Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          v5GgyiKx1JeyNkg7RxhaqNHbPYITQuzGGih1BOJLX4w=
Subject key identifier:   7E:86:C0:18:1C:C6:5E:89:25:72:05:7A:99:60:F2:B8:74:2E:32:8C
Certificate issuer:       /CN=B181A11248DDCC042E5C8D4FBA61452301CB2829
Certificate serial:       44076229735CB84DC3458A48E78F6909D86B988F
Authority key identifier: B1:81:A1:12:48:DD:CC:04:2E:5C:8D:4F:BA:61:45:23:01:CB:28:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 13 Sep 2023 12:16:58 +0000
ROA not before:           Wed 13 Sep 2023 12:11:58 +0000
ROA not after:            Wed 11 Sep 2024 12:16:58 +0000
asID:                     265429
IP address blocks:        2804:33fc:6000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:07:62:29:73:5c:b8:4d:c3:45:8a:48:e7:8f:69:09:d8:6b:98:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B181A11248DDCC042E5C8D4FBA61452301CB2829
        Validity
            Not Before: Sep 13 12:11:58 2023 GMT
            Not After : Sep 11 12:16:58 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:aa:a4:3f:aa:29:20:33:d8:13:c9:03:b5:
                    43:aa:c4:ce:4a:d4:9f:b5:21:2e:35:6e:fc:db:8b:
                    5d:3e:56:63:5a:2c:8c:c3:9a:9c:b5:94:c3:67:4f:
                    b9:69:3a:30:79:7b:5f:35:6b:43:8a:c7:68:2a:ab:
                    6d:c8:14:96:bd:b9:8d:92:ee:c9:4f:a0:fd:ac:8a:
                    5a:fc:67:bc:fa:b0:fe:d6:1f:0b:38:26:ba:c9:16:
                    23:d3:3e:1f:c6:5c:a3:17:e5:91:86:21:6c:a6:56:
                    35:b8:3d:d1:38:66:7b:5c:14:e3:03:7c:70:e2:90:
                    31:a4:b5:6e:54:33:ad:5b:97:4f:8e:9c:f1:11:b2:
                    ab:58:eb:db:d9:e5:45:5e:16:38:f1:fe:0f:e8:91:
                    6f:73:a7:48:10:47:b7:4b:a9:21:e4:40:67:c9:62:
                    cf:9d:23:1e:c7:04:02:1c:f1:ff:b8:c1:cd:80:e2:
                    68:58:11:2b:b6:5a:3c:8d:1a:6e:c1:e4:6e:3d:e9:
                    1b:80:9b:89:23:6f:48:88:33:76:18:5b:6e:1a:3d:
                    2f:9f:c9:01:5e:02:95:4e:17:c5:9f:7c:1e:3f:24:
                    06:e9:5f:6b:f5:8e:5e:5a:9a:fd:83:cd:4c:7a:fa:
                    d5:38:aa:71:46:46:af:b5:b6:11:10:2f:e0:ac:33:
                    0d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:86:C0:18:1C:C6:5E:89:25:72:05:7A:99:60:F2:B8:74:2E:32:8C
            X509v3 Authority Key Identifier:
                keyid:B1:81:A1:12:48:DD:CC:04:2E:5C:8D:4F:BA:61:45:23:01:CB:28:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4f:3a:57:58:78:bf:f9:f9:0f:a0:ba:42:6e:c3:76:88:c9:ba:
         0f:34:dc:ef:26:58:ce:0e:d0:24:ce:60:1b:66:bb:41:7e:50:
         e8:bc:5a:ff:8d:1e:26:88:fe:45:3e:44:8e:05:be:58:06:f6:
         4c:e1:67:5e:3f:a4:4f:5e:22:7d:92:ad:1a:f8:00:6a:79:dc:
         ed:f5:f1:8a:ba:8f:1a:5c:eb:f9:af:e0:10:cb:a2:14:48:96:
         70:b2:67:10:f1:52:b9:c2:aa:72:c5:fe:e8:e5:c4:60:4b:03:
         7c:29:d3:de:a2:91:cf:0d:87:32:ac:cc:93:c3:a8:1c:d5:86:
         ce:5c:88:02:3a:25:75:b6:05:aa:73:3a:c9:08:b2:f0:49:c8:
         9f:96:1d:4a:f6:45:aa:12:4f:01:f8:46:75:fc:12:71:15:6d:
         b1:c0:c8:68:4b:fe:77:5a:e2:f1:bb:7f:cf:01:76:36:17:cf:
         77:21:a1:0f:0f:0e:07:56:1b:51:ee:d3:66:42:8a:6f:3e:00:
         21:5e:6d:40:59:8f:45:a4:39:c6:59:65:59:c2:e2:67:0c:2a:
         78:0d:ed:75:ad:6d:3c:f2:59:f9:22:e3:39:db:c8:ae:9d:13:
         e3:b6:de:66:b0:69:61:a8:1a:3f:73:01:b4:bf:d2:fc:4a:cc:
         0f:40:08:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org