Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3g6jUsvMjdgHULGp5Ydie7oUZ9AKXTgtaHtv5nGUrJfU/0/323830343a343164383a3a2f33322d3336203d3e20323637343630.roa
File:                     323830343a343164383a3a2f33322d3336203d3e20323637343630.roa (raw, json)
Hash identifier:          fGUfZveFM6jx0XYkNtvUhQKo+IQ0DaDleco3DzqMyhI=
Subject key identifier:   85:3C:16:C2:EE:37:58:4C:B1:BF:80:FB:AB:7C:7A:7B:B4:C5:29:6F
Certificate issuer:       /CN=4327A266F8D14C084040F9C302A4B648E5FC1857
Certificate serial:       4A0077B841D23B7CE011DF5395D8BC080C01D680
Authority key identifier: 43:27:A2:66:F8:D1:4C:08:40:40:F9:C3:02:A4:B6:48:E5:FC:18:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4327A266F8D14C084040F9C302A4B648E5FC1857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3g6jUsvMjdgHULGp5Ydie7oUZ9AKXTgtaHtv5nGUrJfU/0/323830343a343164383a3a2f33322d3336203d3e20323637343630.roa
Signing time:             Tue 16 May 2023 14:00:00 +0000
ROA not before:           Tue 16 May 2023 13:55:00 +0000
ROA not after:            Tue 14 May 2024 14:00:00 +0000
asID:                     267460
IP address blocks:        2804:41d8::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:00:77:b8:41:d2:3b:7c:e0:11:df:53:95:d8:bc:08:0c:01:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4327A266F8D14C084040F9C302A4B648E5FC1857
        Validity
            Not Before: May 16 13:55:00 2023 GMT
            Not After : May 14 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2b:56:fe:05:b9:34:6e:8a:ef:73:7c:cf:40:
                    b7:bf:79:fc:ed:83:70:b8:4f:7d:94:2f:8b:a6:2a:
                    ef:98:3b:42:f5:90:de:78:57:0d:2c:e1:71:88:e4:
                    43:41:c0:8a:f8:e7:18:7f:5d:14:13:31:c4:31:62:
                    61:74:54:5d:84:1b:0a:12:da:0e:1c:9a:b2:bd:17:
                    fd:07:5e:65:f5:1a:24:ab:44:88:c7:a9:ca:c2:7e:
                    6d:7c:05:98:01:89:b0:b8:f5:c4:2f:5a:70:15:07:
                    6b:4d:e9:d8:23:c6:d5:4a:67:3a:0e:ee:7c:02:a2:
                    a5:8d:9d:c9:77:d7:23:99:f0:3b:07:f0:00:39:09:
                    6c:54:59:6e:81:aa:92:0f:d6:ff:df:3d:70:71:53:
                    f2:c1:87:b2:7e:e6:62:59:84:b9:18:03:0a:52:81:
                    61:54:f9:4f:f1:5c:5c:bf:92:b4:f5:ed:ab:cd:81:
                    2c:a5:f6:df:85:4a:dc:60:f7:ae:e7:59:60:68:56:
                    e3:ce:2c:d0:21:4e:6e:12:a5:67:b6:62:eb:4d:2d:
                    08:4c:59:86:65:e6:ae:51:11:7b:75:64:1e:a3:93:
                    c8:2a:91:43:17:4c:ff:43:3e:51:c9:70:52:ec:90:
                    98:22:e2:a7:75:2f:8f:86:82:56:79:bc:66:59:ca:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3C:16:C2:EE:37:58:4C:B1:BF:80:FB:AB:7C:7A:7B:B4:C5:29:6F
            X509v3 Authority Key Identifier:
                keyid:43:27:A2:66:F8:D1:4C:08:40:40:F9:C3:02:A4:B6:48:E5:FC:18:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3g6jUsvMjdgHULGp5Ydie7oUZ9AKXTgtaHtv5nGUrJfU/0/4327A266F8D14C084040F9C302A4B648E5FC1857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4327A266F8D14C084040F9C302A4B648E5FC1857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3g6jUsvMjdgHULGp5Ydie7oUZ9AKXTgtaHtv5nGUrJfU/0/323830343a343164383a3a2f33322d3336203d3e20323637343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:7e:81:79:84:cb:ae:3c:92:40:57:b1:6b:33:07:4d:25:26:
         b9:19:7f:24:51:2e:c7:5d:1e:57:9d:1d:d7:26:cd:80:c9:8a:
         4f:f3:98:c5:43:5b:5b:6e:d1:36:ba:74:2d:23:97:8f:df:61:
         19:62:48:b0:15:b2:ea:35:90:0a:d7:55:a4:9d:1c:a4:db:c3:
         0d:ee:6d:f8:0c:c5:65:fd:c8:66:ac:b3:53:70:9a:99:c5:58:
         00:76:5c:95:f0:ea:74:dd:3c:e6:29:a2:1f:fb:3b:12:42:3f:
         6f:aa:46:aa:6c:8e:50:67:12:ff:0f:bb:65:8e:e6:12:d2:b1:
         be:45:90:34:e6:fd:31:e2:ae:3e:f9:de:70:d3:e3:eb:51:1e:
         7f:f9:e0:5d:cd:23:30:04:be:d1:f7:42:c4:5c:95:69:28:10:
         27:64:5b:0b:97:81:e3:a1:08:0d:47:5e:d3:66:37:fa:40:a3:
         3e:2a:7d:8f:cb:ed:77:cd:35:2b:9f:1b:4d:7f:2c:01:6d:fa:
         e1:ad:e9:d7:e1:34:76:5a:0a:01:50:26:54:37:7f:7c:27:91:
         1c:a1:78:bc:3c:e2:d7:f9:97:c5:8b:9b:fc:61:0a:b1:2f:96:
         39:ce:5a:d1:08:7c:e0:e1:99:9d:fc:d5:23:b2:ce:f6:3b:62:
         33:a8:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org