Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33332d3333203d3e203631363936.roa
File:                     323830343a316165303a3a2f33332d3333203d3e203631363936.roa (raw, json)
Hash identifier:          glN2/GqpzaYPJmpkazS0sRC6djsIZfVUzOwwqcLUrD8=
Subject key identifier:   45:75:FA:3B:19:61:89:00:09:16:5D:30:2B:81:87:08:BD:8C:5D:9D
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       1464D50A912815078E335673872EB893F3604FCB
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33332d3333203d3e203631363936.roa
Signing time:             Sat 14 Oct 2023 22:10:48 +0000
ROA not before:           Sat 14 Oct 2023 22:05:48 +0000
ROA not after:            Sat 12 Oct 2024 22:10:48 +0000
asID:                     61696
IP address blocks:        2804:1ae0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:64:d5:0a:91:28:15:07:8e:33:56:73:87:2e:b8:93:f3:60:4f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct 14 22:05:48 2023 GMT
            Not After : Oct 12 22:10:48 2024 GMT
        Subject: CN=4575FA3B1961890009165D302B818708BD8C5D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:aa:e5:33:ab:91:df:30:9b:dd:99:c4:9b:
                    d2:4e:46:dd:a1:59:d3:41:9f:41:d7:c0:fc:2d:52:
                    a8:e9:57:46:e2:29:e3:aa:04:a5:4e:c4:2d:3b:e2:
                    3b:c1:06:ac:e4:d7:2b:21:8d:97:88:57:2e:85:66:
                    21:34:72:fe:fc:2e:1f:0c:5f:58:49:02:70:fb:a7:
                    47:13:48:5d:07:6d:fe:a9:dd:30:32:1d:bd:e8:67:
                    55:e2:b0:fe:1f:40:90:e0:42:a2:0a:db:d8:5f:be:
                    07:9d:a1:c8:93:2d:7c:e3:9e:e3:13:42:0b:6b:86:
                    3a:26:31:ed:fb:a7:20:f2:ca:78:92:88:87:8f:70:
                    60:67:5a:9a:c6:52:96:3f:fb:9c:ba:b1:c6:89:3a:
                    ae:b3:5d:5b:9d:a1:ad:e4:42:04:10:75:02:09:ee:
                    66:ee:06:af:94:d0:75:a2:6d:a0:55:c6:09:91:f6:
                    e4:05:b9:c9:95:2d:c1:9d:7d:c5:6a:9a:ab:52:f0:
                    3c:42:0d:44:e7:1a:32:42:1c:d0:20:c0:b4:16:4e:
                    70:33:e1:bb:39:01:8f:72:a5:dc:84:7b:20:69:d0:
                    2a:8e:d3:1f:36:68:b6:bd:78:31:5e:24:4f:e2:92:
                    51:e9:e9:a1:67:1a:99:2d:36:5c:08:39:6a:ea:40:
                    21:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:75:FA:3B:19:61:89:00:09:16:5D:30:2B:81:87:08:BD:8C:5D:9D
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33332d3333203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ae0::/33

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:3e:d4:f8:7f:99:e3:c3:70:b6:1f:33:3e:ea:f4:9e:a0:
         b9:11:14:fd:34:77:4c:70:d3:e6:3d:45:18:10:e2:f4:22:55:
         d5:f5:a8:90:f9:63:b5:aa:59:08:33:8b:6d:16:b4:d7:a2:57:
         d6:62:cb:d3:54:f0:89:7c:59:c4:f3:a8:ff:34:bc:11:07:83:
         b0:71:fe:b7:83:74:3e:56:65:04:35:95:d6:16:4a:97:8d:7a:
         6b:b7:1c:7c:59:31:b2:bd:dd:8f:78:18:fc:03:6e:4c:0e:22:
         3a:f9:32:13:7e:e3:44:83:19:e8:20:00:fb:7d:ed:5a:f0:6e:
         4a:98:9d:c9:55:25:c4:17:a8:33:eb:40:3a:50:ac:dd:29:a5:
         20:5d:c6:a3:8b:2c:ee:3f:a0:0e:30:9e:54:77:ef:0b:96:1c:
         8c:4b:de:71:96:64:b9:02:b4:a1:e4:c9:c4:f5:11:43:e0:5d:
         4b:4a:a2:4d:4e:17:af:de:3d:49:3c:de:a6:dc:c5:b6:73:64:
         07:79:88:55:9f:20:c7:cf:7d:9a:9c:33:75:37:74:5f:b6:15:
         84:67:b2:52:88:c1:47:5a:d6:8e:0b:46:95:0b:d0:57:5b:90:
         49:55:c6:ac:0c:15:aa:bf:5e:ce:5e:31:1c:98:85:03:a2:83:
         de:7f:0a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org