Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          7Kp4iEOZ4cBQSSna2z87+Yqd+vgXqSc5c6GRZL94x+0=
Subject key identifier:   E5:82:A2:AD:41:D9:C1:58:A8:38:C6:CC:F2:0E:B0:0F:A1:86:4F:E8
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       40AE2D1C1228D7AF9D5DBF7187FAFCC8684D54C3
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:01 +0000
ROA not before:           Tue 26 Sep 2023 14:55:01 +0000
ROA not after:            Tue 24 Sep 2024 15:00:01 +0000
asID:                     266248
IP address blocks:        2804:3d04:e000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ae:2d:1c:12:28:d7:af:9d:5d:bf:71:87:fa:fc:c8:68:4d:54:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:01 2023 GMT
            Not After : Sep 24 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:d9:3b:64:f1:e1:ce:59:1d:44:6b:01:4a:
                    8b:1a:22:0c:bb:57:c9:5c:32:42:29:01:6c:2f:6e:
                    0c:27:c8:87:0e:80:47:4a:d2:ac:0a:be:06:75:a4:
                    39:d9:9c:92:24:39:18:34:1f:92:bf:fc:12:6c:d6:
                    db:eb:72:33:c2:a8:19:3c:99:a8:d1:92:8f:00:c4:
                    f9:96:e3:8e:05:d9:86:7a:38:1a:61:1f:0c:5f:42:
                    a3:91:a0:fc:5b:e0:a6:1c:a5:db:86:74:6a:fe:57:
                    d4:4d:57:47:6e:78:96:a6:47:bc:b3:29:12:d5:e8:
                    b7:ec:02:2c:ac:81:61:a5:72:2e:12:d5:74:c0:4e:
                    2b:87:89:55:49:02:ed:8f:3c:ba:df:49:0b:e2:51:
                    2e:f4:32:9f:a7:f4:cd:93:ef:7a:9b:00:f9:b7:e3:
                    86:8b:6c:88:61:68:5c:a9:c0:9c:f9:cf:72:d1:fc:
                    62:c7:36:34:1a:b6:84:15:45:bd:7c:fe:7f:0d:bf:
                    79:82:46:fb:88:46:c7:4a:48:07:65:22:9a:e1:3d:
                    11:f8:18:14:b8:42:d0:ca:21:77:b6:e3:b3:0d:5d:
                    24:b7:cb:d3:53:42:01:bf:1f:a9:86:c3:47:21:c2:
                    dc:00:ae:7a:90:42:ee:d1:06:9b:24:c3:ce:71:76:
                    67:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:82:A2:AD:41:D9:C1:58:A8:38:C6:CC:F2:0E:B0:0F:A1:86:4F:E8
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1a:00:5e:b5:60:60:ba:88:a3:99:b9:ed:b0:86:73:64:7f:52:
         a8:6a:7d:87:48:e0:ab:cd:ce:3c:1f:6d:2c:d3:af:64:bb:24:
         00:44:f3:4a:fb:40:9f:37:8b:54:df:f8:f4:1b:ce:fa:35:e5:
         ff:a7:1c:79:df:6f:ff:1b:23:f6:41:da:68:11:fd:97:96:d4:
         ea:e7:41:99:f5:68:21:59:8b:d1:7f:7a:f4:45:88:26:70:d6:
         d0:7a:57:1c:db:9e:fb:20:27:d3:6b:b6:a4:8e:65:a1:fe:32:
         81:da:fd:b6:a2:2d:f3:41:dd:e0:52:63:d2:d9:ce:cf:16:77:
         b6:50:52:81:1b:e0:7a:af:fd:9d:b9:1b:01:1e:60:7f:1d:e1:
         88:14:b9:61:d7:4a:9f:14:10:63:b3:a4:85:54:64:b6:e0:dc:
         47:ea:75:e7:84:cc:32:dc:5b:ab:d3:67:53:b6:2d:02:fa:f8:
         74:88:be:8c:5d:fc:8a:bf:af:4a:78:57:d8:6d:5e:33:fa:f8:
         dd:c5:87:4e:fe:17:53:d5:03:6c:81:3e:4f:c7:2b:be:0f:dc:
         d1:cf:82:b6:53:da:33:63:f1:06:b6:45:77:ff:84:e3:29:ca:
         f1:a9:6a:a4:4f:54:ba:b4:82:ea:06:cc:d6:d8:3a:48:6e:83:
         07:67:1d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org