Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a643a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a643a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          coqMkDuD8G8Vy6R/QQ4IaPyvrvhTQY1aKESrVbzuIMU=
Subject key identifier:   22:9F:1F:C3:53:88:4C:FF:1B:3B:E0:74:05:03:C7:9C:CC:32:C6:DC
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       6114CA87BC77EB4A1DFFCA75B326FEFB30718DE5
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a643a3a2f34382d3438203d3e203532353830.roa
Signing time:             Tue 09 Apr 2024 22:50:00 +0000
ROA not before:           Tue 09 Apr 2024 22:45:00 +0000
ROA not after:            Tue 08 Apr 2025 22:50:00 +0000
asID:                     52580
IP address blocks:        2804:cf8:d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:14:ca:87:bc:77:eb:4a:1d:ff:ca:75:b3:26:fe:fb:30:71:8d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Apr  9 22:45:00 2024 GMT
            Not After : Apr  8 22:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0b:bf:eb:93:4e:86:34:4a:28:72:30:f3:f5:
                    89:20:65:47:20:c7:9f:dd:c8:d3:f1:e7:1f:25:b1:
                    d2:cc:5d:45:25:e7:ea:33:65:fb:d7:dc:28:02:0f:
                    21:0a:63:a7:8a:27:c9:cd:14:24:b1:4f:22:2e:a2:
                    e1:e9:55:79:3d:51:31:b0:ce:04:51:9e:03:ab:9a:
                    43:eb:d0:bb:5d:ce:57:d7:c6:21:8f:21:8d:80:6d:
                    70:4d:c3:03:04:da:ba:52:89:c3:3e:ff:ee:26:3a:
                    05:29:bf:7c:87:23:2e:25:bb:14:33:3e:5a:8b:53:
                    6a:c5:b7:f0:d1:6c:ba:19:f1:15:ba:9f:5b:6e:64:
                    a5:80:9a:bf:fb:1d:ff:f2:94:2a:50:71:f3:18:e1:
                    7a:fe:5a:07:ab:8b:a2:d7:fb:a8:4f:76:15:5e:6a:
                    50:0d:a8:07:c8:52:35:48:e3:f7:05:e6:c1:2a:8f:
                    84:17:fb:46:2a:ad:ed:ef:a8:8f:ca:11:55:fb:a8:
                    e7:5f:84:ca:7a:ad:1e:dd:d6:c3:3d:b1:8e:ce:9c:
                    0e:86:62:1d:9a:dc:12:a1:f2:fa:d8:46:11:75:cd:
                    1d:e1:bc:ba:34:8e:38:24:d4:80:e9:93:48:6b:15:
                    d0:2d:86:68:e9:63:9d:f4:39:ad:0f:fc:42:db:c1:
                    ab:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9F:1F:C3:53:88:4C:FF:1B:3B:E0:74:05:03:C7:9C:CC:32:C6:DC
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a643a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:8f:1d:88:ad:ea:6d:82:cf:e9:f8:4e:98:c1:d3:b5:32:9c:
         d9:6d:97:d1:7a:cb:24:8a:a3:9e:cf:4e:5f:18:c6:23:b2:1f:
         65:1f:31:37:69:01:27:c4:d2:41:c3:93:9f:b7:e9:a8:73:c9:
         08:f3:0f:7e:87:36:b9:06:00:e2:18:55:30:09:88:0d:60:ed:
         59:ce:2d:a7:81:8d:57:ae:93:f1:28:75:af:59:60:d1:a0:1f:
         b4:a6:c0:d9:9c:8f:1d:e9:fc:d7:78:29:3a:f4:36:99:11:78:
         63:6e:47:16:09:f9:46:ec:d2:cd:c1:3a:3d:b0:e8:a5:9d:e5:
         52:c6:f2:d9:8a:c1:95:3b:4e:ea:b8:c7:10:8c:4e:07:98:cf:
         1c:9a:12:8d:0f:a2:13:33:33:8c:18:69:32:14:67:02:ac:d7:
         58:f7:f3:ca:b6:3e:2d:c5:98:6e:96:71:58:9d:10:ba:70:43:
         88:c5:6a:0f:b8:06:2f:0e:55:f3:17:03:02:3b:12:93:00:d7:
         45:50:ba:9f:eb:4f:1f:dd:6a:06:e4:af:d0:ce:99:fd:a9:c2:
         a0:a4:6f:8c:4b:c6:e7:90:bf:b5:cc:d9:a8:89:07:49:0a:57:
         68:82:db:8d:70:92:36:d0:10:4a:b5:f8:86:a1:70:45:17:79:
         5c:49:2b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org