Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a353030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a353030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          IrDY3KHYKQZoqHVWmjLLgvl/JXkVr6IDGYzr6ULJ5ek=
Subject key identifier:   A0:AC:6E:11:D9:49:49:1C:3F:18:2D:D3:DA:17:93:A0:01:39:C7:AE
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       2256C889AE50FD36A525AE4D86EA84E757150694
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a353030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:02 +0000
ROA not before:           Tue 26 Sep 2023 14:55:02 +0000
ROA not after:            Tue 24 Sep 2024 15:00:02 +0000
asID:                     266248
IP address blocks:        2804:3d04:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:56:c8:89:ae:50:fd:36:a5:25:ae:4d:86:ea:84:e7:57:15:06:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:02 2023 GMT
            Not After : Sep 24 15:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:00:a2:41:2f:8e:de:4b:ad:5d:10:54:9d:f0:
                    58:f1:19:1f:c4:9f:76:2f:ed:ff:34:aa:ee:5e:55:
                    22:77:e0:51:eb:47:87:15:7f:b5:81:66:39:bd:78:
                    21:6b:4a:b9:49:d6:4f:b7:0c:2b:8d:08:5c:2e:fd:
                    b5:80:fb:f0:01:99:ab:23:5f:f2:fd:97:f1:a9:93:
                    22:67:7a:26:19:e2:da:5c:e2:84:d9:7c:70:99:8c:
                    6b:1c:2b:ee:89:6f:9a:0e:95:dc:27:0e:20:70:f8:
                    e8:05:64:ca:66:65:4c:0f:97:dd:25:2a:db:00:cf:
                    1c:78:59:e4:ea:bd:b8:d6:61:53:d0:e3:3a:4d:31:
                    f6:bb:20:f1:af:16:91:c0:4e:ea:5d:f8:56:51:ba:
                    7a:e5:02:24:33:d0:3d:51:c0:8b:60:b1:86:ad:0c:
                    fc:57:6d:67:1a:a3:62:a8:21:79:46:80:7d:4a:42:
                    7b:b6:7f:21:59:8a:2d:00:2a:91:97:ee:df:55:9b:
                    18:2f:0b:14:0b:f0:38:67:04:44:c1:2e:69:03:cd:
                    64:1a:8d:67:2e:bd:10:bf:84:0f:40:91:09:5c:61:
                    4b:c2:fa:e3:41:4c:e3:08:ff:cf:48:40:e2:c4:f4:
                    bc:d9:a0:e1:e6:3a:cd:32:11:eb:a0:dc:7b:d5:f6:
                    9e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AC:6E:11:D9:49:49:1C:3F:18:2D:D3:DA:17:93:A0:01:39:C7:AE
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a353030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:86:69:b9:6b:07:ed:35:d4:ee:24:c5:ed:96:1e:f7:c5:b2:
         db:90:03:67:70:1b:9e:c6:84:5d:6f:ad:3f:aa:ec:44:83:ae:
         59:21:48:dd:1c:55:0d:49:7b:87:59:e3:6f:71:a2:a8:f2:2d:
         0b:9d:63:77:f4:5e:94:c0:1a:b3:3d:a2:e8:4a:0e:2c:bd:27:
         d4:10:ca:a1:68:29:a5:56:dd:05:7c:34:54:ef:2e:18:c5:19:
         24:b4:c5:1d:4c:14:77:aa:84:75:00:3e:c2:2e:0c:59:60:03:
         c1:a2:ad:1e:ba:72:3b:de:3c:5a:45:02:82:81:0b:39:8d:07:
         34:af:1d:42:76:3e:6a:35:bb:e4:bf:ce:c9:52:c6:a1:50:1f:
         eb:9b:b6:72:fa:58:f1:7a:db:e6:9e:fc:f1:db:35:fa:29:2c:
         68:6a:fa:7c:eb:3c:f2:f1:a0:08:86:6e:b3:1c:c8:f1:4c:21:
         ec:04:0b:69:f8:d6:98:cf:29:38:b1:7a:94:8e:98:e4:cc:50:
         3b:81:93:1c:8f:4e:c4:4a:e0:fa:7a:27:2d:5e:f1:f8:97:dc:
         14:07:56:bc:4f:39:f5:e9:e2:cc:73:94:dc:b3:04:29:2f:6c:
         db:b2:6a:54:59:23:04:a3:a1:4f:4f:ac:db:71:ea:b2:f5:36:
         36:e9:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org