Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/323830343a336231383a3a2f33342d3334203d3e20323636313239.roa
File:                     323830343a336231383a3a2f33342d3334203d3e20323636313239.roa (raw, json)
Hash identifier:          Zn7vJHVRZRaVMGuUkWyUsXu+hqFnHdEbVpwm7mVSI3Q=
Subject key identifier:   05:65:BD:EB:9B:9F:11:65:F1:BF:9F:33:13:F1:0D:7B:75:3F:44:53
Certificate issuer:       /CN=806014EFB447E6CDC6DAE631F19157D7748822CD
Certificate serial:       555A328067C883BD8514B566E25330473F2B592C
Authority key identifier: 80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/323830343a336231383a3a2f33342d3334203d3e20323636313239.roa
Signing time:             Mon 04 Mar 2024 20:00:00 +0000
ROA not before:           Mon 04 Mar 2024 19:55:00 +0000
ROA not after:            Mon 03 Mar 2025 20:00:00 +0000
asID:                     266129
IP address blocks:        2804:3b18::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5a:32:80:67:c8:83:bd:85:14:b5:66:e2:53:30:47:3f:2b:59:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806014EFB447E6CDC6DAE631F19157D7748822CD
        Validity
            Not Before: Mar  4 19:55:00 2024 GMT
            Not After : Mar  3 20:00:00 2025 GMT
        Subject: CN=0565BDEB9B9F1165F1BF9F3313F10D7B753F4453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:73:99:36:3b:2c:54:5f:f4:57:ce:a8:16:81:
                    d1:e5:36:59:61:e3:25:01:95:4d:f8:44:42:1e:61:
                    9c:b2:fb:fa:6b:f0:25:00:94:9e:e5:e4:60:23:2b:
                    d4:59:0c:6d:6d:e8:ab:17:6c:ab:b1:d8:96:41:47:
                    3b:18:fc:35:41:12:8d:89:ee:10:0e:51:8e:f3:d0:
                    ee:d7:28:65:2e:04:84:0f:5d:71:0b:cc:79:e1:52:
                    e0:da:a6:e2:7f:6c:4c:0b:80:97:cb:74:9d:86:df:
                    59:cb:40:ee:1a:75:ff:08:5b:82:2e:8d:2d:0e:27:
                    c9:9d:14:78:11:71:8b:a4:7a:59:1c:73:49:e6:e4:
                    74:af:b0:82:bb:74:21:0a:40:6f:94:e9:2e:b8:db:
                    a9:5f:ed:60:50:28:f7:5c:89:65:66:25:58:63:70:
                    be:7d:55:38:00:85:d2:3d:a5:4b:81:ab:95:34:f9:
                    6c:c0:b1:f5:bc:c7:bc:e6:8a:75:0c:37:94:5a:64:
                    5e:f7:82:47:28:4c:83:d5:77:3f:bd:63:ae:97:3c:
                    cb:e4:77:5a:62:25:6e:db:04:1e:3f:12:ff:62:c4:
                    18:2a:0d:56:e2:af:3c:f4:90:fb:14:ed:0d:cc:9f:
                    8a:ef:02:bd:d8:ad:55:e9:e6:f4:be:df:77:00:b7:
                    65:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:65:BD:EB:9B:9F:11:65:F1:BF:9F:33:13:F1:0D:7B:75:3F:44:53
            X509v3 Authority Key Identifier:
                keyid:80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/806014EFB447E6CDC6DAE631F19157D7748822CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/323830343a336231383a3a2f33342d3334203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b18::/34

    Signature Algorithm: sha256WithRSAEncryption
         a6:83:0d:9e:52:45:d5:b1:48:96:12:ba:54:1d:2d:db:27:75:
         e1:21:f5:37:3b:62:1d:16:dd:59:d1:fe:48:2f:e1:94:8d:aa:
         1c:51:8f:c6:d3:c7:8e:cd:6e:53:16:f0:e7:7c:c3:93:0e:c5:
         20:81:07:d2:dc:df:02:89:cc:d3:30:0b:6e:aa:b8:1b:37:62:
         85:81:3e:16:6c:1b:6a:c9:48:0b:7b:5c:3c:82:dd:fa:31:85:
         f9:59:08:dc:42:8b:1b:47:c5:fb:48:ff:2f:a3:2d:63:4f:36:
         c7:93:ce:f3:74:3e:3d:3d:46:6f:54:ba:cb:e0:11:75:3d:04:
         aa:78:ba:36:bf:60:d8:e4:10:3e:39:09:61:d0:22:4e:dd:04:
         d8:f8:8c:8e:3c:7f:ef:04:3c:1b:12:c8:68:0a:74:9d:ba:28:
         b8:7b:03:62:26:3b:4b:bf:fc:08:5f:20:9a:89:34:bb:a1:4d:
         a4:2d:f8:0f:e0:a2:43:6e:96:7f:fc:95:80:5a:8a:43:99:45:
         93:f7:af:06:82:e6:d4:01:a1:82:1c:13:ef:e8:1e:73:29:53:
         3d:06:e0:0f:79:13:5a:3c:8b:b4:cd:70:87:31:c8:ff:75:0c:
         3c:b8:27:f5:60:c5:7e:b5:d3:ce:66:8f:56:d5:94:e0:57:c8:
         c2:fc:d3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org