Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/323830343a333364383a3a2f33322d3332203d3e20323635343230.roa
File:                     323830343a333364383a3a2f33322d3332203d3e20323635343230.roa (raw, json)
Hash identifier:          65SHzrIsWR8W/Yo3KZ0weAnbPL1BVVeZUlE62pKfOYs=
Subject key identifier:   D2:FD:EB:AA:52:A2:8B:B3:62:05:0E:22:05:AE:AC:AD:EA:A7:94:F3
Certificate issuer:       /CN=305EE7370CB5E56FF8D0E01B37E786125925B0C8
Certificate serial:       2FB3F3E6B05ED57FD550979069A2D707FC7D6533
Authority key identifier: 30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/323830343a333364383a3a2f33322d3332203d3e20323635343230.roa
Signing time:             Thu 04 Apr 2024 13:06:21 +0000
ROA not before:           Thu 04 Apr 2024 13:01:21 +0000
ROA not after:            Thu 03 Apr 2025 13:06:21 +0000
asID:                     265420
IP address blocks:        2804:33d8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b3:f3:e6:b0:5e:d5:7f:d5:50:97:90:69:a2:d7:07:fc:7d:65:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305EE7370CB5E56FF8D0E01B37E786125925B0C8
        Validity
            Not Before: Apr  4 13:01:21 2024 GMT
            Not After : Apr  3 13:06:21 2025 GMT
        Subject: CN=D2FDEBAA52A28BB362050E2205AEACADEAA794F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:1d:9f:23:7e:90:26:a8:19:ec:0a:8f:7f:
                    e2:63:1f:9d:a3:cf:25:df:e5:f5:03:3e:64:a4:3a:
                    4f:07:fc:16:00:4d:22:d1:2f:d5:04:08:f1:e2:e9:
                    bf:dc:68:2f:c5:15:f9:a2:f5:34:94:05:86:01:20:
                    ee:0c:a5:35:3c:d5:30:eb:53:e6:80:db:14:92:17:
                    b2:9a:65:49:25:00:4e:a6:d3:ff:f5:1e:02:42:ab:
                    df:5f:6e:4c:96:9c:cd:ce:16:f5:34:bd:a2:26:2a:
                    b0:e3:49:d2:9b:2f:1e:70:d7:84:2b:7f:32:a7:2f:
                    c2:f5:64:74:8a:67:74:32:b9:12:bb:ca:c3:1c:4d:
                    5f:d3:a6:70:4c:37:be:cd:a1:f4:77:1d:0c:2b:fc:
                    5c:fb:b5:4c:1a:db:8f:54:64:f5:41:e6:d7:ed:7c:
                    ee:c4:d9:08:2f:53:1d:ca:e7:68:77:fa:a9:68:45:
                    07:02:74:be:a3:7b:c3:c2:47:8a:10:b5:14:80:76:
                    ca:59:70:0a:ee:50:b9:b0:90:88:c7:fd:3c:6c:bf:
                    87:8c:ff:6e:33:5f:18:5e:1d:92:3a:b6:ba:e9:83:
                    c0:9f:44:fb:ff:60:57:7a:62:22:f9:5c:ba:3c:a0:
                    b8:f1:40:37:93:72:d2:3d:69:9c:85:58:ff:52:4e:
                    23:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FD:EB:AA:52:A2:8B:B3:62:05:0E:22:05:AE:AC:AD:EA:A7:94:F3
            X509v3 Authority Key Identifier:
                keyid:30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/323830343a333364383a3a2f33322d3332203d3e20323635343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:cc:36:2a:90:55:74:a5:20:f8:42:87:27:57:34:cb:3a:71:
         65:d6:4f:eb:f6:ac:80:0f:2f:46:2b:2f:1b:01:52:64:21:d2:
         46:e3:64:c6:be:9a:6d:f3:c9:fa:4e:ac:82:14:a4:ea:2a:dc:
         e1:9d:3f:20:63:47:f5:ab:ca:2f:54:29:00:ff:25:3c:03:8d:
         ae:f2:42:96:58:26:3a:94:02:0e:80:0e:41:03:49:a5:ba:be:
         b6:28:d9:b8:d0:09:37:57:e3:5b:78:ea:2f:5c:61:a9:2b:de:
         ca:bb:29:a0:e6:d3:ff:08:a2:ee:59:79:43:9f:90:df:da:d5:
         73:39:fa:3c:7a:7d:ad:65:e5:7c:9a:d2:ba:8e:f8:d7:d2:d3:
         ee:9f:0e:eb:36:63:66:26:75:64:36:da:41:3e:75:3d:69:95:
         ad:23:5f:e1:b1:33:cf:3e:17:7e:ca:6d:d2:02:51:0c:14:03:
         48:85:54:4a:ef:d3:a0:8f:38:d4:8f:51:2b:ad:37:2f:2f:20:
         f1:5b:c1:85:c9:b5:5e:3c:52:92:84:1f:c3:46:61:b3:3b:bd:
         79:1a:33:a7:5f:ba:c8:82:56:4e:9f:ee:53:4f:76:db:9c:e5:
         29:29:1b:53:77:28:6c:74:f6:e0:d2:af:0d:09:f7:f0:96:c5:
         26:91:bf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org