Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a343030303a3a2f33342d3334203d3e20323636323438.roa
File:                     323830343a336430343a343030303a3a2f33342d3334203d3e20323636323438.roa (raw, json)
Hash identifier:          /+3GyuwHcSZGjHoZylSY4oDVDgLxMGAXoWD023R8xSs=
Subject key identifier:   47:F5:4E:7F:B7:F9:F5:FF:2B:5C:78:66:1B:9C:FC:85:63:9E:D9:A4
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       A02B382F8EE03359DF30CA5BA99C2E5C971879
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a343030303a3a2f33342d3334203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:02 +0000
ROA not before:           Tue 26 Sep 2023 14:55:02 +0000
ROA not after:            Tue 24 Sep 2024 15:00:02 +0000
asID:                     266248
IP address blocks:        2804:3d04:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a0:2b:38:2f:8e:e0:33:59:df:30:ca:5b:a9:9c:2e:5c:97:18:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:02 2023 GMT
            Not After : Sep 24 15:00:02 2024 GMT
        Subject: CN=3082010A0282010100C142FF4A47BB6D1232DF4D65670CA29119267B760C19A28BE5D0A8FC1A8D71AC58BE12E20EF7E60D37D0265B8EF361734128F0A7AB6D9C7BAAC81C37F496C50808C8DD44D539252844A0384C9BC18A31CA819E3EF615316E5CD893945BFB3080A447E8D37B3A5B60133E9E654AA3872512063CF2921B5B72766FAE1BEB7B284B7B9E1A925FA13F3079AE5A77E495522E4715B7EEEF27D22781F6986AE686C7083E612CB9AF8F4C074F78370739C5625DF2F16996F26B882148A86660C1E4F1CE35835403394023028E3EA10BFA007834CC1CAD275B0F2CA96920B9EEB5A7DE30F5A6C87DF72EFF1942E1B70A79C7D91C3D71A2F8094B39D710EFB9ECD5BD83B10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:ff:4a:47:bb:6d:12:32:df:4d:65:67:0c:
                    a2:91:19:26:7b:76:0c:19:a2:8b:e5:d0:a8:fc:1a:
                    8d:71:ac:58:be:12:e2:0e:f7:e6:0d:37:d0:26:5b:
                    8e:f3:61:73:41:28:f0:a7:ab:6d:9c:7b:aa:c8:1c:
                    37:f4:96:c5:08:08:c8:dd:44:d5:39:25:28:44:a0:
                    38:4c:9b:c1:8a:31:ca:81:9e:3e:f6:15:31:6e:5c:
                    d8:93:94:5b:fb:30:80:a4:47:e8:d3:7b:3a:5b:60:
                    13:3e:9e:65:4a:a3:87:25:12:06:3c:f2:92:1b:5b:
                    72:76:6f:ae:1b:eb:7b:28:4b:7b:9e:1a:92:5f:a1:
                    3f:30:79:ae:5a:77:e4:95:52:2e:47:15:b7:ee:ef:
                    27:d2:27:81:f6:98:6a:e6:86:c7:08:3e:61:2c:b9:
                    af:8f:4c:07:4f:78:37:07:39:c5:62:5d:f2:f1:69:
                    96:f2:6b:88:21:48:a8:66:60:c1:e4:f1:ce:35:83:
                    54:03:39:40:23:02:8e:3e:a1:0b:fa:00:78:34:cc:
                    1c:ad:27:5b:0f:2c:a9:69:20:b9:ee:b5:a7:de:30:
                    f5:a6:c8:7d:f7:2e:ff:19:42:e1:b7:0a:79:c7:d9:
                    1c:3d:71:a2:f8:09:4b:39:d7:10:ef:b9:ec:d5:bd:
                    83:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F5:4E:7F:B7:F9:F5:FF:2B:5C:78:66:1B:9C:FC:85:63:9E:D9:A4
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a343030303a3a2f33342d3334203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c4:aa:3f:f1:f9:08:98:95:3b:63:07:8e:6e:c4:56:19:32:5b:
         4a:b3:3b:97:10:ca:0c:ca:98:1c:2e:42:47:7b:3f:f8:b6:d9:
         be:93:7e:b9:df:ce:36:22:64:52:8a:83:4a:63:91:c3:14:5b:
         4d:8c:20:26:60:df:26:ff:91:29:93:d3:f2:e9:3e:96:a6:e9:
         37:4d:31:bc:98:f0:0e:ca:c8:3b:8a:67:f1:c3:0b:0c:f5:e5:
         d4:e5:bf:79:56:71:34:df:2f:c9:f2:64:fc:8f:2c:27:19:69:
         ed:b4:a7:e0:71:6b:00:fa:d0:04:75:f7:4a:77:83:13:78:cb:
         4b:76:b4:00:71:5e:39:22:c8:f1:05:03:fe:09:2f:04:b1:76:
         fe:65:dd:57:f2:98:76:76:cd:51:e4:8b:ae:3d:4a:f4:c6:6a:
         b0:63:56:10:2c:26:a6:a3:ea:8a:e7:03:d5:12:a0:7e:a5:18:
         39:b9:c2:60:67:fe:b3:75:0c:21:20:43:16:4b:18:72:7a:cc:
         79:98:26:42:04:c1:9b:6f:29:94:4e:ac:d6:43:9e:ee:02:eb:
         73:12:2f:1f:fc:bc:87:1d:5e:9b:c4:88:6d:e3:cc:c1:ed:a1:
         40:c4:61:02:c0:22:35:88:4f:0e:1b:5b:81:7e:47:ed:4c:50:
         e4:8d:8c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org