Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa
File:                     323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa (raw, json)
Hash identifier:          uwLZzZ071IDot3cqT7VgGLAWAd1BdMgnS37pgvpPx4Y=
Subject key identifier:   85:51:BB:68:A6:24:99:E1:74:CC:21:8D:32:50:57:5D:EA:94:0E:47
Certificate issuer:       /CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
Certificate serial:       4D41ACBCAD24FC61EF1C13D559F52A47ED8E3C13
Authority key identifier: EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa
Signing time:             Fri 08 Sep 2023 00:24:23 +0000
ROA not before:           Fri 08 Sep 2023 00:19:23 +0000
ROA not after:            Fri 06 Sep 2024 00:24:23 +0000
asID:                     267121
IP address blocks:        2804:4870:2000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:41:ac:bc:ad:24:fc:61:ef:1c:13:d5:59:f5:2a:47:ed:8e:3c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
        Validity
            Not Before: Sep  8 00:19:23 2023 GMT
            Not After : Sep  6 00:24:23 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:da:44:bc:6c:7e:a7:6a:e8:65:ef:38:c5:43:
                    a9:60:74:1d:9f:d4:a2:3a:48:84:4a:dc:25:02:ac:
                    60:d1:c3:e8:b5:9b:49:ef:c2:42:b3:b6:43:94:31:
                    41:71:a4:e6:dc:46:7d:e0:00:48:72:87:5d:2d:84:
                    7f:92:d0:55:32:ea:43:2a:a9:ba:e1:7d:5c:e0:1a:
                    a0:14:f0:51:ef:03:f1:f4:e6:13:6c:05:66:b7:7a:
                    51:b5:a5:d8:da:62:bd:ee:7b:f5:db:f6:88:f5:c8:
                    0b:f8:41:21:14:c7:27:ff:a7:b4:7b:05:1e:90:06:
                    d2:f2:77:6c:d8:fa:28:92:4d:a6:36:5a:c7:ff:a1:
                    36:20:7d:be:87:b3:7f:40:43:f6:4d:f8:ab:4a:c1:
                    19:18:60:29:ef:08:3b:b3:09:86:1b:ae:f3:fd:80:
                    74:3f:e5:42:e4:a9:4d:38:d5:f3:aa:26:cc:15:34:
                    79:88:ef:65:f2:34:dc:40:cb:f5:30:7b:e1:81:e3:
                    b3:d9:9a:52:cd:6f:0a:ce:22:4a:45:44:71:d8:12:
                    f3:d0:c7:99:3b:ea:6c:15:a3:3e:aa:d1:c5:90:a1:
                    b5:06:63:a3:39:41:4d:19:55:98:9c:50:f3:2f:63:
                    0f:75:b6:83:e1:e1:9c:ac:8a:75:71:aa:4f:be:4f:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:51:BB:68:A6:24:99:E1:74:CC:21:8D:32:50:57:5D:EA:94:0E:47
            X509v3 Authority Key Identifier:
                keyid:EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:bc:e6:6b:13:07:4b:6d:fa:cb:51:8a:4e:5c:72:90:71:c4:
         05:18:53:2f:5e:b1:ca:43:89:c6:15:5e:80:47:8d:c0:db:2d:
         db:6b:ae:49:28:bf:f8:55:ff:0a:e2:22:83:c8:4e:b2:7a:6d:
         0d:eb:ec:a6:43:2b:3b:21:3c:6a:d7:70:26:50:61:88:f6:da:
         fa:74:9d:c5:f6:82:84:c6:5b:9d:fb:71:a7:d6:14:8a:bc:c7:
         00:b8:89:8c:45:d9:46:8d:11:50:af:37:c3:cd:66:78:f1:cc:
         66:21:b3:b8:64:3d:45:d3:a8:74:af:a4:0a:da:ec:12:b4:1d:
         54:d0:73:1a:08:6d:9f:d4:ee:7e:77:a0:6a:3b:29:35:3b:6d:
         a6:a8:c6:a3:a8:33:9c:53:2c:21:71:85:3d:be:9d:31:bd:a2:
         ba:9e:30:27:0e:47:26:85:1a:9c:39:62:22:4a:6d:30:34:71:
         8b:1d:79:42:6f:71:26:b7:9f:8d:19:7a:c5:ac:16:0f:a6:70:
         03:ef:c3:61:36:6d:ce:93:1f:f7:25:17:ae:c6:df:0d:c3:60:
         03:1e:7b:91:28:87:11:94:6f:36:f4:58:69:fc:31:03:d1:78:
         f1:9d:6c:b3:0c:c4:92:5a:58:6f:6c:c0:85:0c:4d:46:f0:52:
         a5:35:a2:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org