Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/323830343a323263303a3a2f33322d3336203d3e20323634313230.roa
File:                     323830343a323263303a3a2f33322d3336203d3e20323634313230.roa (raw, json)
Hash identifier:          wpKbDTRa8Xj8dB1dIF1ej7660lXYEsko95J1yp7my1s=
Subject key identifier:   D0:C3:A1:EC:49:22:8E:5C:97:92:89:97:A1:AE:1D:62:D9:1D:0C:43
Certificate issuer:       /CN=3295B9AB4DA3695748C7EEA28733CEF3C4265285
Certificate serial:       6987F9B04EB7203ED0EAE1E2414E71A83591693C
Authority key identifier: 32:95:B9:AB:4D:A3:69:57:48:C7:EE:A2:87:33:CE:F3:C4:26:52:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295B9AB4DA3695748C7EEA28733CEF3C4265285.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/323830343a323263303a3a2f33322d3336203d3e20323634313230.roa
Signing time:             Fri 23 Feb 2024 12:18:14 +0000
ROA not before:           Fri 23 Feb 2024 12:13:14 +0000
ROA not after:            Fri 21 Feb 2025 12:18:14 +0000
asID:                     264120
IP address blocks:        2804:22c0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:87:f9:b0:4e:b7:20:3e:d0:ea:e1:e2:41:4e:71:a8:35:91:69:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3295B9AB4DA3695748C7EEA28733CEF3C4265285
        Validity
            Not Before: Feb 23 12:13:14 2024 GMT
            Not After : Feb 21 12:18:14 2025 GMT
        Subject: CN=D0C3A1EC49228E5C97928997A1AE1D62D91D0C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:f7:2d:bf:51:08:a4:35:28:7f:fb:3f:b1:
                    c5:13:fc:0b:92:bd:74:07:92:5e:d4:eb:8e:86:4b:
                    53:08:4e:4c:8a:22:25:6f:bb:47:13:b1:a8:5f:83:
                    56:d4:ee:fd:2c:e4:b1:99:ff:1f:a0:21:18:fa:7b:
                    36:e5:db:82:30:1e:ee:ea:33:bc:a3:12:79:56:27:
                    40:68:c1:c6:63:5e:f1:a9:20:a6:30:17:d4:93:10:
                    c6:6a:16:2c:79:9d:0c:2e:e8:28:99:cd:28:45:2b:
                    33:e0:39:cd:e9:47:a3:cf:70:d5:7b:90:24:74:c8:
                    02:f3:31:c4:2c:27:c7:f1:0e:05:46:65:21:9f:45:
                    ed:7f:3c:40:c5:99:c9:95:57:a8:62:f8:68:e8:6f:
                    28:35:0c:57:c2:7e:80:fd:40:0d:48:3f:5c:f0:cb:
                    d9:a4:21:d8:1f:33:e7:2f:15:78:5a:27:8f:15:ce:
                    0c:2b:90:12:8d:d1:8b:80:b7:80:f6:55:6f:44:3a:
                    17:7e:91:66:66:ac:04:a5:f5:fa:b2:74:e5:f9:d5:
                    7b:f3:c9:4a:85:a0:6e:8c:34:2b:a5:9f:2e:ec:ae:
                    a3:58:6b:d5:8f:75:35:2c:66:b2:16:a7:9c:a0:8e:
                    c9:5b:0c:21:af:28:f7:94:47:d3:48:c8:39:02:bc:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C3:A1:EC:49:22:8E:5C:97:92:89:97:A1:AE:1D:62:D9:1D:0C:43
            X509v3 Authority Key Identifier:
                keyid:32:95:B9:AB:4D:A3:69:57:48:C7:EE:A2:87:33:CE:F3:C4:26:52:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3295B9AB4DA3695748C7EEA28733CEF3C4265285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295B9AB4DA3695748C7EEA28733CEF3C4265285.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/323830343a323263303a3a2f33322d3336203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:fa:2e:90:45:f9:de:b5:f7:b8:eb:a6:36:d4:a9:ab:27:61:
         02:ee:42:f6:ca:02:13:dc:50:01:0d:2b:4b:99:2a:5a:43:aa:
         1a:54:68:22:d0:a4:75:40:01:5a:b7:f8:d5:d6:49:6e:f6:b2:
         d9:06:2f:2b:79:43:42:02:0f:b7:36:13:c4:2d:dd:13:b9:4f:
         04:30:24:fc:56:85:ba:60:a0:ae:59:fe:be:93:88:54:24:b7:
         c1:e8:8d:1f:b2:02:9f:05:66:c7:4a:d5:10:d5:93:6b:f2:6f:
         b7:9d:db:c4:72:e8:30:d0:0c:4c:d6:4e:33:b3:8b:8f:d6:82:
         0e:73:d1:2a:29:dd:29:cf:f8:ff:b1:10:9b:89:f8:a7:91:c8:
         0e:e6:46:4d:5c:fb:a6:60:da:8e:b3:10:5d:64:95:10:d0:36:
         b9:f3:ec:77:d8:f7:70:55:5f:8b:b5:f7:06:4d:68:02:e0:9a:
         04:4e:ec:fc:96:5c:9c:b6:64:72:9e:05:15:3c:1a:63:0a:0d:
         99:68:2d:f4:51:de:b8:85:9b:e0:7b:24:95:b0:2f:43:73:ed:
         86:33:db:39:7f:ca:37:2b:9f:f6:47:3d:72:ce:0a:68:a3:f5:
         c3:27:37:a7:95:89:78:f1:37:d1:e8:81:87:26:ff:3c:0c:3d:
         3b:2b:20:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org