Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a323030303a3a2f33352d3335203d3e20323635333131.roa
File:                     323830343a326465383a323030303a3a2f33352d3335203d3e20323635333131.roa (raw, json)
Hash identifier:          WnGwV/Kjzw5A5O+ryFtaNIoiSQHiN7SfoMM3x1hNrqo=
Subject key identifier:   CA:28:D6:9C:43:A3:C2:58:74:69:A0:F5:48:E1:22:BD:D3:30:85:37
Certificate issuer:       /CN=14DAB675B77AC194533C86DBFBAF31C52FE203FB
Certificate serial:       3AACF63E6320588B1576B0A513B81778ABD7913B
Authority key identifier: 14:DA:B6:75:B7:7A:C1:94:53:3C:86:DB:FB:AF:31:C5:2F:E2:03:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a323030303a3a2f33352d3335203d3e20323635333131.roa
Signing time:             Wed 05 Jul 2023 14:23:26 +0000
ROA not before:           Wed 05 Jul 2023 14:18:26 +0000
ROA not after:            Wed 03 Jul 2024 14:23:26 +0000
asID:                     265311
IP address blocks:        2804:2de8:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ac:f6:3e:63:20:58:8b:15:76:b0:a5:13:b8:17:78:ab:d7:91:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DAB675B77AC194533C86DBFBAF31C52FE203FB
        Validity
            Not Before: Jul  5 14:18:26 2023 GMT
            Not After : Jul  3 14:23:26 2024 GMT
        Subject: CN=CA28D69C43A3C2587469A0F548E122BDD3308537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:b8:08:c8:a6:33:60:d0:6d:01:89:7e:22:
                    42:7f:ac:ad:de:f1:95:8f:bc:da:9b:0d:71:8a:6b:
                    0e:36:92:b5:e3:16:8c:3c:1c:d2:70:37:13:64:b8:
                    dc:3e:c9:0a:46:03:3f:f0:98:80:ea:3f:b3:26:fb:
                    de:8f:49:e2:b7:18:ea:5e:86:0b:b1:82:4a:1a:fd:
                    f3:39:b1:79:92:7a:41:bf:f1:83:19:a6:43:ac:f6:
                    52:8d:64:87:bb:24:54:2c:ec:c5:21:7b:98:a9:f7:
                    16:bb:fd:19:42:77:48:01:15:8d:02:b8:24:45:23:
                    96:bc:72:f7:4b:66:36:b9:b0:2c:65:56:43:ad:c1:
                    0f:3c:55:bf:38:9b:53:63:bb:83:34:e7:11:8e:a4:
                    fc:64:e3:d6:e8:23:7a:ce:af:21:4a:00:8e:69:04:
                    c6:b0:aa:d9:40:3f:6c:22:e8:48:40:ba:ec:f2:dc:
                    e6:d9:5c:1d:db:bf:96:04:af:23:17:be:c7:48:c5:
                    ac:a2:e5:a9:a6:3d:7c:96:a2:10:4c:30:c5:ca:82:
                    8a:8c:2b:9e:95:c6:37:30:5a:15:fe:8b:7f:78:57:
                    8f:fd:0e:fc:92:be:d7:1a:85:d5:88:07:ed:7d:ab:
                    2d:37:1c:f2:96:5e:9b:5a:c1:ff:f4:6e:eb:05:c9:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:28:D6:9C:43:A3:C2:58:74:69:A0:F5:48:E1:22:BD:D3:30:85:37
            X509v3 Authority Key Identifier:
                keyid:14:DA:B6:75:B7:7A:C1:94:53:3C:86:DB:FB:AF:31:C5:2F:E2:03:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a323030303a3a2f33352d3335203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         37:1e:02:ca:dc:4d:31:d3:1d:b2:22:ce:68:5f:68:91:f4:ff:
         a7:b0:7a:e1:af:57:2b:97:c1:1c:ad:1d:e3:45:92:a5:92:17:
         a7:a9:1a:c7:04:1a:05:9e:7a:53:12:57:72:11:c7:f0:95:a9:
         02:9e:e6:ec:69:8e:dd:9e:c6:21:e2:bb:56:e2:65:36:9f:d7:
         e7:b4:98:4b:43:bc:9a:59:2c:26:6e:75:58:7b:d3:a0:3b:ec:
         7c:b9:d6:7b:f8:b1:6d:b3:21:b1:b9:b8:08:76:4e:60:e9:a0:
         24:01:c4:1e:f2:ff:95:e8:42:43:76:df:53:8f:b0:ce:0b:46:
         c3:3c:57:d5:1b:c4:e4:aa:9f:9f:04:f0:27:a4:41:c8:a2:7d:
         1a:89:54:50:57:4b:f5:bc:c8:8b:e5:fc:75:a4:06:20:6b:4e:
         9a:1a:80:58:27:4f:23:7c:7f:52:f1:b7:d4:da:32:0a:4b:92:
         13:fd:73:3e:b2:13:e2:8f:2a:81:d6:fa:ae:2d:9e:9f:31:90:
         76:0b:7e:5e:67:f1:9b:ab:2f:c5:26:db:63:07:f3:c2:ca:ff:
         96:2f:70:8b:6d:9b:04:c8:e5:2b:23:c0:a5:45:e5:12:2b:bf:
         c2:53:41:03:b0:22:1b:a2:d3:df:c7:99:9a:79:ab:f3:05:a4:
         de:00:28:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org