Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/323830343a336132303a3a2f33322d3332203d3e20323636303732.roa
File:                     323830343a336132303a3a2f33322d3332203d3e20323636303732.roa (raw, json)
Hash identifier:          imfofplMBtRzHF1zoR1Z5x9mkjoRty4ourOc76MAEs8=
Subject key identifier:   CB:C9:F7:CB:8D:3E:FD:C8:26:FA:64:96:99:82:42:4A:4D:EA:03:50
Certificate issuer:       /CN=3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4
Certificate serial:       7B32576596856DCDD1C9E2E18A09081AD46493B6
Authority key identifier: 3A:5B:DF:C2:76:B5:61:E7:9F:D3:A3:8E:D1:E2:58:3C:DF:3C:5E:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/323830343a336132303a3a2f33322d3332203d3e20323636303732.roa
Signing time:             Thu 04 Apr 2024 05:31:53 +0000
ROA not before:           Thu 04 Apr 2024 05:26:53 +0000
ROA not after:            Thu 03 Apr 2025 05:31:53 +0000
asID:                     266072
IP address blocks:        2804:3a20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:32:57:65:96:85:6d:cd:d1:c9:e2:e1:8a:09:08:1a:d4:64:93:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4
        Validity
            Not Before: Apr  4 05:26:53 2024 GMT
            Not After : Apr  3 05:31:53 2025 GMT
        Subject: CN=CBC9F7CB8D3EFDC826FA64969982424A4DEA0350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fc:6b:9f:07:14:bc:15:d4:9e:69:ac:72:39:
                    99:65:f0:51:95:59:75:54:be:dc:af:80:55:37:32:
                    f1:df:e7:41:de:37:88:40:d5:4d:90:b9:de:e3:aa:
                    3e:28:19:61:87:9f:8f:c9:a0:b2:90:8a:4e:02:4d:
                    06:69:fd:1f:37:0c:4d:9c:19:66:05:c7:f6:a4:0c:
                    19:97:ff:b9:b4:34:7d:21:71:06:38:b6:d9:c1:db:
                    2b:ab:db:2e:ed:3a:bf:60:d5:7b:a4:52:db:df:9c:
                    75:00:2f:11:1f:e7:a4:f0:de:3e:d4:cb:89:2d:99:
                    2c:59:7e:1a:c8:6c:15:e5:cc:fe:bf:c3:04:c0:05:
                    48:86:df:e3:5d:f2:9c:78:d3:71:46:d5:10:57:0e:
                    63:f9:8a:62:7b:f5:98:a9:87:19:b9:87:e3:31:3c:
                    7f:19:f9:83:67:86:e6:d0:54:c0:d3:c1:5b:22:86:
                    45:a7:65:70:09:39:6d:81:37:5a:18:f7:77:90:21:
                    75:b4:78:bc:78:dc:25:1b:f6:80:e7:b2:9f:e1:00:
                    6c:fc:df:f6:37:b7:00:17:30:32:14:0d:c8:4e:0f:
                    b6:43:ef:54:b2:29:42:90:72:ad:bf:a8:eb:10:29:
                    fd:26:b5:5e:f8:c6:71:f5:a6:53:7e:22:4f:a2:20:
                    f2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C9:F7:CB:8D:3E:FD:C8:26:FA:64:96:99:82:42:4A:4D:EA:03:50
            X509v3 Authority Key Identifier:
                keyid:3A:5B:DF:C2:76:B5:61:E7:9F:D3:A3:8E:D1:E2:58:3C:DF:3C:5E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/323830343a336132303a3a2f33322d3332203d3e20323636303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:c6:8a:c5:29:f0:c4:52:b7:bb:17:87:3b:f3:51:a4:a7:b6:
         19:96:68:2f:76:2c:63:6a:20:21:fc:83:82:9c:28:f7:e6:fa:
         52:f0:6e:1d:24:42:c6:91:fe:22:6e:07:9b:fe:ea:82:b7:e9:
         ac:c3:91:0f:fb:66:d9:c4:70:6b:77:33:5d:9d:57:ce:aa:57:
         c5:2d:81:02:46:24:95:ad:e4:ab:92:16:9e:08:dc:1e:11:d3:
         39:1d:19:04:54:dd:37:2f:33:ef:aa:e1:2f:04:f6:d1:08:e2:
         e1:3a:64:a8:c7:ee:0c:b9:48:9b:90:ab:c6:e7:5c:85:eb:7c:
         a7:a9:a9:9a:5c:25:84:d9:6a:f6:4d:36:f3:09:71:b7:8a:74:
         27:ce:d4:53:56:fe:5a:8a:e0:37:d6:98:26:ba:ae:89:37:51:
         b9:68:42:20:51:af:11:49:92:cd:81:a2:33:dc:f2:b4:c5:4f:
         9f:87:cd:01:a9:75:37:d6:40:e5:11:2c:d0:ef:8a:7c:a0:54:
         6f:07:c4:6b:3d:ef:64:f8:60:27:4d:b1:91:17:9c:61:3f:d1:
         44:d6:f5:4a:f3:d0:cc:7a:cf:d2:22:b5:b1:3e:db:fc:08:d5:
         cb:7a:81:f5:97:12:ce:91:dd:6c:39:84:5b:be:b5:79:b1:53:
         cd:65:b0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org