Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa
File:                     323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa (raw, json)
Hash identifier:          tmwweGr4s2fNSDPJWhveUfOCDGEB19d6pscI3rx2JpA=
Subject key identifier:   9D:D3:D1:1C:06:4C:6C:33:09:23:1A:B7:91:C9:B2:15:AC:4B:8B:E8
Certificate issuer:       /CN=033A18EDCCDDC601AF080AF01923CF610C9004AA
Certificate serial:       1BF2C6C42E711B54FECADD82D2E845AC8026B63D
Authority key identifier: 03:3A:18:ED:CC:DD:C6:01:AF:08:0A:F0:19:23:CF:61:0C:90:04:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa
Signing time:             Fri 19 Jan 2024 17:00:00 +0000
ROA not before:           Fri 19 Jan 2024 16:55:00 +0000
ROA not after:            Fri 17 Jan 2025 17:00:00 +0000
asID:                     61779
IP address blocks:        2801:80:ae0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f2:c6:c4:2e:71:1b:54:fe:ca:dd:82:d2:e8:45:ac:80:26:b6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=033A18EDCCDDC601AF080AF01923CF610C9004AA
        Validity
            Not Before: Jan 19 16:55:00 2024 GMT
            Not After : Jan 17 17:00:00 2025 GMT
        Subject: CN=9DD3D11C064C6C3309231AB791C9B215AC4B8BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:39:06:2c:e4:a0:25:15:18:d5:98:da:d1:
                    f9:0d:3e:0c:db:2d:ac:25:22:12:e1:4c:ca:5b:1f:
                    ba:8d:1c:31:03:3e:2e:3d:e9:17:fe:15:ad:0d:2e:
                    25:aa:48:25:6a:66:71:c9:0c:57:3d:d4:54:d9:08:
                    cc:7c:ce:b0:27:f1:75:60:14:ae:04:0e:bd:de:8a:
                    d6:eb:db:dc:30:c0:db:c5:6a:14:60:af:c7:2d:ff:
                    fc:cf:7e:42:05:20:30:37:f5:59:e6:a0:f9:8a:fe:
                    67:5d:a8:98:dc:57:88:d9:6b:1e:01:c7:5e:89:02:
                    71:04:63:c3:19:d6:1c:49:f5:6e:57:37:0f:7d:08:
                    6b:d5:b8:7a:6e:ab:c2:e9:3b:f1:8d:38:59:dc:c3:
                    aa:36:f3:19:3c:4c:e8:35:8d:dc:6c:3a:6a:b7:03:
                    6d:e8:1c:10:9b:0f:cf:3d:ca:61:54:f2:8b:8f:fb:
                    88:37:40:e0:f9:ef:6b:99:86:c0:d2:8d:32:23:78:
                    67:7f:89:8c:c2:29:32:0f:47:f4:76:f5:56:f2:f4:
                    73:b2:36:76:61:41:17:32:03:fe:12:f4:56:93:b4:
                    12:93:a3:f0:c2:04:6e:b3:cb:ad:fc:00:e0:3b:15:
                    a3:01:df:d0:62:8a:1a:78:66:a7:80:13:89:9f:0c:
                    a5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D3:D1:1C:06:4C:6C:33:09:23:1A:B7:91:C9:B2:15:AC:4B:8B:E8
            X509v3 Authority Key Identifier:
                keyid:03:3A:18:ED:CC:DD:C6:01:AF:08:0A:F0:19:23:CF:61:0C:90:04:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:ae0::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:77:51:21:83:de:50:e6:a5:13:fb:3c:53:ca:db:25:0a:
         a3:c5:de:62:39:f0:5d:bc:9a:be:d5:78:76:38:80:75:02:7e:
         61:47:a8:2c:53:5e:79:51:6c:b7:3a:b0:21:34:47:0e:00:ac:
         00:7d:ae:54:6d:be:aa:b9:9c:e5:db:df:c2:9f:18:70:1c:74:
         8f:df:c5:38:e0:65:8d:24:99:2b:56:28:eb:51:e0:52:ff:b5:
         be:91:55:c9:5d:86:0f:7d:cc:ec:2f:c6:e0:4b:fc:8c:b3:0a:
         da:16:30:db:32:a9:54:d7:57:ae:e8:2f:94:39:cb:bb:b4:b4:
         2f:bb:ed:44:f5:dc:0f:c9:68:1b:02:a2:45:c6:4e:f3:70:68:
         2b:d3:eb:24:0c:3c:c2:44:dc:1a:e0:bf:6b:cd:8a:b4:c5:4b:
         f8:7b:31:dc:79:61:1f:bf:0b:7e:94:bb:ca:15:47:8c:45:8d:
         e5:02:7d:55:40:61:16:8a:3e:77:04:66:6b:c0:3e:07:6c:07:
         f5:a7:fb:da:fd:74:de:81:05:f1:02:25:52:09:2a:37:bc:2e:
         87:36:da:19:7b:1e:b1:5d:7e:ce:21:67:ee:24:96:06:02:c7:
         53:15:d6:fe:f9:90:6a:35:e8:a0:4b:d4:09:94:65:0d:d5:87:
         7e:db:cf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org