Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030353a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a633030353a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          MFMLFtvCE/EOHiLQd/Nv4CX6fp9WzeGiuQJj90aTHCY=
Subject key identifier:   FE:A5:5D:A4:A9:84:85:21:23:EE:2E:72:8C:DD:42:ED:CE:85:CE:D8
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       5468BEA18BAB1234881FAE7E78CC47F640A25168
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030353a3a2f34382d3438203d3e203532353830.roa
Signing time:             Mon 01 Jan 2024 12:54:01 +0000
ROA not before:           Mon 01 Jan 2024 12:49:01 +0000
ROA not after:            Mon 30 Dec 2024 12:54:01 +0000
asID:                     52580
IP address blocks:        2804:cf8:c005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:68:be:a1:8b:ab:12:34:88:1f:ae:7e:78:cc:47:f6:40:a2:51:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  1 12:49:01 2024 GMT
            Not After : Dec 30 12:54:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:98:ea:b5:6c:d5:a9:da:8b:29:78:24:00:
                    51:23:6f:53:10:9d:46:c0:28:e9:da:8e:a8:ad:43:
                    04:6c:8e:65:f3:95:cc:3a:9e:b9:1d:b4:69:57:14:
                    26:5e:a5:0a:ee:f1:89:86:dd:54:83:d2:19:3d:5b:
                    f4:f7:7b:f4:45:d0:cf:27:2e:cc:bb:54:34:12:7b:
                    4a:75:84:d1:79:be:a3:20:5d:59:67:ea:27:f3:30:
                    2c:ab:34:59:aa:85:f5:6a:48:1d:fc:a2:34:b3:af:
                    46:36:2f:83:6e:f6:a6:ef:c9:78:4c:cf:d4:6c:6c:
                    3a:47:41:8a:db:32:13:df:19:af:3f:b7:4b:91:94:
                    b2:b3:ef:c5:e3:ae:84:da:96:1b:a9:af:df:23:aa:
                    68:d4:28:e3:91:37:2e:1c:ca:35:94:1c:33:f1:34:
                    e2:08:ba:b3:0d:c1:56:35:0c:a0:97:3d:fb:b6:bb:
                    f7:24:43:72:f5:6a:1a:8d:fb:4e:13:fb:07:92:e7:
                    17:be:c8:01:1c:5f:cc:0e:43:fe:f8:d3:20:a1:3d:
                    58:84:93:9c:f1:57:59:d8:b0:01:67:b7:a0:e8:f5:
                    b1:e5:c2:f5:d5:06:a5:6a:94:a7:83:34:51:58:35:
                    56:78:69:34:28:39:e2:b5:9a:cc:29:ec:1d:fa:67:
                    bb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A5:5D:A4:A9:84:85:21:23:EE:2E:72:8C:DD:42:ED:CE:85:CE:D8
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030353a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c005::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:90:15:b9:4e:38:44:2a:fe:52:10:e0:a1:79:dd:0f:ab:18:
         56:f3:98:86:ad:c7:16:c6:dc:f6:f3:93:2a:66:12:9f:73:20:
         62:04:ef:ef:a3:25:83:5c:9e:07:f1:1b:1d:e7:9c:3a:ba:cf:
         81:fd:7f:93:04:8d:29:37:63:8a:ca:eb:b9:db:f2:67:cc:37:
         7e:db:4c:0e:5d:63:98:c6:7f:1d:a6:a1:eb:84:53:9a:b6:31:
         cd:db:cc:3d:79:d6:a0:20:79:56:a9:11:07:5b:bd:94:e0:03:
         98:61:6d:03:f3:56:55:9c:34:8f:c8:eb:3b:5b:c1:81:89:bd:
         36:c0:e4:a5:e4:81:53:3c:cd:e1:ec:62:35:fe:08:75:3a:d2:
         f0:96:cf:09:7a:5b:76:b1:54:64:c5:6a:da:9b:44:66:e0:a8:
         d9:02:59:bd:f9:c4:f1:1e:5b:ce:e8:3b:0e:0a:37:c5:c2:0e:
         b8:37:7a:da:37:e7:2a:8b:5e:64:9c:21:2e:49:ca:50:d2:27:
         dd:cd:77:7e:cd:d9:31:84:aa:da:22:23:07:f7:df:28:40:1e:
         c3:31:44:dc:73:7c:aa:64:75:95:81:fb:95:6c:55:25:21:d3:
         10:d4:c6:b5:59:80:d8:f9:00:bc:d2:06:67:30:ed:41:ad:88:
         70:7d:83:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org