Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31363a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a31363a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          Kid6xxaE1vywDbMuo8BO6bh78lk2o4NM6TEsXyi1veo=
Subject key identifier:   04:7E:8F:31:F4:78:23:C8:F3:85:FD:66:FD:47:27:36:BB:38:76:3A
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       681F0512A10F006A23EBC1A2BF0CB6C020460A20
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31363a3a2f34382d3438203d3e203532353830.roa
Signing time:             Wed 12 Jul 2023 14:35:31 +0000
ROA not before:           Wed 12 Jul 2023 14:30:31 +0000
ROA not after:            Wed 10 Jul 2024 14:35:31 +0000
asID:                     52580
IP address blocks:        2804:cf8:16::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1f:05:12:a1:0f:00:6a:23:eb:c1:a2:bf:0c:b6:c0:20:46:0a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jul 12 14:30:31 2023 GMT
            Not After : Jul 10 14:35:31 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:68:da:cc:2c:d4:24:d6:29:41:9d:17:db:
                    2c:dc:51:ad:26:82:f0:84:7c:8e:54:9b:4b:a5:53:
                    ff:40:15:e2:f5:77:ea:a5:a2:a3:ab:27:3d:9c:3a:
                    76:e1:e8:a2:af:93:bc:dd:2b:8d:5f:72:15:af:1a:
                    f8:5f:93:ec:21:1c:e8:05:be:81:be:8f:1b:d8:da:
                    b8:fc:ba:47:39:e4:96:11:53:fa:ea:b6:73:50:ca:
                    e3:91:a2:22:d9:70:f6:59:83:72:a5:a8:ec:ac:52:
                    01:42:6f:27:1e:51:fe:83:9f:eb:dc:d1:bd:0b:b2:
                    98:94:09:b4:d5:f1:54:4a:6f:36:ed:ac:a8:16:1e:
                    d1:77:09:86:30:f9:b5:75:74:76:a5:8e:6c:73:f0:
                    a1:05:5a:d4:f2:4b:22:23:b1:29:5a:c4:21:0b:36:
                    28:d2:76:d4:9e:93:81:55:85:c0:e6:b8:51:a8:46:
                    a5:f3:8e:97:a2:1b:ec:e8:5b:e7:4a:e5:66:73:3e:
                    93:85:c3:c8:8f:59:cd:6a:04:14:9f:ee:93:3c:83:
                    85:3e:af:e9:6f:f4:5f:1e:96:9c:97:a5:7c:61:c5:
                    c2:31:2c:85:9e:28:5c:04:7e:c1:15:82:8f:97:e8:
                    23:0f:f9:e4:ef:2b:9c:d3:87:d2:93:b5:79:1d:eb:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7E:8F:31:F4:78:23:C8:F3:85:FD:66:FD:47:27:36:BB:38:76:3A
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31363a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:c6:92:f8:42:81:24:c2:4e:e0:84:f8:f9:1a:5f:8b:70:e5:
         27:fa:6f:fb:ae:7c:68:3c:25:1a:3e:c7:44:62:89:8b:44:c1:
         c3:5c:a8:98:b5:e7:c2:12:69:8e:e0:0f:76:6f:f9:03:f6:34:
         09:58:9c:50:cd:14:54:2e:2a:77:97:0a:db:0a:27:c5:6c:b1:
         12:8e:24:87:2f:b9:21:8c:4f:66:73:b7:20:f5:c9:a9:35:9c:
         d1:82:f9:ae:42:54:f0:3a:6b:d3:b0:ad:ca:1a:74:00:a7:4a:
         08:d2:13:b0:5f:8a:58:d9:77:8d:d1:f4:35:d9:d9:ed:6b:dc:
         1d:e8:f0:54:8e:0c:d5:f9:7a:5e:30:62:8b:f6:39:f0:46:81:
         56:ed:ef:e8:41:47:63:5b:b9:c8:f9:ed:cd:69:e6:88:93:24:
         b9:56:11:de:58:4b:f4:62:8d:44:5f:cc:c3:2f:1f:12:5d:d3:
         24:62:08:f8:f5:6b:59:92:70:e1:95:66:94:ea:87:44:c9:b8:
         90:71:00:e7:9e:04:62:17:ef:7e:0c:96:78:13:31:1e:c4:3f:
         d2:58:cf:4d:1d:c8:60:b7:19:cd:9e:f8:17:18:a7:2d:23:4c:
         0a:fb:19:74:eb:39:97:c7:3e:f8:00:ae:ce:3a:fc:87:d8:08:
         03:c9:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org