Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a653030303a3a2f33352d3335203d3e20323636303736.roa
File:                     323830343a336133303a653030303a3a2f33352d3335203d3e20323636303736.roa (raw, json)
Hash identifier:          WDJn81GiVcCYfWVLX3dXNvPNnHGPq7hGx3lhZOshJXA=
Subject key identifier:   02:D0:1A:A6:3E:A2:4B:A4:61:7F:F9:64:23:69:2C:8C:E0:1E:40:D6
Certificate issuer:       /CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Certificate serial:       41AF5B6E12EDA90050A1F2B90406A4CB2242B789
Authority key identifier: 35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a653030303a3a2f33352d3335203d3e20323636303736.roa
Signing time:             Mon 03 Apr 2023 18:50:35 +0000
ROA not before:           Mon 03 Apr 2023 18:45:35 +0000
ROA not after:            Mon 01 Apr 2024 18:50:35 +0000
asID:                     266076
IP address blocks:        2804:3a30:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:af:5b:6e:12:ed:a9:00:50:a1:f2:b9:04:06:a4:cb:22:42:b7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
        Validity
            Not Before: Apr  3 18:45:35 2023 GMT
            Not After : Apr  1 18:50:35 2024 GMT
        Subject: CN=02D01AA63EA24BA4617FF96423692C8CE01E40D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d8:e2:28:50:58:84:1e:43:14:b5:81:ff:48:
                    d8:20:4e:ec:fd:e0:98:05:df:e4:11:6a:29:80:a7:
                    13:37:22:19:0f:c8:75:53:53:42:1a:62:1d:db:1b:
                    ea:b2:94:b6:96:dc:aa:99:34:07:73:be:c1:c8:85:
                    77:b5:fc:a2:e8:bf:10:b5:57:a1:79:fa:f7:e1:9b:
                    b0:43:46:e8:4c:46:d6:74:05:8c:20:2b:59:34:c8:
                    4e:81:b5:13:ab:f7:37:3d:38:d4:d4:d6:a2:de:2a:
                    dd:b6:57:71:12:ee:93:e7:27:cb:4a:9d:2d:11:ad:
                    10:20:64:c6:f5:56:85:93:9d:94:00:de:f7:df:ba:
                    33:69:2c:2e:af:02:0e:0d:b2:54:ce:09:67:8e:6a:
                    27:6e:6f:7f:9a:c5:c2:f8:c4:7d:65:94:af:62:13:
                    98:ff:1b:76:bf:27:e2:89:ec:ae:0c:d3:75:23:11:
                    e5:4d:55:1b:ce:f6:3c:1e:96:5a:92:61:a6:3d:2e:
                    21:6f:7f:85:83:be:32:eb:af:de:a7:43:60:4d:d0:
                    40:b7:f9:64:0a:2a:c0:19:61:e7:64:37:6c:f6:dc:
                    d0:49:eb:b6:7e:08:e7:3e:8f:2b:db:74:c2:f9:85:
                    b3:9f:89:18:68:6f:26:db:cb:05:52:36:ce:aa:ca:
                    4c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D0:1A:A6:3E:A2:4B:A4:61:7F:F9:64:23:69:2C:8C:E0:1E:40:D6
            X509v3 Authority Key Identifier:
                keyid:35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a653030303a3a2f33352d3335203d3e20323636303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a30:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         2e:89:c7:19:ee:5b:3a:b7:96:b8:4a:a6:36:54:06:0a:4f:e4:
         79:68:9a:ee:6f:9c:a6:04:b9:ef:38:7e:aa:70:d3:64:db:48:
         56:40:08:60:4e:44:c8:ce:b4:af:57:72:77:84:12:50:80:fd:
         e7:7c:c0:dd:3a:1f:52:46:11:3a:24:55:7e:e2:59:de:08:3e:
         48:e0:7e:28:24:37:65:2e:07:c4:19:5c:e7:90:03:de:3e:91:
         30:e3:80:5d:12:eb:9c:be:9c:aa:45:fe:69:f9:33:8a:8b:55:
         2d:90:d2:a1:39:8d:75:f4:91:ab:7e:f5:ec:b7:d1:a6:2e:77:
         ef:97:47:4c:b7:8a:bf:38:79:52:68:2a:f6:61:a2:3a:53:0c:
         ea:ca:bf:ff:ad:1a:5e:ee:00:6e:81:36:bb:71:67:b9:75:1f:
         e3:52:69:e0:96:97:10:a0:79:9f:ee:6e:92:f9:f2:48:6c:20:
         7c:3c:ae:cb:ff:86:d9:57:90:a4:03:2b:9f:5c:1b:57:0b:b3:
         d7:69:d1:e2:68:6e:36:24:3a:5a:c1:4c:69:2a:d3:e3:00:66:
         a3:18:23:2a:31:8e:d1:5a:d2:e9:7c:a8:ec:33:f4:cc:48:c7:
         f6:c6:2e:43:8f:5e:28:e3:90:e0:79:31:69:68:35:9f:da:17:
         2e:7f:16:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org