Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a343030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a343030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          m7oEHT/i0BSQt69EW6KoAtVq3J5UIv2VIi3x1P23l2k=
Subject key identifier:   0D:10:E5:CC:4B:BA:05:B4:77:E0:08:F9:50:3C:8E:04:8A:1D:F5:AD
Certificate issuer:       /CN=B181A11248DDCC042E5C8D4FBA61452301CB2829
Certificate serial:       66103F276CA7FEED80D82564058D39C3A85FD50C
Authority key identifier: B1:81:A1:12:48:DD:CC:04:2E:5C:8D:4F:BA:61:45:23:01:CB:28:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a343030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 13 Sep 2023 12:16:56 +0000
ROA not before:           Wed 13 Sep 2023 12:11:56 +0000
ROA not after:            Wed 11 Sep 2024 12:16:56 +0000
asID:                     265429
IP address blocks:        2804:33fc:4000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:10:3f:27:6c:a7:fe:ed:80:d8:25:64:05:8d:39:c3:a8:5f:d5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B181A11248DDCC042E5C8D4FBA61452301CB2829
        Validity
            Not Before: Sep 13 12:11:56 2023 GMT
            Not After : Sep 11 12:16:56 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:f1:ed:bf:53:60:56:33:39:0a:0b:59:92:
                    f0:28:d8:b6:51:48:e0:8c:49:14:ee:f5:f3:5f:78:
                    4e:73:72:cb:f5:bb:ec:8e:a3:4e:24:fa:36:7c:1e:
                    99:85:f6:a8:ab:41:82:2e:6d:e1:ff:b0:1b:29:9d:
                    fe:2e:c9:af:52:4b:85:56:e3:27:72:62:f6:7c:6f:
                    2e:02:75:d6:08:25:e0:e5:69:9e:59:6b:68:72:08:
                    51:e1:fe:8e:41:c0:bc:c6:9e:85:61:46:a0:ff:bc:
                    4c:ad:31:f2:d6:fa:55:ae:dc:02:cd:85:a2:7f:79:
                    92:40:9f:45:cf:b0:ef:7f:fc:8b:10:92:52:ca:13:
                    d4:ba:b2:0b:0a:05:62:88:23:31:3f:3f:3f:d2:ea:
                    43:91:22:12:34:cd:0a:17:7f:a5:ea:22:37:21:ce:
                    7e:75:c1:91:aa:3e:ca:c7:89:04:64:d5:52:72:91:
                    df:cc:6b:9a:b6:36:4f:1d:0f:4e:77:4a:a5:5f:dc:
                    94:ca:1a:9b:21:40:b3:9e:2e:92:ac:ad:66:45:cb:
                    fa:97:37:5b:63:78:15:55:1d:2e:22:4b:64:43:f8:
                    7a:bd:16:94:ba:a0:b2:ea:5e:95:66:e6:e8:44:ad:
                    46:87:b2:37:55:d0:bf:d0:b7:12:0b:46:87:fe:36:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:10:E5:CC:4B:BA:05:B4:77:E0:08:F9:50:3C:8E:04:8A:1D:F5:AD
            X509v3 Authority Key Identifier:
                keyid:B1:81:A1:12:48:DD:CC:04:2E:5C:8D:4F:BA:61:45:23:01:CB:28:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a343030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1e:d3:c6:6f:a0:4d:1a:8e:b5:f0:10:59:e5:54:98:13:fd:80:
         13:44:f9:54:e5:3f:80:83:50:5a:64:37:06:45:7c:de:f4:e1:
         84:a6:2a:a0:9b:bd:c4:38:6e:49:14:7f:90:c3:ab:2b:30:fd:
         ea:89:fe:9e:df:16:20:fc:ae:95:ec:e2:6a:ec:a6:bc:8a:e9:
         6e:41:06:7f:98:ed:8f:18:82:1a:11:7d:67:c3:82:e3:e4:02:
         d4:e7:30:5d:4b:24:3a:47:b4:69:61:87:d5:36:50:21:e3:71:
         3b:23:43:49:7e:ff:2f:63:a1:22:63:e6:73:fd:f9:fa:7a:fb:
         71:f9:e1:27:f6:4b:4d:dc:6e:93:cb:3e:55:f8:5b:1e:ab:30:
         77:09:0b:46:d1:50:b5:f0:41:dd:8f:5a:79:32:74:21:4e:73:
         cf:4f:23:d1:a9:2f:47:39:73:54:54:f3:d4:e7:e5:2e:49:f9:
         be:68:88:8a:c8:cb:7a:b5:ee:29:93:66:4b:5f:dd:dd:0c:cb:
         0b:ed:da:05:94:10:b1:59:3d:4b:7d:02:44:1e:d9:28:7d:65:
         3c:71:ff:4e:96:9e:b8:c7:e3:52:1e:02:ec:3b:4d:6b:40:43:
         4f:f6:8c:c6:9c:ab:2d:b5:9e:34:e8:f4:58:f9:57:62:4b:a3:
         86:78:b7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:57 2024 by rpki-client on console-ams.rpki-client.org