Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666666663a3a2f34382d3438203d3e20323632373235.roa
File:                     323830343a333336303a666666663a3a2f34382d3438203d3e20323632373235.roa (raw, json)
Hash identifier:          kvdpqGeUDhDiWeGtHo+Z/2RV9QVFX0CmDY4d3Ezuzl0=
Subject key identifier:   82:AD:20:97:35:BB:A7:B4:22:BD:8B:E5:D2:D2:CA:3A:3C:FE:7A:55
Certificate issuer:       /CN=803C333301EC067F38343D2375CBA64A4C29FBB7
Certificate serial:       16D835FB3F204E36F821C65273020E5F39412A00
Authority key identifier: 80:3C:33:33:01:EC:06:7F:38:34:3D:23:75:CB:A6:4A:4C:29:FB:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/803C333301EC067F38343D2375CBA64A4C29FBB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666666663a3a2f34382d3438203d3e20323632373235.roa
Signing time:             Sat 23 Sep 2023 22:43:52 +0000
ROA not before:           Sat 23 Sep 2023 22:38:52 +0000
ROA not after:            Sat 21 Sep 2024 22:43:52 +0000
asID:                     262725
IP address blocks:        2804:3360:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d8:35:fb:3f:20:4e:36:f8:21:c6:52:73:02:0e:5f:39:41:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803C333301EC067F38343D2375CBA64A4C29FBB7
        Validity
            Not Before: Sep 23 22:38:52 2023 GMT
            Not After : Sep 21 22:43:52 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:3c:03:38:43:d7:78:53:83:e5:7b:5d:d6:
                    c7:8f:d1:0a:e7:3a:01:73:fb:9a:f0:b5:e0:54:8d:
                    8c:21:33:22:bc:7e:5f:96:13:05:cd:f8:3d:a2:7d:
                    e2:85:de:9a:30:27:03:28:dc:43:7a:38:2e:4d:c7:
                    10:08:8f:73:02:ee:9f:fd:ad:8f:6a:90:cc:90:f2:
                    fc:8d:38:13:48:eb:4e:c8:7e:7a:41:fb:c1:32:e8:
                    a9:d4:49:f0:cd:39:8f:bb:c1:05:8e:31:a3:6a:33:
                    87:e2:fe:3d:1d:e8:df:4c:77:07:61:38:dd:e8:59:
                    5b:c4:44:4d:34:8e:04:2b:8c:33:c6:b8:9a:66:35:
                    f8:f8:c8:78:b0:bb:e8:98:3d:0c:94:b9:3f:34:22:
                    33:27:36:08:08:1d:59:5f:5b:5e:d0:d6:22:68:d6:
                    84:6a:a6:6d:e1:05:71:ef:8a:0b:e4:13:c2:af:4a:
                    62:9f:f0:03:5c:b5:a3:06:10:6e:55:83:25:42:aa:
                    63:cd:e4:37:87:fd:b2:ab:7a:f5:6b:84:af:c7:91:
                    08:7c:9c:9a:12:11:07:4b:93:43:e7:63:68:0a:03:
                    0e:00:f0:82:ff:68:dd:e1:42:4a:4b:13:44:a5:4a:
                    4f:11:6a:2d:9c:80:8b:84:e7:13:fb:0b:c1:28:a7:
                    1f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AD:20:97:35:BB:A7:B4:22:BD:8B:E5:D2:D2:CA:3A:3C:FE:7A:55
            X509v3 Authority Key Identifier:
                keyid:80:3C:33:33:01:EC:06:7F:38:34:3D:23:75:CB:A6:4A:4C:29:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/803C333301EC067F38343D2375CBA64A4C29FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/803C333301EC067F38343D2375CBA64A4C29FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666666663a3a2f34382d3438203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:07:70:a0:e8:c1:f1:61:b0:97:90:40:bd:3b:b9:4b:dc:43:
         33:f1:3e:48:3b:ba:44:83:5d:04:5b:82:a0:3e:81:85:e0:98:
         c1:37:02:47:9a:0a:22:19:a9:b7:22:4c:af:fe:a7:0b:15:12:
         15:4b:bf:4c:c5:85:a3:fa:f8:58:40:3a:35:f0:79:81:e4:f8:
         fd:30:3e:55:f8:ae:26:35:3c:5b:a8:77:e5:d2:70:ff:60:07:
         8d:49:11:8e:b3:20:e2:5e:3d:99:c2:77:83:1c:a6:84:04:3d:
         60:16:6d:67:35:a4:cb:a6:b3:96:61:d6:1d:b9:42:97:96:7a:
         8e:f3:0b:cc:c1:d9:3f:71:22:25:77:01:60:97:34:66:bd:f8:
         f4:42:f9:72:8c:4e:30:f3:03:cd:dc:01:a0:a9:fa:70:ed:8d:
         cd:0a:70:93:a7:92:98:2b:1c:03:c4:26:c4:c7:b0:e0:e0:9d:
         a2:f5:5b:37:2d:ad:28:c1:20:24:f2:ce:6a:a1:10:09:48:1a:
         4e:ab:89:6b:e6:e9:67:22:4a:df:35:e4:b9:59:9b:6c:09:eb:
         df:e6:bf:24:cf:e5:21:3c:74:be:d0:2d:db:e5:73:d7:46:0f:
         cc:53:c2:80:91:6c:64:00:61:bb:18:a3:bf:28:8f:a1:c3:02:
         cb:30:06:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org