Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/323830343a343630383a383030303a3a2f33332d3333203d3e20323636393634.roa
File:                     323830343a343630383a383030303a3a2f33332d3333203d3e20323636393634.roa (raw, json)
Hash identifier:          WrRnhR1B1/dTZ0Bn895cDhhCnAqtGoRrv4oHodJj+34=
Subject key identifier:   95:0D:61:80:03:0C:EB:B1:99:78:CE:DE:38:A1:1F:03:DF:4B:C1:74
Certificate issuer:       /CN=DB3E50975F2B07750187C76A4B0E0E6B4A2692BF
Certificate serial:       4FE4ECC052D7F6CEF5A7E8F3CB1E1D8187259411
Authority key identifier: DB:3E:50:97:5F:2B:07:75:01:87:C7:6A:4B:0E:0E:6B:4A:26:92:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/323830343a343630383a383030303a3a2f33332d3333203d3e20323636393634.roa
Signing time:             Wed 20 Mar 2024 18:10:22 +0000
ROA not before:           Wed 20 Mar 2024 18:05:22 +0000
ROA not after:            Wed 19 Mar 2025 18:10:22 +0000
asID:                     266964
IP address blocks:        2804:4608:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e4:ec:c0:52:d7:f6:ce:f5:a7:e8:f3:cb:1e:1d:81:87:25:94:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3E50975F2B07750187C76A4B0E0E6B4A2692BF
        Validity
            Not Before: Mar 20 18:05:22 2024 GMT
            Not After : Mar 19 18:10:22 2025 GMT
        Subject: CN=950D6180030CEBB19978CEDE38A11F03DF4BC174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:17:2f:a0:02:95:58:76:c4:51:1e:22:3d:
                    7e:de:23:43:70:2d:45:a3:ff:3e:7a:51:34:1b:f9:
                    09:8b:20:5f:2a:ad:ca:16:bb:2e:1a:f9:fd:af:d3:
                    b4:cc:91:e8:29:7b:b0:32:2b:c6:d4:cc:ab:ed:8b:
                    ec:0f:4b:03:7b:85:c4:35:9b:7b:18:32:35:17:79:
                    97:65:e9:dd:19:3b:76:ff:54:3c:40:37:f9:56:26:
                    82:9b:0b:91:a8:92:e7:a8:8d:bc:36:99:36:8e:80:
                    bd:56:30:9b:61:39:9d:a9:e9:a7:d4:1d:86:8b:cc:
                    7a:1c:49:70:09:d8:85:9e:ce:05:2d:d3:f2:9b:37:
                    07:1d:73:23:91:81:fc:38:64:ef:52:1f:3c:33:2e:
                    24:7d:d9:24:b1:42:97:a6:47:f8:7b:78:07:44:fa:
                    83:e5:99:8f:4c:d5:5d:6c:41:f5:43:e9:b7:88:44:
                    37:d1:bc:c9:f1:88:3d:bd:47:13:9e:de:90:85:09:
                    4f:5d:23:9a:74:d8:dc:e8:15:91:a0:93:67:88:cf:
                    dc:be:44:60:29:7d:0f:10:9f:87:cc:93:59:ed:06:
                    1d:c2:59:db:d5:14:8c:55:c9:15:58:e2:06:17:f9:
                    3a:18:4e:43:f9:8b:8a:28:86:9c:c2:c7:de:61:5f:
                    fd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0D:61:80:03:0C:EB:B1:99:78:CE:DE:38:A1:1F:03:DF:4B:C1:74
            X509v3 Authority Key Identifier:
                keyid:DB:3E:50:97:5F:2B:07:75:01:87:C7:6A:4B:0E:0E:6B:4A:26:92:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/323830343a343630383a383030303a3a2f33332d3333203d3e20323636393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4608:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a3:5f:4b:6e:36:3a:24:44:bc:82:ad:bf:8d:fa:0b:f0:17:56:
         6d:f3:c9:20:3e:fe:74:82:80:c8:7c:0b:b1:19:c6:ab:e0:ce:
         6e:31:84:08:10:95:d3:f6:8a:71:32:da:80:a5:52:a1:6e:6b:
         d7:d2:35:46:72:ab:28:8d:64:2d:cd:ae:50:cd:a1:e9:c9:03:
         14:d7:d2:25:9f:be:70:f3:1e:2f:a1:bb:db:2d:90:8a:92:62:
         b0:79:0f:9b:47:dd:db:e1:7e:fc:5c:4d:8d:c7:ca:58:fc:6d:
         a1:c0:0c:c7:af:54:88:eb:f4:74:e8:0b:18:68:67:16:fc:d7:
         b6:37:52:64:19:52:95:e8:be:81:d6:43:c4:2c:71:79:aa:93:
         6c:b4:29:2e:cd:16:fb:fc:be:e0:44:66:22:af:04:89:39:b6:
         fb:86:48:a7:a8:74:68:12:32:80:06:f2:12:79:83:a9:f0:7b:
         de:80:96:eb:d1:fe:59:8c:da:c0:2e:a4:79:15:95:69:08:4f:
         1f:07:f6:f2:a4:73:b1:89:3f:ab:f8:e6:87:b8:94:33:fc:fc:
         ed:b5:15:da:6c:61:cb:6c:72:f1:bf:d8:d3:85:15:9c:54:b0:
         ca:e5:e5:56:78:ff:81:20:9b:ed:bb:b1:d3:d7:21:67:a5:14:
         4c:6b:75:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org