Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/323830343a336231383a383030303a3a2f33332d3333203d3e20323636313239.roa
File:                     323830343a336231383a383030303a3a2f33332d3333203d3e20323636313239.roa (raw, json)
Hash identifier:          6t1hTpMZetskNW75tzobeyn8nxjxmifXCZ1824+h63o=
Subject key identifier:   4F:BB:3D:11:F5:CB:AD:E3:5E:10:F0:5B:7F:F1:20:ED:50:B0:71:42
Certificate issuer:       /CN=806014EFB447E6CDC6DAE631F19157D7748822CD
Certificate serial:       289C87894FE686BEBE6B216D7D9B6C21AC64E542
Authority key identifier: 80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/323830343a336231383a383030303a3a2f33332d3333203d3e20323636313239.roa
Signing time:             Mon 04 Mar 2024 20:00:00 +0000
ROA not before:           Mon 04 Mar 2024 19:55:00 +0000
ROA not after:            Mon 03 Mar 2025 20:00:00 +0000
asID:                     266129
IP address blocks:        2804:3b18:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9c:87:89:4f:e6:86:be:be:6b:21:6d:7d:9b:6c:21:ac:64:e5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806014EFB447E6CDC6DAE631F19157D7748822CD
        Validity
            Not Before: Mar  4 19:55:00 2024 GMT
            Not After : Mar  3 20:00:00 2025 GMT
        Subject: CN=4FBB3D11F5CBADE35E10F05B7FF120ED50B07142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:13:a5:42:55:85:75:39:b2:62:56:79:d6:4e:
                    50:02:4f:eb:9e:c9:34:2a:21:3d:2a:94:8d:df:49:
                    11:82:e3:c3:2e:d3:18:15:d7:85:c7:43:fb:e3:b6:
                    ff:da:c7:40:d6:c6:2e:74:75:f1:95:d4:42:89:09:
                    1f:85:6a:b7:71:26:02:42:d4:6a:d3:3a:8e:61:c1:
                    af:d7:4c:ca:39:3b:b6:5d:01:82:ee:55:a9:df:fb:
                    52:54:5f:0e:10:aa:ac:f0:ed:a4:61:a3:46:ae:cf:
                    38:b8:41:c4:89:8e:08:bd:ab:af:6d:28:fe:b6:43:
                    d8:b4:f2:29:5c:e4:3a:45:35:ef:26:26:db:3c:02:
                    7b:30:ac:13:d3:91:71:3d:e9:ba:f1:f9:fa:d0:0c:
                    5f:01:7d:9d:35:cb:87:1b:28:cb:2c:bf:59:12:95:
                    9a:80:eb:19:68:31:17:d7:e6:9b:16:78:40:d8:b7:
                    a2:bd:3e:92:86:e8:de:84:eb:7b:f1:4f:8e:de:4f:
                    12:57:37:ff:0e:61:ae:5a:32:a1:69:84:5c:93:28:
                    96:b1:6e:2c:d7:cd:43:f8:ff:8a:70:2d:c4:77:25:
                    7a:96:c9:80:08:bb:64:b5:a3:28:d6:8b:11:39:3a:
                    d0:34:8b:98:c7:cc:51:c2:7f:ac:b9:3e:eb:6f:14:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BB:3D:11:F5:CB:AD:E3:5E:10:F0:5B:7F:F1:20:ED:50:B0:71:42
            X509v3 Authority Key Identifier:
                keyid:80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/806014EFB447E6CDC6DAE631F19157D7748822CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/323830343a336231383a383030303a3a2f33332d3333203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b18:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         34:55:e1:0d:2d:68:5f:1a:f3:ca:6b:7a:3e:c4:51:84:a7:cd:
         6c:98:68:2a:ff:c3:5c:9b:88:a4:44:a9:ec:c8:0e:dc:c4:c5:
         62:1c:8e:29:49:06:93:e5:25:2c:1c:54:80:16:75:91:c2:c0:
         1a:fb:7b:43:2f:96:56:8f:e9:81:de:7c:78:bf:ec:c6:23:7c:
         5d:c5:14:71:91:94:43:0e:db:75:c6:f3:3f:81:9d:2c:1e:7d:
         a2:a6:71:a4:6c:b3:19:b3:bc:ff:7c:c1:d4:05:96:5d:29:15:
         ce:42:2b:6b:0e:d2:2f:84:c9:49:1b:71:26:7e:9b:f8:0c:ec:
         78:4b:19:02:71:d1:14:70:c9:a8:3b:cf:bb:39:4c:80:1d:64:
         99:35:1b:20:1d:56:5c:fd:7d:04:69:d1:26:80:89:b7:93:3f:
         1e:9d:19:5a:d3:e6:29:5e:5a:72:2d:8b:bd:f2:53:7c:e1:0c:
         58:23:8a:37:e5:a5:2b:4f:1e:28:1c:e2:36:b8:2c:24:c2:de:
         a6:57:25:37:f4:23:16:3c:51:18:a8:2d:c1:6f:56:07:2e:1c:
         8d:bb:9e:3b:bc:86:bb:1c:3f:2c:f1:cc:28:05:81:83:2f:a9:
         1c:73:bc:58:01:13:26:8d:41:02:04:ba:c1:c6:54:42:0d:2a:
         8d:07:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org