Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a633030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a633030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          k1Fmn/raRS/Fg2SU5YRk5eUnoSLLHIZZ03A1FdZjaM4=
Subject key identifier:   5C:9C:FD:A6:ED:35:C7:26:2C:30:FC:74:12:01:BB:69:F5:88:CE:29
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       2C8C477854891E6B6E21A5851A728A6B2E575F3B
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a633030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:01 +0000
ROA not before:           Tue 26 Sep 2023 14:55:01 +0000
ROA not after:            Tue 24 Sep 2024 15:00:01 +0000
asID:                     266248
IP address blocks:        2804:3d04:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8c:47:78:54:89:1e:6b:6e:21:a5:85:1a:72:8a:6b:2e:57:5f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:01 2023 GMT
            Not After : Sep 24 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:eb:c3:74:a2:88:75:74:30:e9:89:a1:1d:
                    2e:7d:b0:b8:27:ac:44:dd:33:46:93:64:54:57:e7:
                    c5:65:ae:96:cd:e1:66:b1:0a:e5:1a:72:47:f1:b3:
                    74:88:16:68:78:36:8a:ae:80:f9:38:b5:f0:45:e1:
                    a4:52:23:f7:f5:34:e4:d6:2e:30:fa:17:21:25:96:
                    17:90:ee:12:9b:ad:9e:87:43:4e:61:a8:14:d6:98:
                    d8:ec:95:98:93:d2:2f:02:d4:4a:9f:72:e5:93:af:
                    f6:ab:3e:1b:82:21:d1:26:a2:dc:e6:2b:5e:16:e6:
                    43:79:ab:8f:e7:42:54:d4:25:bf:9c:68:83:47:ac:
                    33:8a:7c:ca:db:94:3a:92:e7:7f:3a:a4:b7:71:0f:
                    96:50:ee:9d:91:d2:ce:0c:08:40:d9:19:c0:34:c6:
                    0d:ec:d5:6e:3e:e0:37:b1:8b:d0:4c:84:42:f8:bf:
                    cc:ba:fc:2f:3e:c4:03:2f:b6:79:12:cf:a9:86:1d:
                    36:c0:4e:42:da:1e:5c:b1:f6:88:7d:78:b6:3d:e7:
                    7f:b9:d4:04:0a:e0:3e:15:61:97:0b:9b:23:5c:7d:
                    bc:d0:30:1e:36:5a:5b:92:55:69:45:14:c6:db:dc:
                    6b:a6:41:9e:cb:c4:90:19:72:73:32:b9:6e:fe:9d:
                    6b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9C:FD:A6:ED:35:C7:26:2C:30:FC:74:12:01:BB:69:F5:88:CE:29
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a633030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:59:d2:2a:79:22:ca:48:d4:a3:ae:09:78:f1:13:80:9f:
         90:9d:df:47:1a:2c:1f:af:0e:08:9d:f2:f7:e2:c9:f3:bd:df:
         04:b6:f8:c1:0a:a8:e8:5a:dd:0e:fe:50:e4:2e:82:95:48:da:
         24:aa:d0:e7:05:82:f0:eb:6d:85:75:7c:2b:f7:b8:bb:c0:84:
         cd:e1:72:cb:32:e0:5e:cd:3e:ee:3f:3e:fa:1f:00:d1:90:5b:
         04:8c:c0:ed:1f:d2:f9:6a:9b:d1:6f:5c:ac:db:14:f2:1c:3a:
         64:a0:bc:b6:4f:9f:05:19:0f:c5:99:88:5e:6a:23:e3:6a:ad:
         38:f5:1c:a8:c4:65:bf:26:b6:80:71:6e:f4:3c:72:15:43:f7:
         9f:f5:78:cd:78:54:5f:1e:75:e0:5f:e9:82:4e:86:c4:7f:16:
         6b:71:1e:33:35:f8:2a:48:c0:28:81:44:bc:e3:1d:e7:67:47:
         ce:5d:ef:71:fb:96:c2:c7:12:0b:28:38:37:d6:8a:3b:33:c3:
         57:74:0d:e8:66:71:31:e4:25:5f:d0:2b:2f:50:e0:fb:22:68:
         68:97:2a:75:c1:65:f1:04:50:d9:ce:92:86:a1:fa:25:db:d9:
         57:12:44:f6:14:19:ee:0c:76:55:3a:7e:f0:70:80:77:e7:d5:
         21:02:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org