Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/323830343a333237303a3a2f33322d3430203d3e20323635303738.roa
File:                     323830343a333237303a3a2f33322d3430203d3e20323635303738.roa (raw, json)
Hash identifier:          ptTqzlA90a5gQpiO8zUyP4jbH0UMj7pi2LxQFi0mZNc=
Subject key identifier:   E4:D3:08:50:6F:8E:0B:AE:C7:89:21:5E:00:39:24:6C:45:33:A6:D2
Certificate issuer:       /CN=8385AA20FCB01184811054ADA6C4B37FC0652175
Certificate serial:       323628586D0B2214CDBF02A59AB055FEB7514416
Authority key identifier: 83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/323830343a333237303a3a2f33322d3430203d3e20323635303738.roa
Signing time:             Thu 08 Feb 2024 20:23:06 +0000
ROA not before:           Thu 08 Feb 2024 20:18:06 +0000
ROA not after:            Thu 06 Feb 2025 20:23:06 +0000
asID:                     265078
IP address blocks:        2804:3270::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:36:28:58:6d:0b:22:14:cd:bf:02:a5:9a:b0:55:fe:b7:51:44:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8385AA20FCB01184811054ADA6C4B37FC0652175
        Validity
            Not Before: Feb  8 20:18:06 2024 GMT
            Not After : Feb  6 20:23:06 2025 GMT
        Subject: CN=E4D308506F8E0BAEC789215E0039246C4533A6D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:82:30:fe:a3:b8:40:6b:9e:a5:f3:6c:a6:
                    87:4e:6c:eb:a5:c4:a6:11:e9:a6:d3:f9:c6:8a:dc:
                    51:00:24:22:2f:76:78:71:51:56:17:86:36:c0:d8:
                    8e:bb:19:a4:10:20:b6:fa:e6:67:60:d9:73:cd:b8:
                    ef:c7:f4:14:11:2b:1e:ea:f6:9c:6e:00:cb:36:50:
                    4e:3f:56:3a:13:7c:4f:29:d8:13:9c:81:63:30:6e:
                    8f:7e:9c:6a:44:c9:df:f0:90:4a:b5:98:bf:78:0c:
                    14:f3:ff:05:1d:ab:74:81:ef:c3:ef:79:07:2b:6c:
                    3b:c3:23:0a:c0:75:1e:64:05:4b:43:ef:81:ee:82:
                    14:8f:d3:9d:96:6d:4d:ef:71:91:0e:3d:0f:be:b2:
                    b1:4c:df:f1:77:cc:06:e7:8b:63:3b:90:dc:e1:1c:
                    05:6c:a6:70:8a:30:ef:9d:48:31:45:d0:fc:eb:6a:
                    7d:ab:5f:6e:40:5f:4a:4e:e9:5d:8e:2b:e9:bb:14:
                    62:56:0c:eb:78:8d:1c:5c:10:33:d3:ba:f1:2d:10:
                    93:29:40:4a:a6:4c:47:9d:ce:7b:88:a4:53:dc:c8:
                    27:4b:9b:62:90:42:f4:c4:e0:de:6c:b5:5b:82:35:
                    7e:e2:ad:de:af:ba:c8:2d:60:41:35:89:e7:fb:0b:
                    62:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D3:08:50:6F:8E:0B:AE:C7:89:21:5E:00:39:24:6C:45:33:A6:D2
            X509v3 Authority Key Identifier:
                keyid:83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/8385AA20FCB01184811054ADA6C4B37FC0652175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/323830343a333237303a3a2f33322d3430203d3e20323635303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3270::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:aa:21:99:3d:e7:c2:ad:7b:d3:f1:10:9d:8e:f9:91:8f:b7:
         9d:17:93:e3:ad:e4:be:f9:5a:ca:00:63:e8:93:91:3c:38:32:
         37:49:8d:d5:1a:a7:36:81:4c:27:c7:21:7a:15:4b:84:e1:24:
         a3:8c:41:32:08:48:83:58:3c:82:0b:72:01:71:41:7c:d9:d4:
         4e:14:5b:43:5f:3a:83:3f:00:ae:90:b0:16:74:7a:44:bf:a2:
         3d:77:aa:be:4c:81:3d:4f:d1:22:d4:34:ab:ec:b8:8c:5f:08:
         13:ec:c8:36:49:b6:c4:08:9b:f6:52:cd:36:6d:ed:81:46:be:
         1b:5b:01:43:c5:b6:f6:ce:b2:77:24:52:a4:c8:fa:12:97:ff:
         4e:aa:35:8d:e9:a6:54:b1:93:dd:05:0c:22:9c:df:59:be:be:
         b1:5a:a2:2a:c2:e3:a3:f3:f0:50:5f:5e:27:89:4e:0c:1a:d9:
         9a:f3:dc:36:61:05:f0:54:bc:a9:d2:c4:32:bd:a6:a1:93:16:
         6a:62:85:a9:a0:c5:df:83:18:10:df:d2:6d:29:0b:27:82:30:
         5f:d2:53:79:b9:81:ec:40:a9:dc:c3:e6:ee:44:a5:47:37:62:
         2b:59:88:1b:8d:48:d3:1e:94:c2:d7:af:ea:f9:ed:0e:c8:8f:
         16:17:0f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org