Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31383a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a31383a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          bdhOV3v1TV8QjawAf51UWoz9QTS/MJw/kvJV9rjR2T8=
Subject key identifier:   BE:82:AA:A9:72:0D:9D:46:1A:D9:B1:CB:14:68:5D:CB:A7:46:57:6B
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       4C1902C3DD2C113676AB9787B1E89188D62B1E1D
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31383a3a2f34382d3438203d3e203532353830.roa
Signing time:             Wed 12 Jul 2023 14:35:31 +0000
ROA not before:           Wed 12 Jul 2023 14:30:31 +0000
ROA not after:            Wed 10 Jul 2024 14:35:31 +0000
asID:                     52580
IP address blocks:        2804:cf8:18::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:19:02:c3:dd:2c:11:36:76:ab:97:87:b1:e8:91:88:d6:2b:1e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jul 12 14:30:31 2023 GMT
            Not After : Jul 10 14:35:31 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:8e:8a:90:74:f4:dd:80:fc:44:0b:80:10:
                    15:95:e3:68:fb:b4:11:f1:59:0a:bf:63:3b:0f:74:
                    35:8d:56:a0:eb:0f:26:7a:bd:3e:dd:62:10:03:93:
                    80:74:f5:d9:66:02:c2:ff:bb:a6:34:67:26:3c:ed:
                    01:dd:11:77:58:8f:fa:ad:08:cd:49:79:f3:86:b4:
                    68:7d:80:7f:77:aa:3e:93:0c:f6:75:02:8c:80:f9:
                    ed:d8:64:dc:58:e5:38:00:d1:58:74:63:f3:e3:84:
                    a4:da:3c:93:95:0c:9c:3d:c5:ad:e1:f6:b6:6f:95:
                    3c:5e:1e:b2:88:75:19:22:d2:fb:4c:2b:89:99:6c:
                    d6:94:17:b6:01:23:a7:f4:a7:a9:53:eb:3e:e6:d5:
                    d2:a1:2b:d9:3c:81:45:db:46:d3:9a:69:a1:f8:4f:
                    08:b9:67:2f:d4:3f:c3:28:a7:32:fb:d6:e2:63:c8:
                    6c:95:c3:2a:65:8f:a1:fc:56:10:02:60:b9:28:6b:
                    7e:1b:3b:2a:49:2b:22:32:b6:32:0e:cb:57:5c:69:
                    55:d0:b7:24:bf:e1:ff:64:98:e7:73:dc:d3:27:03:
                    37:f5:c4:80:85:a8:83:ea:f4:e7:b5:59:c3:60:02:
                    56:c5:7f:d0:03:b8:b7:12:c4:4f:2c:5d:5c:3f:47:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:82:AA:A9:72:0D:9D:46:1A:D9:B1:CB:14:68:5D:CB:A7:46:57:6B
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31383a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:2b:6c:4b:50:4e:b3:2f:07:63:37:3d:ba:52:97:ea:07:79:
         ae:30:9e:b4:df:e3:57:e4:ce:c2:86:dc:75:4d:e8:24:9c:89:
         1e:93:c4:46:b8:0f:ab:9d:d8:e2:53:d0:99:3e:5c:88:f0:0e:
         9a:f3:c0:7b:47:cb:5e:74:33:18:08:cc:67:5f:cc:ed:8a:1a:
         5f:8f:de:95:07:ee:95:17:51:c9:57:e3:96:97:78:b6:cb:2e:
         96:65:04:aa:b1:be:b2:1d:db:dd:d9:52:58:55:8b:7d:1b:72:
         93:26:c3:a2:0a:7f:80:0f:dc:b2:2d:17:82:e2:45:2c:e9:76:
         c5:d5:d6:c4:b9:97:2b:97:1a:c3:a7:f5:bf:22:09:a7:03:38:
         85:0b:7a:f4:f0:dd:2b:ad:38:15:00:9d:3c:d5:c5:4c:7f:cd:
         52:3f:a3:ff:17:93:74:90:36:39:9b:d2:03:2e:9d:36:f6:a0:
         72:07:2e:80:b9:98:65:7f:1a:3d:6c:c0:39:5c:c4:67:b1:f2:
         e2:98:99:74:f1:b5:35:34:ac:c1:33:03:7d:ab:30:aa:81:66:
         ee:56:83:b6:c2:54:26:80:d0:75:50:5c:e0:61:11:ea:f5:34:
         c3:a3:ec:92:97:63:c0:bf:bf:66:a6:c2:92:27:dd:7d:69:6b:
         99:94:8b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org