c:89:ec:11:f1:17:3e:ab:c1:ca:1a:84:30:74:
         7b:4f:68:ac:11:13:09:df:9a:3f:c4:20:0a:fe:74:2f:b6:27:
         c5:bf:ab:d1:35:63:51:96:0e:c5:4f:f9:76:14:a2:5a:df:78:
         fa:dd:d2:08:ca:26:f0:18:47:02:a0:c8:f9:08:09:0f:75:63:
         0e:ff:b6:3c:45:98:96:76:9f:aa:22:3a:fb:df:d7:b1:b7:bf:
         de:43:2b:1b:83:e3:2f:c6:2a:e7:59:45:3e:8e:12:aa:9e:0c:
         be:16:1a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org