Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/323830343a343239383a3a2f33322d3334203d3e20323637353131.roa
File:                     323830343a343239383a3a2f33322d3334203d3e20323637353131.roa (raw, json)
Hash identifier:          X6VZnafLpnoMFLwJ7GDGAbzwjNYqscKplZZlFQ/A9Cs=
Subject key identifier:   99:78:59:FB:A6:0F:73:69:F9:6A:BF:92:A4:27:3F:6F:93:13:3B:66
Certificate issuer:       /CN=B34F77835A64BC27B0DA5DEA4C70A81A6967E13D
Certificate serial:       115B456E41F428B83889678867A5E14AE7F78377
Authority key identifier: B3:4F:77:83:5A:64:BC:27:B0:DA:5D:EA:4C:70:A8:1A:69:67:E1:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B34F77835A64BC27B0DA5DEA4C70A81A6967E13D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/323830343a343239383a3a2f33322d3334203d3e20323637353131.roa
Signing time:             Tue 06 Sep 2022 11:38:46 +0000
ROA not before:           Tue 06 Sep 2022 11:33:46 +0000
ROA not after:            Tue 05 Sep 2023 11:38:46 +0000
asID:                     267511
IP address blocks:        2804:4298::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5b:45:6e:41:f4:28:b8:38:89:67:88:67:a5:e1:4a:e7:f7:83:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B34F77835A64BC27B0DA5DEA4C70A81A6967E13D
        Validity
            Not Before: Sep  6 11:33:46 2022 GMT
            Not After : Sep  5 11:38:46 2023 GMT
        Subject: CN=997859FBA60F7369F96ABF92A4273F6F93133B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:d9:e9:42:44:43:64:ab:cf:e2:03:14:46:
                    db:83:49:0b:00:c8:67:60:b9:50:4a:8d:39:d9:d9:
                    44:28:e6:ce:f6:90:8b:c1:c5:bb:1a:ec:f5:66:6c:
                    ee:bc:f2:62:a8:6d:b6:da:52:04:5a:4a:14:2e:ad:
                    da:b5:9f:7b:ec:40:9d:29:38:70:75:eb:a9:f5:ff:
                    4c:c1:15:5d:52:50:52:31:e7:8d:58:3c:29:03:3e:
                    0b:dd:99:77:4d:1d:dc:5d:81:d4:54:9a:84:a9:94:
                    1e:ca:de:29:16:1e:3b:91:55:a4:41:2b:bb:d1:b8:
                    94:f6:27:44:54:46:aa:46:f3:2b:f4:f3:c2:7d:27:
                    4d:f6:ab:93:bd:51:b2:4c:93:84:bd:c8:aa:7f:a4:
                    77:26:d5:08:76:c8:e6:0b:6c:69:be:63:05:f9:ba:
                    9a:ae:bf:97:d9:73:e3:1f:28:89:e5:ba:0e:77:84:
                    ec:ac:c1:12:fe:4d:83:50:4a:69:22:40:a2:1c:a0:
                    c4:6e:0b:01:b0:c3:35:e2:6a:81:b8:0b:56:0b:bc:
                    81:a3:f9:be:d0:46:81:59:6c:c9:ff:d2:39:06:a3:
                    56:98:8c:f9:ac:ba:e3:2b:e2:b6:d7:4c:b0:ab:87:
                    01:62:dd:0a:92:ab:09:b9:f5:ea:17:ce:24:8a:39:
                    5f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:78:59:FB:A6:0F:73:69:F9:6A:BF:92:A4:27:3F:6F:93:13:3B:66
            X509v3 Authority Key Identifier:
                keyid:B3:4F:77:83:5A:64:BC:27:B0:DA:5D:EA:4C:70:A8:1A:69:67:E1:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/B34F77835A64BC27B0DA5DEA4C70A81A6967E13D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B34F77835A64BC27B0DA5DEA4C70A81A6967E13D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/323830343a343239383a3a2f33322d3334203d3e20323637353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4298::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:a5:da:46:9f:43:bb:e1:be:dd:fa:e4:b5:8e:ff:6a:b9:3e:
         89:b5:40:25:60:44:01:a4:1f:ba:f4:ed:5a:b4:93:b6:54:7d:
         3d:dd:e3:a5:dd:32:31:1a:9c:c5:89:f9:eb:6d:f2:79:9b:b9:
         e7:86:6b:65:80:8d:cb:b8:41:3f:e9:a7:37:ec:76:b7:ad:cb:
         e7:78:c0:94:60:71:8a:88:58:13:b3:72:9d:a7:f2:89:5c:a6:
         22:b8:04:3c:33:ad:da:ec:df:0b:be:90:66:24:15:f1:46:52:
         24:36:db:aa:6c:96:04:94:dc:26:8f:d3:7b:24:c0:07:7d:55:
         5c:9a:9f:98:50:6f:14:6f:55:28:94:a7:72:e8:27:64:62:47:
         bc:bd:64:02:07:41:29:39:d2:dd:f2:cb:40:66:64:bf:06:cb:
         a3:3f:7a:95:9f:7f:2f:71:2e:3f:3b:2f:bb:27:6a:b7:3d:d3:
         7b:01:57:92:9a:da:0a:3c:2f:db:48:8a:1c:f1:16:fd:75:2e:
         9f:f5:20:4e:8b:bb:bb:fd:d1:d2:4b:b5:4d:b2:50:c5:dd:4d:
         0b:dc:66:05:e8:c8:c6:c8:70:8a:c9:58:5c:d5:f1:25:1f:8b:
         aa:e3:56:fe:f5:d7:3e:fc:23:1f:ab:4d:b8:11:10:34:75:ac:
         46:5c:18:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:48 2023 by rpki-client on console-ams.rpki-client.org