Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a613030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a613030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          MDdawkv+aUJTCejtLGManuD3SrTqR/ZVY0vErx5jnSU=
Subject key identifier:   5B:0B:EA:2F:AD:37:44:58:3C:6A:7E:6D:4B:07:C1:9F:0A:C5:4E:84
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       3A257C2A6D7EDEB67087FA8B89D74CC60879094F
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a613030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:01 +0000
ROA not before:           Tue 26 Sep 2023 14:55:01 +0000
ROA not after:            Tue 24 Sep 2024 15:00:01 +0000
asID:                     266248
IP address blocks:        2804:3d04:a000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:25:7c:2a:6d:7e:de:b6:70:87:fa:8b:89:d7:4c:c6:08:79:09:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:01 2023 GMT
            Not After : Sep 24 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:31:54:71:30:56:68:d9:43:c8:d6:d5:81:13:
                    eb:4a:02:e4:93:85:3d:7a:2a:67:47:5e:e8:4c:b8:
                    3b:92:9f:fc:9b:3c:b0:38:18:e7:4b:64:6c:a6:97:
                    f7:41:51:5d:2b:6e:9e:42:6e:8a:08:b7:c7:fb:6c:
                    79:10:4b:d0:56:04:f8:67:f6:b0:9c:cc:9c:00:73:
                    e2:b8:1d:94:1d:98:06:56:4c:58:7a:75:8a:43:ed:
                    14:68:ae:b2:b6:80:6d:d6:98:5e:4e:5b:52:99:55:
                    11:16:20:86:25:eb:42:1e:8a:3d:29:12:7c:c4:7d:
                    24:5a:19:00:4b:10:0b:d7:e9:5f:f6:8c:a6:e6:95:
                    e4:d0:d2:06:39:29:ce:5c:a0:78:98:ee:39:14:3b:
                    3c:d6:5e:39:41:c3:67:24:27:5d:1a:3b:6a:33:37:
                    f5:e4:dd:e4:5d:0c:7c:3f:47:5a:80:c9:73:ae:31:
                    06:21:30:57:52:11:1b:7d:ad:59:f3:75:cc:45:03:
                    99:93:ce:ca:a1:27:ba:22:ca:e3:91:e2:14:71:be:
                    3e:1c:63:dc:a5:10:88:6c:64:3b:22:4c:ee:38:f3:
                    91:d1:83:19:8d:02:cd:0a:73:c4:24:d4:a3:74:46:
                    42:86:26:27:08:07:63:75:6c:a9:e1:fd:0f:49:b5:
                    00:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0B:EA:2F:AD:37:44:58:3C:6A:7E:6D:4B:07:C1:9F:0A:C5:4E:84
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a613030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4e:81:a7:a4:09:ba:c8:70:ce:1d:00:a5:9d:55:91:e6:54:ca:
         ae:9d:35:fc:79:64:53:36:9c:fe:c5:c4:08:93:94:cc:34:c1:
         eb:11:49:80:ad:23:44:22:f1:cd:f4:91:76:32:79:e1:28:ef:
         33:b6:90:d4:6d:af:17:4f:70:16:27:a6:94:0c:14:13:3c:f6:
         56:9f:8f:55:26:25:27:83:de:5f:e6:69:48:49:a4:1d:fb:67:
         e4:ff:4b:6f:ac:29:d1:c5:d0:8e:83:f2:e1:82:2d:95:ff:41:
         d6:38:e0:bc:bc:91:3b:ad:49:cf:24:90:ec:70:fa:78:f8:58:
         ef:d2:d9:cb:16:4e:d3:91:9b:32:c2:62:0b:d0:80:c5:ee:05:
         69:b6:1b:85:85:0a:9c:cf:39:df:d6:3c:7c:4f:a2:95:05:d6:
         d4:27:16:b1:25:68:ab:fe:e4:21:b7:dd:53:d7:66:9d:7e:45:
         10:7b:ad:f9:6e:df:cf:72:76:31:e8:4d:81:2a:39:b3:6b:c8:
         6e:a6:76:2d:34:27:34:cb:b6:40:20:97:93:a0:03:66:62:5d:
         ed:9e:65:e9:26:09:29:04:8a:8d:d0:f2:45:9a:53:e7:b1:08:
         0f:97:bb:4b:44:da:ca:c6:fc:bc:ea:7b:80:f3:4b:89:56:80:
         8b:cd:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org