Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          kGCsxXeqn8/QEZAyRJDLfOPwUgw4jT8B8Oli/ffPKFw=
Subject key identifier:   DA:E7:B9:E5:93:C1:B8:E9:45:3E:8C:9E:21:00:55:8B:A4:F0:2F:53
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       27E74138C526EEA05EBDDC7CB6338F0AB754BC7E
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:01 +0000
ROA not before:           Tue 26 Sep 2023 14:55:01 +0000
ROA not after:            Tue 24 Sep 2024 15:00:01 +0000
asID:                     266248
IP address blocks:        2804:3d04:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e7:41:38:c5:26:ee:a0:5e:bd:dc:7c:b6:33:8f:0a:b7:54:bc:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:01 2023 GMT
            Not After : Sep 24 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:e6:1d:11:2f:6a:b5:63:b2:20:cb:3a:df:
                    5d:de:fe:22:78:c9:07:b9:67:fe:c5:b0:0d:2e:be:
                    68:54:c3:fa:f1:a3:d4:be:65:ec:4c:96:43:a6:17:
                    9c:4d:62:18:52:12:e5:8e:53:ee:e8:5c:26:3e:ee:
                    24:04:d6:ea:4f:10:c0:c7:3a:df:ab:0b:78:d9:1b:
                    06:4a:43:b4:27:9f:e7:09:c2:df:cd:0a:b9:21:40:
                    91:6d:8b:07:6a:e1:b3:18:85:37:79:9e:10:44:b4:
                    ce:ac:8f:bc:4d:fc:5a:f9:e6:a8:b0:67:81:51:5a:
                    65:17:a7:a0:9b:0b:0a:45:a1:12:58:12:8b:73:c5:
                    35:f6:7e:b5:5c:85:db:b8:d2:a7:e8:57:f5:b5:48:
                    a9:4f:c2:dd:28:97:1e:66:0b:64:6f:44:d3:5d:f8:
                    e1:3d:a9:01:c2:31:74:88:34:7f:90:05:f3:c4:6b:
                    81:0a:22:bc:be:26:20:2d:0d:5f:4b:13:9f:e4:aa:
                    8b:26:90:02:55:fa:7e:7d:b3:db:d7:1b:ee:d7:74:
                    ce:bf:0f:b8:25:67:4e:2a:a2:63:78:1b:da:7d:d0:
                    c6:b5:d7:2d:f9:dd:93:b5:e2:4f:c1:3c:67:5b:0f:
                    8f:95:c4:cc:b5:28:33:a4:f9:62:85:b8:79:f9:74:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E7:B9:E5:93:C1:B8:E9:45:3E:8C:9E:21:00:55:8B:A4:F0:2F:53
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c7:4c:b2:2a:52:d3:83:f0:35:66:47:82:69:05:48:c6:c0:52:
         82:9d:41:2d:1b:bd:1f:9d:60:1d:61:db:6b:30:c6:e7:ea:13:
         e5:3a:0f:41:7e:4e:87:b0:71:75:43:1e:bf:42:b2:16:f1:8b:
         5a:48:48:9d:d6:15:60:61:84:8e:16:d5:95:50:00:a0:75:2a:
         78:66:29:52:04:36:bc:cc:54:ff:69:e6:d0:fc:8b:8b:24:31:
         1d:ed:df:bd:63:ed:a8:4c:f8:d4:44:f0:18:12:f6:db:44:33:
         88:e3:14:1c:53:8d:34:d8:c4:e9:e8:5e:45:44:4c:fd:0c:3b:
         e8:db:9e:56:55:53:16:0e:3c:45:81:c8:d3:83:c5:7b:65:73:
         52:52:d5:71:19:e8:41:f7:2d:97:c7:ab:f4:e6:4f:a0:e2:2d:
         84:15:5a:56:3a:99:99:9f:df:75:9c:4c:f4:b3:1b:9c:19:ed:
         e1:87:c6:e2:5c:bb:b4:b4:80:28:6e:56:68:08:05:4c:a1:b1:
         bb:46:62:7a:e4:9e:c9:7f:3b:45:43:bf:93:28:dd:de:01:51:
         32:bf:bd:d0:fd:b4:89:7d:f3:3f:5d:6c:ba:56:04:71:97:c9:
         26:c7:04:e2:d1:e7:c4:be:b8:21:0b:98:4a:33:3b:02:75:7e:
         3f:ae:dd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org