Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a633030303a3a2f33342d3334203d3e20323635303835.roa
File:                     323830343a333239303a633030303a3a2f33342d3334203d3e20323635303835.roa (raw, json)
Hash identifier:          yf2uLjicEm7HmdZngXtVbJDFPxrkIx6bNel9A1+zn+s=
Subject key identifier:   C5:23:B6:04:0E:03:80:7F:BC:F3:93:30:FA:3C:AC:3B:97:81:81:92
Certificate issuer:       /CN=6755D3522D9AAA05D8E619BF8EA6DBE34D108C24
Certificate serial:       0B20839FFCDDDC076569CC019245B11D53D49F4C
Authority key identifier: 67:55:D3:52:2D:9A:AA:05:D8:E6:19:BF:8E:A6:DB:E3:4D:10:8C:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a633030303a3a2f33342d3334203d3e20323635303835.roa
Signing time:             Tue 13 Jun 2023 14:20:02 +0000
ROA not before:           Tue 13 Jun 2023 14:15:02 +0000
ROA not after:            Tue 11 Jun 2024 14:20:02 +0000
asID:                     265085
IP address blocks:        2804:3290:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:20:83:9f:fc:dd:dc:07:65:69:cc:01:92:45:b1:1d:53:d4:9f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6755D3522D9AAA05D8E619BF8EA6DBE34D108C24
        Validity
            Not Before: Jun 13 14:15:02 2023 GMT
            Not After : Jun 11 14:20:02 2024 GMT
        Subject: CN=C523B6040E03807FBCF39330FA3CAC3B97818192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a8:1e:6c:1c:76:38:03:3c:1f:17:0f:c5:71:
                    cd:c0:35:12:ae:cc:0f:6f:b9:0d:ec:29:10:12:a6:
                    96:06:49:d9:da:0c:1e:5d:9d:fa:c2:ed:c7:a7:58:
                    fa:a8:7e:08:1c:9d:32:48:2c:89:1c:c6:52:b2:38:
                    2a:26:1a:ea:89:c2:aa:74:b0:ea:3b:94:10:92:77:
                    4d:a5:e2:81:f4:fb:92:78:91:86:61:9d:a3:d5:fb:
                    00:d2:9b:55:5c:32:15:0d:5b:b8:ff:9e:1a:62:e4:
                    13:8c:15:8b:8a:db:0e:fd:3f:a7:5f:47:7d:00:43:
                    7c:d8:10:2b:bb:93:d4:78:18:ef:9a:3e:5e:ff:3a:
                    0a:93:48:ab:4c:72:a9:da:04:22:a3:bd:fd:bf:0f:
                    1a:35:33:37:e4:34:84:87:0d:5c:c1:d7:9f:ec:3f:
                    89:2a:7e:99:91:9a:27:db:6e:52:cb:fa:83:c9:92:
                    99:38:20:3d:8a:85:25:03:33:31:84:d1:2c:c4:46:
                    92:ee:b5:47:c6:c3:cd:da:c2:03:51:4e:22:c3:1f:
                    0d:7f:17:35:5f:f7:5f:d2:59:ea:ce:52:ee:64:d5:
                    ae:7e:c9:c3:b2:82:ab:e2:05:18:a4:4f:9e:cb:dd:
                    16:86:06:32:62:b8:fc:91:a3:6a:0c:1c:b4:39:58:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:23:B6:04:0E:03:80:7F:BC:F3:93:30:FA:3C:AC:3B:97:81:81:92
            X509v3 Authority Key Identifier:
                keyid:67:55:D3:52:2D:9A:AA:05:D8:E6:19:BF:8E:A6:DB:E3:4D:10:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a633030303a3a2f33342d3334203d3e20323635303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3290:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:0b:94:de:2c:79:b2:06:3a:23:4d:45:6c:88:ed:e8:c7:81:
         59:96:38:c5:db:6e:4d:5e:97:e8:89:ef:1b:b7:72:a5:cc:4b:
         5f:5f:52:8b:42:e8:26:48:2b:89:8c:46:f5:b5:5d:3d:4e:56:
         10:a8:d7:6f:13:39:39:c0:45:2e:4c:5e:7a:d0:35:1c:81:61:
         67:51:25:94:a9:7a:c0:6b:91:64:ab:87:2f:ac:85:19:e6:15:
         c5:5b:e1:5e:a1:33:35:82:b2:21:06:de:11:ec:d5:68:eb:1a:
         51:79:92:f9:0a:d4:2c:5d:8d:72:c8:db:92:fe:5a:e4:57:d1:
         91:bd:69:ef:d8:16:ee:3b:36:85:a4:d6:95:63:e5:b2:a9:4c:
         db:f9:72:86:ed:a9:0c:62:0b:be:4f:46:6a:09:cd:7d:07:cb:
         9f:78:42:4f:d5:85:89:48:32:4a:9d:62:07:57:13:46:6a:94:
         b0:27:20:a5:60:b8:09:2a:11:19:f0:5a:a4:80:58:4c:ad:d2:
         27:a8:50:9b:d1:fa:cc:ed:30:e5:f1:0b:56:31:57:ee:e7:66:
         47:c3:62:7d:d6:44:c0:cc:58:5d:7a:af:0e:0f:7d:84:02:1d:
         8f:51:f4:3b:95:1e:2c:35:c0:96:c4:68:05:31:75:4a:ba:21:
         ee:5f:2d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org