Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030373a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a633030373a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          IX9taVxaxy0zbtEWkOxteFtKtTi4Q2yldSEuS4lLr8I=
Subject key identifier:   02:4C:65:DE:D1:BF:46:62:C7:A9:49:34:99:33:EA:6F:3C:16:D7:CF
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       189F4CA72C1795AE3097C50161FB49AFD09B69CE
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030373a3a2f34382d3438203d3e203532353830.roa
Signing time:             Thu 24 Aug 2023 12:14:00 +0000
ROA not before:           Thu 24 Aug 2023 12:09:00 +0000
ROA not after:            Thu 22 Aug 2024 12:14:00 +0000
asID:                     52580
IP address blocks:        2804:cf8:c007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9f:4c:a7:2c:17:95:ae:30:97:c5:01:61:fb:49:af:d0:9b:69:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Aug 24 12:09:00 2023 GMT
            Not After : Aug 22 12:14:00 2024 GMT
        Subject: CN=3082010A0282010100D39505DC8E8663EED529A2811D04C707C6ADC6458C6B40B27A4B9EFD3A96CB3A5B68AE5B944B95EA864969B292D9192FB0700D42E9C1E523A2F2B6CEBCB7A5F253C8F6BF03367CC8CC3714DDCAB4B033FE63B4A1582274B9A1093891CA0F09B390F9E1E6C5D6490CF95B433266F70EAFD3AF0D8DD91B413E78DC99BEF70EF0EC4AD6D23212E9E3B6E1689EE0EB0CDEDDC4FF48B2D9E1CFFF3A6A34C0338ACB34747CF6FC2388BA6289A7334AF5822237E5F2FD030528FA77BD3CABFF488356F80C04B8AE8172892A63E3E7E4CA280FF3952CC12CC6B73A1B214D02D985BA82293C9F37892E6890915DE737483FF987457CA2241DF7C115DE83EBD1C4D56B95270203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:95:05:dc:8e:86:63:ee:d5:29:a2:81:1d:04:
                    c7:07:c6:ad:c6:45:8c:6b:40:b2:7a:4b:9e:fd:3a:
                    96:cb:3a:5b:68:ae:5b:94:4b:95:ea:86:49:69:b2:
                    92:d9:19:2f:b0:70:0d:42:e9:c1:e5:23:a2:f2:b6:
                    ce:bc:b7:a5:f2:53:c8:f6:bf:03:36:7c:c8:cc:37:
                    14:dd:ca:b4:b0:33:fe:63:b4:a1:58:22:74:b9:a1:
                    09:38:91:ca:0f:09:b3:90:f9:e1:e6:c5:d6:49:0c:
                    f9:5b:43:32:66:f7:0e:af:d3:af:0d:8d:d9:1b:41:
                    3e:78:dc:99:be:f7:0e:f0:ec:4a:d6:d2:32:12:e9:
                    e3:b6:e1:68:9e:e0:eb:0c:de:dd:c4:ff:48:b2:d9:
                    e1:cf:ff:3a:6a:34:c0:33:8a:cb:34:74:7c:f6:fc:
                    23:88:ba:62:89:a7:33:4a:f5:82:22:37:e5:f2:fd:
                    03:05:28:fa:77:bd:3c:ab:ff:48:83:56:f8:0c:04:
                    b8:ae:81:72:89:2a:63:e3:e7:e4:ca:28:0f:f3:95:
                    2c:c1:2c:c6:b7:3a:1b:21:4d:02:d9:85:ba:82:29:
                    3c:9f:37:89:2e:68:90:91:5d:e7:37:48:3f:f9:87:
                    45:7c:a2:24:1d:f7:c1:15:de:83:eb:d1:c4:d5:6b:
                    95:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4C:65:DE:D1:BF:46:62:C7:A9:49:34:99:33:EA:6F:3C:16:D7:CF
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030373a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c007::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:59:76:e2:62:af:5d:d6:2b:f9:47:ef:0c:8c:eb:fe:ee:31:
         09:b5:62:ad:07:30:66:28:db:02:3d:8e:93:0c:3b:68:af:23:
         be:90:db:1d:fc:af:70:77:2d:61:27:28:89:22:e0:b2:e6:11:
         71:c1:8e:b2:6d:47:da:39:7c:f8:67:9d:f2:12:50:b5:d0:c8:
         e1:6b:d2:80:df:a3:b1:f9:ad:3f:94:29:cf:6d:39:ef:bc:08:
         80:dd:fd:ce:7f:d7:d9:23:62:5f:de:f1:75:58:e2:61:bd:1e:
         40:b9:d5:f2:54:3d:0d:bc:a3:bf:70:c0:98:18:7d:fb:4a:5b:
         78:18:9b:4b:ac:89:30:1e:5f:24:f7:d3:a7:36:7b:3a:b3:90:
         64:9c:aa:c3:96:8f:20:68:07:55:79:7b:8e:76:0f:5d:7d:fa:
         f1:ad:e0:85:e5:a5:38:04:b4:ba:ff:f4:ad:9f:0a:de:ec:96:
         5e:13:ee:da:1c:d1:f0:bc:d5:c7:7e:f7:0c:a5:73:7b:ef:fa:
         64:38:14:1c:b8:07:96:c0:97:ff:b0:c5:b7:89:f0:79:87:1b:
         e4:1d:86:29:ea:15:80:af:87:32:79:83:2e:6c:ce:98:08:6a:
         c7:87:ac:e8:a4:1a:b8:52:1b:3a:ae:59:f4:9e:81:e5:72:ce:
         16:83:00:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org