Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/323830343a336638383a3a2f33332d3333203d3e20323635383939.roa
File:                     323830343a336638383a3a2f33332d3333203d3e20323635383939.roa (raw, json)
Hash identifier:          rC3VAnrx02QnubnbdV4XggkUF1ZTySyHa+qZftq2/6g=
Subject key identifier:   29:2B:A2:70:21:EF:6D:20:C4:1F:B6:7F:9A:F6:40:73:74:20:7B:DE
Certificate issuer:       /CN=2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62
Certificate serial:       2988F8803273A02F0C37FE6D901055619C99D180
Authority key identifier: 2B:85:A2:7C:4F:B6:48:CC:56:2C:2F:E2:B0:DE:A8:A5:75:5F:AB:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/323830343a336638383a3a2f33332d3333203d3e20323635383939.roa
Signing time:             Tue 20 Feb 2024 13:43:43 +0000
ROA not before:           Tue 20 Feb 2024 13:38:43 +0000
ROA not after:            Tue 18 Feb 2025 13:43:43 +0000
asID:                     265899
IP address blocks:        2804:3f88::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:88:f8:80:32:73:a0:2f:0c:37:fe:6d:90:10:55:61:9c:99:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62
        Validity
            Not Before: Feb 20 13:38:43 2024 GMT
            Not After : Feb 18 13:43:43 2025 GMT
        Subject: CN=292BA27021EF6D20C41FB67F9AF6407374207BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:b2:ae:41:1e:0b:65:69:79:29:ac:8f:1f:
                    45:c1:10:4d:b5:b3:21:39:9d:6c:02:a7:84:c7:fd:
                    ac:df:e1:d1:d7:3a:b8:7e:8f:c3:ce:ca:1d:41:79:
                    d5:79:d8:9e:37:81:58:00:26:ff:11:c2:10:8a:1c:
                    cc:cd:e6:75:00:d6:d6:ac:58:2c:de:64:c1:48:d3:
                    22:38:06:9a:16:f1:2f:6e:03:15:70:1e:0c:5e:0f:
                    9f:1e:7e:eb:91:91:02:93:8f:84:73:9d:b0:4c:a6:
                    c4:ac:cc:23:b2:07:cd:b9:4f:88:5d:c6:5b:8e:5e:
                    2d:70:83:53:f2:e6:61:a4:68:db:06:af:39:c1:35:
                    b6:62:a5:24:ed:2c:4c:65:d1:d7:92:1d:cb:41:2e:
                    e2:58:c7:20:f7:54:88:71:59:d3:78:5e:f4:f6:87:
                    f8:5d:19:0d:0e:ab:f4:6a:31:84:0e:88:76:f2:fb:
                    87:80:a4:a7:24:15:ff:93:7d:13:03:99:7b:68:d8:
                    2f:33:60:8b:e4:0c:37:20:24:65:37:10:07:8b:e3:
                    62:a6:8b:38:d1:44:8c:71:ad:43:b2:9d:96:d9:c8:
                    24:1c:2a:e5:5f:83:82:94:20:96:f4:cc:08:bb:95:
                    a3:1a:f6:ef:dc:c9:7e:96:d4:ff:a6:0d:8e:64:de:
                    15:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2B:A2:70:21:EF:6D:20:C4:1F:B6:7F:9A:F6:40:73:74:20:7B:DE
            X509v3 Authority Key Identifier:
                keyid:2B:85:A2:7C:4F:B6:48:CC:56:2C:2F:E2:B0:DE:A8:A5:75:5F:AB:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/323830343a336638383a3a2f33332d3333203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f88::/33

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:3d:a0:2a:d7:2f:c4:41:57:63:dd:f7:d4:e8:30:73:18:
         1b:a5:64:c8:6d:06:e1:9e:6c:e3:08:29:cf:32:c2:16:0e:86:
         09:b3:76:3f:22:b8:46:07:33:82:95:d7:e2:c9:99:1e:11:78:
         b1:7d:bb:34:f5:8d:34:77:e8:6c:2d:70:48:99:d0:a2:c6:a1:
         9b:73:ee:74:e3:08:e4:58:bb:bb:c5:4b:de:6b:53:7d:e0:43:
         fb:59:bd:52:4e:d3:70:ad:26:c0:84:d1:ce:90:f8:1c:fd:52:
         6b:8c:54:4e:75:06:09:04:6f:ef:d7:06:02:66:ae:52:f2:3a:
         c0:03:6b:f2:4b:65:dd:1d:fb:9b:a5:cf:3d:c0:c4:64:cc:c2:
         c7:a4:0c:12:a3:88:d1:4c:8f:84:9c:6a:81:91:60:33:46:b4:
         36:30:33:44:fa:d3:74:2c:53:e0:3b:31:d1:57:0f:42:59:a5:
         b7:67:e8:f9:26:46:cd:05:47:f4:91:be:2c:dd:04:95:0a:6f:
         5c:b2:5c:39:3a:89:e2:12:2f:9c:bd:2d:a0:aa:2d:0c:42:5e:
         27:d6:44:98:c4:a3:7a:93:9d:de:42:0a:b5:76:15:fd:00:02:
         63:20:8f:95:12:4d:0e:c5:ae:16:35:56:81:83:f7:3d:67:56:
         b6:bf:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:58 2024 by rpki-client on console-ams.rpki-client.org