Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a3a2f33342d3334203d3e20323636323438.roa
File:                     323830343a336430343a3a2f33342d3334203d3e20323636323438.roa (raw, json)
Hash identifier:          tRIE9w8WdSgUHx7/ndUjG6Cr7+CpsJ61l1XJRJuSWP4=
Subject key identifier:   D1:D0:6A:8E:33:0B:8C:F6:6B:1C:3A:FC:2A:45:D0:94:15:52:A5:D6
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       248F747A13440BB883742BD8985D48B5CB44CF4C
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a3a2f33342d3334203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:01 +0000
ROA not before:           Tue 26 Sep 2023 14:55:01 +0000
ROA not after:            Tue 24 Sep 2024 15:00:01 +0000
asID:                     266248
IP address blocks:        2804:3d04::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8f:74:7a:13:44:0b:b8:83:74:2b:d8:98:5d:48:b5:cb:44:cf:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:01 2023 GMT
            Not After : Sep 24 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:d6:4e:8a:ba:dd:73:11:2d:81:45:8f:d1:
                    0d:8b:cb:34:fb:16:47:ab:40:26:b6:8c:4e:6d:5a:
                    4b:d1:cf:94:b2:7e:b4:9a:7c:51:41:6c:58:66:33:
                    85:45:71:28:b0:4d:d5:6e:15:20:67:c0:a8:fd:4d:
                    e4:4e:40:00:a0:a7:88:12:90:ff:e9:eb:8f:48:5d:
                    6d:d2:d9:ec:63:e0:5d:cc:cb:1f:60:78:82:ca:35:
                    81:be:dd:67:88:43:ff:58:88:31:44:86:d1:4f:01:
                    6e:fa:15:14:6c:08:c7:93:4b:22:c7:00:74:f2:71:
                    70:6c:b7:68:60:df:35:fd:6a:18:75:a1:ab:87:b8:
                    11:1a:15:3c:02:ff:db:b4:9d:da:3e:73:71:7c:bd:
                    04:53:78:46:24:af:b9:c1:28:4a:d0:d3:87:2d:20:
                    7f:63:dd:da:ca:81:d2:70:cc:39:33:5e:58:6a:8f:
                    eb:41:7d:48:f3:18:71:b7:0a:aa:37:6c:9b:fb:d9:
                    2b:ac:62:68:91:80:55:f3:33:53:1d:33:45:b2:1f:
                    74:28:ee:cd:9f:d8:76:c2:ce:d6:55:ef:50:0d:b1:
                    3d:5e:cf:7f:e5:a8:e9:1c:94:a0:dd:18:4e:4b:32:
                    31:2d:a7:a1:a9:cd:6b:94:cd:3e:d0:7d:70:80:ac:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D0:6A:8E:33:0B:8C:F6:6B:1C:3A:FC:2A:45:D0:94:15:52:A5:D6
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a3a2f33342d3334203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:c1:2d:e4:08:aa:c9:f4:c4:a8:50:fa:7d:b6:e2:1f:7e:0d:
         0b:c4:26:14:38:5f:22:a7:a9:6e:bd:c5:e6:4e:d6:e1:86:14:
         41:c5:44:bb:45:06:24:19:a8:67:ae:70:30:94:61:f2:f6:d4:
         64:56:ce:ca:bb:29:76:7a:dc:3d:59:0b:b8:8d:fb:9b:54:c3:
         17:12:c5:17:e0:22:22:8e:52:dc:2b:a3:4f:82:91:93:c0:4c:
         25:11:1b:eb:79:a0:d6:4d:17:e2:25:f4:80:82:17:ab:11:c4:
         2c:5e:34:7a:89:d3:c7:14:e8:67:a2:a8:d7:80:10:2a:75:d7:
         3a:b8:8e:74:68:ad:0d:61:7d:22:f1:53:a5:95:fe:69:65:20:
         08:a0:02:98:04:c9:e7:7f:bd:8b:91:44:0f:84:4a:65:77:fb:
         e6:e4:fd:a4:75:98:f5:ab:70:05:4b:f4:3b:05:72:dc:05:a9:
         69:7c:4a:01:34:fe:23:c1:4f:69:b6:36:74:74:d0:c8:89:6a:
         2b:64:d9:e7:06:fe:c9:c9:e6:4e:07:d8:f9:5c:81:c4:d2:1c:
         4c:ea:96:ba:dc:22:f1:4c:7d:25:e6:62:6d:d5:9a:d4:d8:b2:
         2e:cf:20:95:23:05:6d:f0:e5:8d:d8:09:2d:b3:77:dd:06:45:
         db:78:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org