Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          6WvObxXkkujIcRpeWoVpj6g6x0a1c7LcG99OdIiPbCM=
Subject key identifier:   9A:14:04:D9:84:75:63:19:A4:29:0E:F0:67:F7:38:FE:FB:AC:5B:F3
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       758A3293EE465422034EBD60143387A1039255D8
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:03 +0000
ROA not before:           Tue 26 Sep 2023 14:55:03 +0000
ROA not after:            Tue 24 Sep 2024 15:00:03 +0000
asID:                     266248
IP address blocks:        2804:3d04::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8a:32:93:ee:46:54:22:03:4e:bd:60:14:33:87:a1:03:92:55:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:03 2023 GMT
            Not After : Sep 24 15:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:17:a3:92:a7:b4:f8:0b:78:74:7d:3e:af:
                    a7:bd:0b:12:24:ff:a4:d4:06:ec:bb:45:97:5a:1b:
                    d6:9d:33:32:7a:b1:b3:7a:b1:55:05:e5:61:6d:5d:
                    f7:d5:73:f5:61:a6:14:2c:73:f4:a9:49:f5:36:59:
                    ab:9d:2a:bd:a4:38:51:f1:b4:25:26:d9:bb:61:06:
                    c0:5a:53:cf:4f:64:e7:59:d7:fb:a1:9f:41:91:35:
                    9b:f0:0a:18:35:45:c4:cc:ec:50:cf:e0:b3:53:a8:
                    71:29:24:88:d3:00:d0:9b:05:3b:a0:97:89:58:97:
                    d5:2b:be:a6:61:34:3e:4e:d4:97:e3:8e:8c:06:9e:
                    5c:37:23:9b:49:7f:1d:50:69:9e:ec:fb:f0:ef:88:
                    a0:df:db:fb:6d:c3:68:2a:c4:94:4b:7d:cf:42:69:
                    33:44:6a:2a:10:d5:a6:d8:ea:b8:a3:27:cc:a3:7e:
                    ff:9e:6a:aa:26:40:5e:b0:ff:e3:c1:8e:9b:3f:46:
                    c1:65:d7:fa:f8:64:d4:6d:51:b0:31:e3:81:49:ae:
                    d3:dc:31:4d:37:fd:26:15:90:30:35:c0:66:21:16:
                    29:96:97:df:66:70:33:5f:93:11:44:40:cd:fa:ca:
                    be:ac:cd:60:a6:98:3a:69:aa:27:4f:22:53:c5:d8:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:14:04:D9:84:75:63:19:A4:29:0E:F0:67:F7:38:FE:FB:AC:5B:F3
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04::/36

    Signature Algorithm: sha256WithRSAEncryption
         ea:59:2f:73:7b:13:f5:c7:d3:ad:cc:f9:40:e9:b2:43:f8:04:
         b0:18:ce:da:b5:9d:ea:d5:a5:af:d3:57:30:cd:bd:e4:6b:43:
         c3:86:f1:de:44:26:50:ae:cc:17:ff:19:a4:c8:73:97:b7:07:
         5b:c8:94:65:d7:e8:2f:d8:03:2d:57:42:30:e9:3e:8c:8b:c4:
         fb:22:6a:8a:9f:e2:f2:0e:ec:9d:1b:93:f4:e6:10:ec:de:5f:
         1f:d7:e7:98:5d:c8:8c:62:09:69:ab:dd:0a:6b:6a:11:9f:bd:
         a4:e5:d8:ab:9d:6a:03:9c:26:dc:81:23:f9:94:05:01:ea:75:
         6c:43:c7:14:95:c3:48:de:a7:e4:01:2c:93:23:e7:7b:54:20:
         e0:e4:4c:4c:49:39:23:18:ed:96:42:ec:69:ca:76:1f:e8:59:
         a5:8d:b1:de:2e:65:0b:dd:4b:58:06:30:9f:83:19:19:8b:fa:
         91:8c:78:68:35:e7:f3:a7:11:26:e8:4b:e9:1e:a9:86:7d:2d:
         58:48:31:55:f0:5f:32:87:09:dd:00:60:69:ef:fe:52:78:c9:
         ce:2a:19:63:b9:61:43:f6:79:00:3a:8f:b2:dd:78:d7:c5:08:
         6d:2e:fb:a1:e4:4b:67:a6:47:e3:44:10:fa:3e:36:ec:11:84:
         df:63:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org