Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/323830343a336231383a3a2f33332d3333203d3e20323636313239.roa
File:                     323830343a336231383a3a2f33332d3333203d3e20323636313239.roa (raw, json)
Hash identifier:          pRiBAMZ2ix8n90P+RRyYPTZ3AbIkj+OlI/VMtDnD/7s=
Subject key identifier:   07:75:27:FA:C6:F9:A1:D5:46:DC:5E:C2:31:2C:68:81:56:CC:DC:A6
Certificate issuer:       /CN=806014EFB447E6CDC6DAE631F19157D7748822CD
Certificate serial:       1F85DE64173F75F5121DEE38DD5173B34CBD5279
Authority key identifier: 80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/323830343a336231383a3a2f33332d3333203d3e20323636313239.roa
Signing time:             Mon 04 Mar 2024 19:00:00 +0000
ROA not before:           Mon 04 Mar 2024 18:55:00 +0000
ROA not after:            Mon 03 Mar 2025 19:00:00 +0000
asID:                     266129
IP address blocks:        2804:3b18::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:85:de:64:17:3f:75:f5:12:1d:ee:38:dd:51:73:b3:4c:bd:52:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806014EFB447E6CDC6DAE631F19157D7748822CD
        Validity
            Not Before: Mar  4 18:55:00 2024 GMT
            Not After : Mar  3 19:00:00 2025 GMT
        Subject: CN=077527FAC6F9A1D546DC5EC2312C688156CCDCA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:4d:76:dc:b1:8f:5e:fe:44:cf:23:47:0e:
                    44:6b:e2:f2:c3:84:4d:d0:43:0e:e3:08:8d:2c:6a:
                    af:ba:1d:d7:c7:c0:f9:94:b6:8c:27:25:d0:98:13:
                    8d:ab:5f:e1:f5:7a:7b:b1:82:c0:64:a8:d5:ba:e0:
                    92:02:c9:9a:b7:bb:63:60:c5:63:f6:2a:fb:f6:45:
                    e7:a5:d3:6e:2c:96:48:a8:75:90:8e:c2:17:80:f1:
                    ac:93:99:d6:f6:30:ac:fa:64:97:28:43:42:b8:c8:
                    7c:a8:d7:a0:1b:70:1d:03:3f:6d:18:ca:5a:30:b3:
                    d7:8b:74:b7:b7:b6:e8:cb:68:eb:47:4c:61:fb:a6:
                    25:70:25:84:aa:3e:26:44:a0:f1:0e:1a:97:69:c0:
                    19:5e:44:4e:49:cb:45:d9:d3:9c:90:b3:a1:00:91:
                    c2:5f:34:52:00:7f:f3:63:4d:d1:32:6a:15:32:44:
                    48:e6:a6:f9:32:68:b0:9a:0f:0d:ea:c0:b6:29:6d:
                    47:af:e7:a1:0f:e1:11:6e:67:45:c1:a5:65:74:69:
                    54:a1:44:da:51:31:0e:ca:93:b2:17:2b:10:63:dd:
                    fd:ce:2e:2b:45:3c:e4:67:3c:81:e8:ad:01:f0:50:
                    17:73:0e:7d:21:cc:e5:0c:b6:e2:b3:03:11:a6:29:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:75:27:FA:C6:F9:A1:D5:46:DC:5E:C2:31:2C:68:81:56:CC:DC:A6
            X509v3 Authority Key Identifier:
                keyid:80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/806014EFB447E6CDC6DAE631F19157D7748822CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/323830343a336231383a3a2f33332d3333203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b18::/33

    Signature Algorithm: sha256WithRSAEncryption
         06:a0:45:fe:ba:59:fe:af:de:02:40:73:1b:d5:92:8d:ea:5b:
         a6:f8:42:8f:fd:d5:ab:7c:55:00:c2:d6:bf:ea:fa:2f:67:58:
         dd:f2:51:08:40:12:29:a4:aa:3f:a0:e1:95:3b:dd:8a:8e:9d:
         0e:b7:1c:bc:72:c1:38:76:5a:dd:ab:af:18:fe:62:4b:b0:da:
         2c:77:35:c2:52:85:de:98:04:0f:fc:91:06:63:53:7c:cd:6a:
         90:39:50:82:e4:2f:ac:c7:97:dd:a6:7b:54:28:35:79:75:6e:
         7a:9f:bb:57:68:ce:3a:43:d5:5a:17:20:89:b6:b9:03:5f:ef:
         cb:df:65:29:d5:5b:f0:fd:44:2c:a5:7a:a6:91:a0:66:cc:e1:
         6c:4f:e5:84:2f:0f:12:49:5e:f1:e2:a0:44:48:4b:ba:a1:61:
         0a:c3:3f:a5:72:eb:8c:d3:e6:b0:58:fb:eb:33:e3:37:b2:da:
         59:6e:f2:35:10:ec:55:bf:cb:cc:43:e4:d3:72:5f:1e:8f:c4:
         67:f9:9c:73:12:3d:09:58:16:0f:0a:b1:d0:fd:80:77:c5:d0:
         99:65:3e:e4:48:60:70:2f:41:47:b8:41:5e:6d:c9:e1:91:82:
         e6:ac:c4:e4:c8:c5:ab:b3:ea:4f:b1:80:af:6f:42:1c:5e:58:
         80:b1:c2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org