Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a3a2f33322d3332203d3e20323635303835.roa
File:                     323830343a333239303a3a2f33322d3332203d3e20323635303835.roa (raw, json)
Hash identifier:          HmZeOtEUFAUKXPqrpmjllTFPh2yuryUrUbvF4s3l3mA=
Subject key identifier:   42:06:6F:7D:F8:04:9F:8F:4D:6C:F5:C4:57:F5:D7:D1:26:DF:A5:1C
Certificate issuer:       /CN=6755D3522D9AAA05D8E619BF8EA6DBE34D108C24
Certificate serial:       38FDAE319F0E6F5F3F624E14FE5A0C5BBB3C48B1
Authority key identifier: 67:55:D3:52:2D:9A:AA:05:D8:E6:19:BF:8E:A6:DB:E3:4D:10:8C:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a3a2f33322d3332203d3e20323635303835.roa
Signing time:             Tue 13 Jun 2023 14:20:01 +0000
ROA not before:           Tue 13 Jun 2023 14:15:01 +0000
ROA not after:            Tue 11 Jun 2024 14:20:01 +0000
asID:                     265085
IP address blocks:        2804:3290::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fd:ae:31:9f:0e:6f:5f:3f:62:4e:14:fe:5a:0c:5b:bb:3c:48:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6755D3522D9AAA05D8E619BF8EA6DBE34D108C24
        Validity
            Not Before: Jun 13 14:15:01 2023 GMT
            Not After : Jun 11 14:20:01 2024 GMT
        Subject: CN=42066F7DF8049F8F4D6CF5C457F5D7D126DFA51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:f5:1b:a3:5a:91:05:57:5c:57:57:cb:3d:
                    c0:87:eb:85:e8:6f:05:cf:a3:62:50:1c:24:db:ff:
                    48:5a:03:a2:d1:6e:af:eb:bc:97:03:34:82:3a:73:
                    86:07:39:45:ab:ff:17:8e:cf:a3:90:07:0a:47:48:
                    53:53:43:62:e5:80:9d:74:52:62:4e:03:9f:d7:fc:
                    96:ab:c7:70:f6:86:b8:37:75:53:93:99:27:df:a4:
                    91:2a:3c:f7:8f:97:a5:55:db:74:0f:88:79:87:cc:
                    c3:c5:0f:e9:c9:8c:e1:87:b8:ee:3f:67:4d:9b:52:
                    28:c6:67:c8:ea:92:29:5d:c4:3b:37:0a:56:03:4c:
                    d7:58:4f:92:14:3d:04:c2:5b:9a:81:7c:cb:48:35:
                    5c:8d:7b:3b:50:36:81:ad:16:a1:4e:3c:fa:60:34:
                    81:73:81:df:28:ca:23:16:ea:be:17:4b:55:2d:8a:
                    06:5f:e1:52:4a:97:ec:21:6f:11:27:e6:e5:24:12:
                    a9:21:9d:cb:70:47:e1:04:7f:af:a8:52:29:77:d5:
                    d8:c7:5d:78:3e:fa:7b:09:a8:6a:af:72:cb:fd:bf:
                    8e:6d:9e:2c:eb:8f:2b:6f:a9:32:3d:43:24:51:20:
                    43:c1:92:8c:58:fc:86:ae:b1:cf:20:98:32:6b:1d:
                    02:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:06:6F:7D:F8:04:9F:8F:4D:6C:F5:C4:57:F5:D7:D1:26:DF:A5:1C
            X509v3 Authority Key Identifier:
                keyid:67:55:D3:52:2D:9A:AA:05:D8:E6:19:BF:8E:A6:DB:E3:4D:10:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a3a2f33322d3332203d3e20323635303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3290::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:96:f7:31:1c:85:8c:25:e3:2a:bb:01:32:6f:71:53:0c:9e:
         af:f8:19:8a:ce:2d:1f:2b:2d:c2:d5:49:33:64:9a:c6:71:7e:
         40:ff:1d:60:b3:da:58:7d:87:37:66:7f:ef:02:0b:a5:ef:e2:
         ea:af:11:17:73:8a:f0:61:2b:f0:db:4d:9a:ef:ea:b2:9e:85:
         32:a9:c2:ff:fd:d4:66:0f:88:0d:af:71:d4:2c:6f:b6:00:1d:
         21:90:a9:42:84:f4:3d:ff:a8:1b:80:c9:2f:70:5c:58:e1:f5:
         36:40:6f:d5:6b:ab:bd:fe:62:d6:af:ca:a9:fd:16:8f:c1:d3:
         bb:88:f7:8a:7d:68:ca:4c:b3:4a:7d:1a:67:10:83:fc:56:4b:
         6d:5c:c5:f7:ff:c1:8c:35:d5:93:f4:27:7e:ec:ba:b1:5d:2e:
         f2:24:8a:7e:a4:f9:b6:22:6d:e6:ab:70:0a:56:3a:8f:89:12:
         89:14:0d:4d:fa:7b:3a:72:4d:aa:90:5b:9e:f9:2c:08:a6:9d:
         c9:63:3e:27:3c:0b:bd:f5:bc:5b:c3:47:e9:c9:40:8c:0d:cf:
         3b:85:38:a2:78:13:49:b5:62:1f:0b:e9:47:ec:b6:d9:89:20:
         8f:6c:95:f7:3f:6b:fa:e3:67:58:ab:51:24:95:64:ac:5f:d8:
         46:4a:88:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org