Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a323030303a3a2f33352d3335203d3e20323636303736.roa
File:                     323830343a336133303a323030303a3a2f33352d3335203d3e20323636303736.roa (raw, json)
Hash identifier:          NTXdWyy2YbG291enBAHRIgEjTFrRxHpgPEUkSNPScgE=
Subject key identifier:   38:DF:57:20:9D:A4:E2:86:6F:4E:FA:8C:BF:91:2D:05:F6:42:59:98
Certificate issuer:       /CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Certificate serial:       7F2037FC4D9EF94016A61EB230082F9679D75994
Authority key identifier: 35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a323030303a3a2f33352d3335203d3e20323636303736.roa
Signing time:             Mon 03 Apr 2023 18:50:35 +0000
ROA not before:           Mon 03 Apr 2023 18:45:35 +0000
ROA not after:            Mon 01 Apr 2024 18:50:35 +0000
asID:                     266076
IP address blocks:        2804:3a30:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:20:37:fc:4d:9e:f9:40:16:a6:1e:b2:30:08:2f:96:79:d7:59:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
        Validity
            Not Before: Apr  3 18:45:35 2023 GMT
            Not After : Apr  1 18:50:35 2024 GMT
        Subject: CN=38DF57209DA4E2866F4EFA8CBF912D05F6425998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:c7:1f:9f:62:40:4a:dc:86:71:8b:65:a7:
                    13:6d:5f:a0:c3:73:0b:2a:5d:c4:a0:da:f9:86:9c:
                    3e:d0:9b:63:8b:70:60:f7:f2:8d:02:50:28:1a:6b:
                    88:d3:26:b6:84:e0:ba:22:06:46:66:dc:d0:c0:6e:
                    2e:ce:77:83:17:58:a7:23:89:3d:0b:8c:a1:50:c2:
                    e6:e6:a0:48:20:18:fb:da:9b:75:1a:23:78:af:1e:
                    8c:82:e9:64:0a:48:81:e8:29:01:4c:74:f4:3c:72:
                    3f:25:38:9c:dc:18:14:3a:ee:ab:5a:6f:23:23:10:
                    de:db:c4:a3:ab:9f:c6:4c:bc:5f:04:56:57:ba:57:
                    5a:11:4b:74:57:6b:0b:bb:49:74:79:19:02:fe:75:
                    66:e4:50:6c:57:a0:73:09:7b:18:44:2f:f2:7e:0b:
                    d3:3c:34:e5:9c:c0:33:4f:8e:8b:9f:02:3a:6a:fd:
                    1c:5c:dd:f5:6b:9a:95:71:3e:e1:86:d9:58:4b:d3:
                    2b:8e:36:b9:bd:dd:ea:fb:e3:b8:16:93:9f:ba:10:
                    3e:3b:58:70:21:89:0a:02:6e:f1:69:b2:7d:fe:0f:
                    37:3c:5e:9f:6f:1b:83:53:a2:bd:ec:96:ae:e3:49:
                    5a:6e:f0:2e:06:97:84:df:4d:4b:33:1c:08:51:c9:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DF:57:20:9D:A4:E2:86:6F:4E:FA:8C:BF:91:2D:05:F6:42:59:98
            X509v3 Authority Key Identifier:
                keyid:35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a323030303a3a2f33352d3335203d3e20323636303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a30:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         e9:db:37:c3:c9:71:4e:7b:73:76:d2:60:45:a8:f5:9f:99:10:
         de:15:39:aa:6a:67:02:98:93:98:21:5f:83:b3:ca:52:57:60:
         56:87:c6:17:fa:69:2c:0b:9f:3f:db:5e:00:bd:ad:7b:c9:c3:
         7a:9b:e2:82:f6:9b:10:91:45:d8:f6:ff:e8:a1:c6:5d:2b:35:
         86:86:b0:2c:4b:92:6e:b0:2d:81:74:0a:75:35:ed:c7:5a:86:
         20:87:ea:b6:c4:59:23:8e:17:08:b1:92:f3:b1:42:bd:bc:58:
         bf:3b:b8:53:b2:96:c6:2a:af:b3:e5:19:a1:7d:29:4e:65:fc:
         04:c5:92:52:f6:c3:65:ff:af:c4:0e:1c:cb:23:bf:db:88:cf:
         bc:c7:d9:eb:e4:91:c4:0b:04:db:bb:c6:ec:cd:93:da:fe:26:
         9f:03:75:61:69:88:b8:02:71:a3:3e:c9:aa:ca:19:42:13:cd:
         f5:84:9f:94:5d:92:b0:bf:5c:29:cc:81:56:3a:1c:59:da:f8:
         1e:2f:a7:16:45:7a:73:fb:f8:37:c3:18:7b:7d:65:6c:1a:97:
         1a:96:4c:79:f5:e9:3b:46:07:f7:b4:83:dc:b9:0a:7c:23:08:
         98:73:b5:8b:ff:29:30:aa:e6:31:fe:fe:92:fe:01:8c:e1:60:
         6c:4f:78:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org