Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a3a2f33322d3332203d3e20323635333834.roa
File:                     323830343a333334303a3a2f33322d3332203d3e20323635333834.roa (raw, json)
Hash identifier:          87R3iDFDcTXenzP4LxWBjjc6JMkLLEv1SLe2F535hG0=
Subject key identifier:   F0:87:9C:23:33:1B:D8:01:C5:A7:E9:C2:8E:D0:67:F4:75:27:C3:AA
Certificate issuer:       /CN=C6E233BD893D72E2620AF66DE696FE2EE7A2E527
Certificate serial:       3D66A68E480DEC35AE98AF2EF8C06A2620A41DB1
Authority key identifier: C6:E2:33:BD:89:3D:72:E2:62:0A:F6:6D:E6:96:FE:2E:E7:A2:E5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a3a2f33322d3332203d3e20323635333834.roa
Signing time:             Sun 24 Dec 2023 22:28:55 +0000
ROA not before:           Sun 24 Dec 2023 22:23:55 +0000
ROA not after:            Sun 22 Dec 2024 22:28:55 +0000
asID:                     265384
IP address blocks:        2804:3340::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:66:a6:8e:48:0d:ec:35:ae:98:af:2e:f8:c0:6a:26:20:a4:1d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E233BD893D72E2620AF66DE696FE2EE7A2E527
        Validity
            Not Before: Dec 24 22:23:55 2023 GMT
            Not After : Dec 22 22:28:55 2024 GMT
        Subject: CN=F0879C23331BD801C5A7E9C28ED067F47527C3AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:62:8b:67:5d:bb:d9:03:a8:85:f2:34:0c:
                    3d:f4:4c:9a:fb:49:a8:53:d0:f0:e7:88:cb:25:a8:
                    c6:eb:87:fe:86:b6:4e:7e:93:1b:3d:42:eb:72:f0:
                    d4:bf:e5:06:aa:72:3a:b4:e2:cc:e1:17:7d:90:f1:
                    1a:62:10:5e:e2:ad:86:12:11:43:3d:35:4e:56:84:
                    80:e3:a2:fe:0e:92:90:a5:81:0c:d9:67:66:1d:c9:
                    af:f7:f1:48:8f:78:df:60:bb:5c:86:6b:ea:f2:c7:
                    06:26:35:54:49:ab:7f:60:a0:9b:98:1a:34:89:59:
                    eb:39:5f:1f:81:12:c3:21:35:c3:8e:c4:d2:e0:16:
                    b6:f4:57:f8:c4:8d:aa:fe:63:2a:59:d7:53:76:95:
                    e0:04:2c:51:04:39:22:1a:c8:92:72:90:18:6e:0f:
                    97:9a:e5:02:eb:29:0a:83:51:1c:80:31:fb:05:af:
                    7a:95:dc:08:f8:b6:0d:4a:dc:23:84:5e:cb:e2:39:
                    68:12:5d:6b:f7:0f:d1:4a:3a:bc:91:09:de:fb:aa:
                    78:fc:6d:59:a4:e0:4a:43:68:f8:98:69:47:f9:64:
                    df:6e:3c:e3:5b:d6:8a:50:ef:db:48:86:1b:ba:f1:
                    e6:ef:b5:86:ae:5c:48:d7:fa:16:2b:8f:a9:69:d9:
                    28:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:87:9C:23:33:1B:D8:01:C5:A7:E9:C2:8E:D0:67:F4:75:27:C3:AA
            X509v3 Authority Key Identifier:
                keyid:C6:E2:33:BD:89:3D:72:E2:62:0A:F6:6D:E6:96:FE:2E:E7:A2:E5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a3a2f33322d3332203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3340::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:7f:0e:03:61:3c:ed:eb:e8:79:06:a3:a9:c6:fd:f6:f5:e2:
         7f:62:5d:47:ca:26:2b:8c:92:f4:c6:5a:01:3d:8a:54:a4:76:
         1c:2c:df:f6:e2:24:89:98:b9:89:15:91:c7:ae:4d:e8:f5:e2:
         8d:e2:4f:87:98:c7:0f:10:4a:c7:2a:32:cb:6f:88:5b:0a:23:
         cb:29:37:0a:73:cf:1c:b4:14:ae:8e:8f:2f:5b:6b:b4:58:01:
         bd:f9:b1:9f:80:c0:ba:31:32:46:4d:7b:29:92:a2:73:54:42:
         a7:33:64:d9:87:64:7a:ec:e1:f5:65:85:1f:fd:50:10:63:6e:
         68:e8:18:cb:77:5c:85:3d:16:6c:9e:20:26:0f:84:20:de:3a:
         cc:63:43:ad:d8:e8:e9:85:e3:19:9c:4f:f6:36:55:f6:ac:03:
         a0:8e:31:86:a2:60:ed:01:08:a5:6b:bc:1e:69:d8:f3:cf:66:
         a2:2a:c7:32:2f:86:2f:98:d6:ce:7a:26:13:bf:83:3c:c7:36:
         97:04:47:7c:9a:5f:a8:9e:86:3d:44:eb:0e:b1:1a:5c:25:9d:
         bb:66:53:ba:6c:00:6c:9e:4c:74:52:76:c6:c5:7b:03:5d:7e:
         f2:3f:c1:64:b2:5f:f8:ac:43:9a:c1:41:ef:58:1c:87:16:3e:
         b0:44:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org