Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          0KbcdUtVyl8/uyFIPMtJub/8MkZpvIOejFjrWHC549M=
Subject key identifier:   14:82:FF:44:55:C5:B4:9A:58:D7:F6:EF:A8:AA:75:8F:CF:A1:2E:67
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       1BF1CB0C520A7447EC4211C6BE66038490471CF7
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:03 +0000
ROA not before:           Tue 26 Sep 2023 14:55:03 +0000
ROA not after:            Tue 24 Sep 2024 15:00:03 +0000
asID:                     266248
IP address blocks:        2804:3d04:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f1:cb:0c:52:0a:74:47:ec:42:11:c6:be:66:03:84:90:47:1c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:03 2023 GMT
            Not After : Sep 24 15:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7d:60:1c:4d:f4:b7:ed:48:46:ff:f5:96:cf:
                    85:ff:60:2d:60:6e:f4:90:01:93:09:99:7b:47:73:
                    af:b4:b7:c5:b2:51:34:8b:a9:8b:6c:c3:35:32:94:
                    43:e2:9b:0a:dc:cd:cc:df:d3:c1:ba:89:20:37:02:
                    83:8e:ca:dd:75:2e:ca:3f:54:80:e8:21:37:cc:b8:
                    a2:1f:4a:78:7e:75:60:35:73:8f:82:2f:88:6b:11:
                    d2:f2:f7:6f:24:6f:41:b8:06:2e:0e:a9:4a:9b:87:
                    f7:25:b1:04:fa:8d:10:6a:14:fb:c0:7f:01:5a:a7:
                    78:0e:09:d1:ba:cf:8a:e3:75:0c:b4:bb:19:9d:0a:
                    4b:ed:eb:aa:89:27:40:02:e0:69:04:26:37:0d:5f:
                    8e:99:7f:cf:2f:a6:03:c3:4a:20:64:23:3f:e9:da:
                    5e:c3:43:5d:26:ad:1f:70:a6:31:91:ad:0b:fd:00:
                    a6:6e:55:eb:73:58:a7:87:e8:47:0d:f1:a4:e7:32:
                    a4:03:68:ea:d2:c0:7c:a0:30:52:c9:8c:bc:32:20:
                    b8:4e:84:39:3f:25:4f:7e:b5:96:ba:9b:27:d6:0d:
                    6f:b1:55:8c:85:d7:6b:64:d5:f6:08:9a:55:44:67:
                    d2:57:e1:68:ed:9f:6b:63:47:20:83:f4:b1:9c:03:
                    49:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:82:FF:44:55:C5:B4:9A:58:D7:F6:EF:A8:AA:75:8F:CF:A1:2E:67
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a9:84:68:1c:7c:3c:a2:12:1c:97:b0:82:b9:53:86:8f:6e:b2:
         f0:1c:17:01:c7:71:9d:98:27:70:5e:8b:e5:57:58:7b:64:39:
         e7:4a:87:50:e5:0f:39:d1:cc:72:85:16:93:0b:c1:dc:ac:5d:
         a4:86:17:cf:01:bf:b6:c2:52:7c:e6:20:4d:fd:a1:1d:0e:fc:
         4e:05:f7:19:e4:5d:ab:9f:1d:bf:34:f7:a3:57:e9:b8:c8:2c:
         80:52:07:69:85:31:9e:ea:5f:3b:a9:ea:4f:ed:e3:ff:c8:f0:
         3e:92:32:ab:ab:62:80:70:be:e8:72:93:1b:e9:7b:0d:67:95:
         bc:e8:ac:31:5d:7e:ce:59:3e:bd:21:00:2f:27:f2:6a:90:53:
         b7:e1:2b:a7:15:2f:04:73:39:5b:75:d2:a9:04:ee:0a:38:4b:
         3c:c8:de:c2:c0:5b:03:80:50:25:04:fa:7a:b6:ce:09:5b:79:
         a9:4b:e3:d8:a7:a7:60:52:eb:4a:1c:6e:f1:c1:f6:de:b1:4a:
         5e:be:01:6d:1d:8c:f9:7b:ca:44:1e:a1:b2:12:8b:01:23:b4:
         f8:b3:46:62:c5:0e:17:14:e2:19:13:72:1c:39:bc:7f:3d:32:
         fc:9a:ef:a4:46:f4:da:67:82:04:c0:a4:a9:0a:7b:46:49:78:
         b5:f1:40:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org