Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a623a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a623a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          uazTsq/j2T0Y+gF7u20I1d2joA5mzLy1glMLoi8fAlo=
Subject key identifier:   66:CE:18:C3:39:1C:FD:59:B5:10:0C:27:DE:D6:DF:6F:59:3A:10:D9
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       363A8C62E82F81E8C5C84425D2E3E9D2C2F27D4F
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a623a3a2f34382d3438203d3e203532353830.roa
Signing time:             Tue 02 Jan 2024 13:08:00 +0000
ROA not before:           Tue 02 Jan 2024 13:03:00 +0000
ROA not after:            Tue 31 Dec 2024 13:08:00 +0000
asID:                     52580
IP address blocks:        2804:cf8:b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3a:8c:62:e8:2f:81:e8:c5:c8:44:25:d2:e3:e9:d2:c2:f2:7d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  2 13:03:00 2024 GMT
            Not After : Dec 31 13:08:00 2024 GMT
        Subject: CN=3082010A0282010100A50A382684445B3ECC907C4D7F2FC8D5C823AEA53847B62101C09C4FFBB534C59A7E5F5F98708F328F3D4873BF942F32CB2B94C84619CFB8F8C415AB46B382755354B02273AC2D33E6D4AFB8B5724BF11B1ACB7B15ED3DED1E33BFCB36DF7A1AC3E33C70CD6710E04E3CAD61A002253A4E8A0B8A282EC1C3ADF77CB061E9A2FBEEBA4554D5EF82E277F4BC85E13390967EA8D0E8356E652736E642D61C7723DE82C448B6ABC375022A6FF60A429EE5CA8CE723A1B1B18D716DAB8B5157D0029D53313BA8E9232B659B7419068E5DD9408224529A9BA792137F1FE81233DEBA0D2D359060E7CA7A001D7953DF879D88366F2D81BE6F613403E7765D5AC1CCA0910203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:38:26:84:44:5b:3e:cc:90:7c:4d:7f:2f:
                    c8:d5:c8:23:ae:a5:38:47:b6:21:01:c0:9c:4f:fb:
                    b5:34:c5:9a:7e:5f:5f:98:70:8f:32:8f:3d:48:73:
                    bf:94:2f:32:cb:2b:94:c8:46:19:cf:b8:f8:c4:15:
                    ab:46:b3:82:75:53:54:b0:22:73:ac:2d:33:e6:d4:
                    af:b8:b5:72:4b:f1:1b:1a:cb:7b:15:ed:3d:ed:1e:
                    33:bf:cb:36:df:7a:1a:c3:e3:3c:70:cd:67:10:e0:
                    4e:3c:ad:61:a0:02:25:3a:4e:8a:0b:8a:28:2e:c1:
                    c3:ad:f7:7c:b0:61:e9:a2:fb:ee:ba:45:54:d5:ef:
                    82:e2:77:f4:bc:85:e1:33:90:96:7e:a8:d0:e8:35:
                    6e:65:27:36:e6:42:d6:1c:77:23:de:82:c4:48:b6:
                    ab:c3:75:02:2a:6f:f6:0a:42:9e:e5:ca:8c:e7:23:
                    a1:b1:b1:8d:71:6d:ab:8b:51:57:d0:02:9d:53:31:
                    3b:a8:e9:23:2b:65:9b:74:19:06:8e:5d:d9:40:82:
                    24:52:9a:9b:a7:92:13:7f:1f:e8:12:33:de:ba:0d:
                    2d:35:90:60:e7:ca:7a:00:1d:79:53:df:87:9d:88:
                    36:6f:2d:81:be:6f:61:34:03:e7:76:5d:5a:c1:cc:
                    a0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CE:18:C3:39:1C:FD:59:B5:10:0C:27:DE:D6:DF:6F:59:3A:10:D9
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a623a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:53:7b:4d:98:bf:1e:2e:21:44:76:2a:b6:46:28:d1:e1:32:
         f4:51:e7:7e:e7:cb:ef:60:ff:aa:68:dc:fe:ae:ff:16:fc:79:
         4e:05:e3:76:cd:28:82:f2:b9:7c:99:0a:67:ac:93:41:0a:f3:
         5b:fe:ec:a2:9f:fb:e5:41:b1:2c:83:42:db:1f:c0:f4:ad:37:
         15:33:de:67:c1:30:ea:0b:a8:57:17:38:59:5c:7c:66:1b:df:
         c1:c7:05:88:9d:2b:6c:29:3b:31:18:45:dc:64:49:5d:4b:d8:
         dd:d0:0d:af:5e:0c:fa:61:2c:f4:16:e0:46:4e:f9:69:98:16:
         a7:17:e0:34:63:1f:e5:82:ae:b0:c4:1e:c6:42:a6:91:50:c4:
         4b:e7:ee:ec:03:f4:21:ad:57:ae:bc:46:5b:ce:9b:a9:21:76:
         22:b1:2c:13:e1:e1:c7:6d:96:d1:67:8f:dc:54:26:10:d4:38:
         78:5b:cc:88:f7:20:a3:8b:5e:71:23:ad:e8:be:af:9f:e2:72:
         1e:b6:26:9d:d4:a7:9b:f8:9f:48:f7:99:b9:8f:a5:a8:bd:38:
         88:7b:5d:c8:72:b4:16:b5:a1:05:c9:da:df:a3:a5:7f:fd:2b:
         d7:c6:83:d9:9a:af:6c:3d:b0:e1:25:9e:a0:73:54:ad:49:8f:
         7b:25:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org