Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a383030303a3a2f33332d3333203d3e20323636303736.roa
File:                     323830343a336133303a383030303a3a2f33332d3333203d3e20323636303736.roa (raw, json)
Hash identifier:          CFqkW89uZ+lhATpjIkBh0PhbXJwj+NU/ncaF7Omj7lE=
Subject key identifier:   C4:4B:03:20:4C:63:1D:47:FC:E3:7B:DB:31:BD:72:21:EA:4F:B7:47
Certificate issuer:       /CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Certificate serial:       7A733536E87B8C579E4D7BD474D39561E005EE75
Authority key identifier: 35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a383030303a3a2f33332d3333203d3e20323636303736.roa
Signing time:             Mon 03 Apr 2023 18:50:36 +0000
ROA not before:           Mon 03 Apr 2023 18:45:36 +0000
ROA not after:            Mon 01 Apr 2024 18:50:36 +0000
asID:                     266076
IP address blocks:        2804:3a30:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:73:35:36:e8:7b:8c:57:9e:4d:7b:d4:74:d3:95:61:e0:05:ee:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
        Validity
            Not Before: Apr  3 18:45:36 2023 GMT
            Not After : Apr  1 18:50:36 2024 GMT
        Subject: CN=C44B03204C631D47FCE37BDB31BD7221EA4FB747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:56:ca:19:57:3c:86:88:ad:08:be:be:67:
                    0b:3f:ce:37:c4:07:25:ff:67:cc:1c:9c:cc:90:ad:
                    ab:e8:63:08:cf:89:7e:60:32:48:ae:1f:b2:69:7b:
                    cb:b2:26:0f:20:f2:95:61:48:ae:34:c9:8e:b7:21:
                    6e:a2:db:6d:80:bb:3e:88:2e:1a:77:14:ae:9f:8f:
                    f4:52:80:f9:ea:d1:87:50:dc:8f:50:90:d9:02:b1:
                    04:a2:2a:fa:0d:31:23:63:05:7a:33:45:88:f9:67:
                    fc:8e:1e:10:dc:b8:94:95:d6:81:66:dd:c9:f9:50:
                    69:e5:ee:d9:1b:eb:0c:c8:ac:51:f1:b6:52:f2:c6:
                    73:a3:2f:24:b5:84:d5:cc:41:36:70:a9:29:98:ec:
                    46:aa:c7:82:64:9c:a7:5e:e9:46:23:62:c7:20:1f:
                    f4:7b:1d:22:ac:bf:f6:27:70:a4:d5:fb:db:44:20:
                    bc:b4:d3:96:a8:12:6b:f2:4a:6e:b0:d1:9b:fb:40:
                    5a:71:9d:09:39:4c:9e:63:91:ce:db:e9:e6:15:14:
                    fb:d5:ad:25:b2:19:ac:cb:ff:59:b2:52:69:4b:e3:
                    a1:0d:fc:b0:71:97:c4:bf:43:36:b1:9a:6d:1c:37:
                    2e:a8:c0:71:0a:00:18:be:34:4d:35:c5:2d:8a:5f:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4B:03:20:4C:63:1D:47:FC:E3:7B:DB:31:BD:72:21:EA:4F:B7:47
            X509v3 Authority Key Identifier:
                keyid:35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a383030303a3a2f33332d3333203d3e20323636303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a30:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         07:ca:0e:e7:b7:e7:a0:ff:82:02:af:46:f5:f9:56:d5:7d:23:
         8a:20:70:c0:06:eb:9f:78:b1:f2:93:ba:3e:12:30:94:b6:ec:
         f2:2d:df:c9:03:25:ec:cc:1a:e1:37:b0:58:2c:97:2b:b4:51:
         24:b1:7a:65:5f:05:91:a8:57:a7:27:1d:14:c0:86:08:e2:7e:
         96:3c:9b:ab:fe:72:0f:b9:2c:42:da:ce:92:ff:f0:88:0c:09:
         40:50:7d:e2:7f:03:2a:d2:68:a7:09:08:de:1e:7c:4f:b2:0e:
         5d:f1:3d:18:d0:7a:c4:d4:f2:54:c9:f1:6f:52:9b:61:c5:f7:
         61:db:ac:06:e2:9f:72:43:e4:0f:40:7f:37:ad:67:18:b6:17:
         78:16:cc:6a:f0:d7:af:28:fd:bb:4e:9c:32:ec:ca:6d:cb:42:
         c1:79:07:16:b1:f6:1c:0a:e3:68:ed:01:40:ce:33:9d:36:1e:
         f7:8d:60:94:af:64:66:44:c4:bc:83:b5:a9:e6:d5:2c:2b:98:
         9f:55:ad:2a:13:da:df:32:2c:24:4c:cf:4c:43:ae:ba:29:88:
         63:8a:8f:78:fb:75:1a:74:b4:5d:0f:ca:53:05:4a:63:28:ae:
         0c:93:ff:cb:cf:a7:de:1e:8c:b4:d2:99:e5:92:7f:65:a3:b9:
         ba:f0:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org