Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a3a2f33322d3334203d3e20323635343239.roa
File:                     323830343a333366633a3a2f33322d3334203d3e20323635343239.roa (raw, json)
Hash identifier:          7KFCMK0IzzcTcuPbV0pp5ovG7QMnoq1aKvBMuVVytOQ=
Subject key identifier:   E6:45:87:E5:7D:A3:72:6C:17:88:B3:15:98:43:00:6A:3D:70:F7:00
Certificate issuer:       /CN=B181A11248DDCC042E5C8D4FBA61452301CB2829
Certificate serial:       04A241E995628C3D24FFAD70DC95DD715BF0D0AC
Authority key identifier: B1:81:A1:12:48:DD:CC:04:2E:5C:8D:4F:BA:61:45:23:01:CB:28:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a3a2f33322d3334203d3e20323635343239.roa
Signing time:             Mon 18 Sep 2023 18:00:00 +0000
ROA not before:           Mon 18 Sep 2023 17:55:00 +0000
ROA not after:            Mon 16 Sep 2024 18:00:00 +0000
asID:                     265429
IP address blocks:        2804:33fc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a2:41:e9:95:62:8c:3d:24:ff:ad:70:dc:95:dd:71:5b:f0:d0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B181A11248DDCC042E5C8D4FBA61452301CB2829
        Validity
            Not Before: Sep 18 17:55:00 2023 GMT
            Not After : Sep 16 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:f3:24:ae:72:74:28:7f:62:a8:a1:30:01:
                    18:1d:7c:63:db:c4:f9:0b:51:0e:a4:a3:bd:3f:88:
                    89:95:9a:a1:01:b5:58:31:49:04:52:04:f4:45:e1:
                    12:58:91:f3:2e:a6:54:5c:7a:d0:7f:3c:81:7e:71:
                    95:c3:74:f1:59:11:2c:0f:fd:12:d1:00:4e:1d:51:
                    59:b2:c8:d0:fe:43:0d:8c:4b:83:73:a4:ce:f5:d2:
                    a0:02:06:ef:d0:04:62:45:94:48:8d:9e:f0:ac:5b:
                    8f:c7:8d:5a:31:68:bf:34:91:2f:97:d7:43:09:f7:
                    c2:67:d7:24:26:3e:ef:44:36:14:6b:51:f1:1c:12:
                    dd:f7:9e:a5:f7:98:3d:04:4e:70:06:22:82:e4:b9:
                    48:e1:88:9c:fb:d8:71:5e:4b:07:ec:8b:e9:a3:72:
                    88:5d:31:d3:ec:e8:22:22:8a:c9:d4:d8:a7:3e:4a:
                    16:c4:9d:01:22:6f:ed:31:eb:4a:63:e5:a6:37:8e:
                    a9:fb:ae:9f:40:0b:ff:d2:54:9f:95:68:a1:c8:47:
                    0f:d5:ad:d9:ae:ab:a0:0e:f8:f3:4d:a8:bd:21:9d:
                    60:0e:06:17:f0:9e:60:44:de:87:bc:63:31:9d:3a:
                    21:81:43:1f:10:c5:ff:3a:f1:15:0e:8b:c8:12:dd:
                    0b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:45:87:E5:7D:A3:72:6C:17:88:B3:15:98:43:00:6A:3D:70:F7:00
            X509v3 Authority Key Identifier:
                keyid:B1:81:A1:12:48:DD:CC:04:2E:5C:8D:4F:BA:61:45:23:01:CB:28:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a3a2f33322d3334203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:a7:1f:d4:50:74:20:e3:58:54:4a:a0:cb:f7:20:58:d9:
         50:fc:e2:74:4a:83:b0:17:57:44:ec:24:a7:c2:f0:be:eb:c7:
         cd:59:10:42:e9:72:a7:2e:c4:71:93:55:00:cf:74:23:2c:4f:
         d9:11:1b:9c:16:8a:85:04:5d:30:c7:d2:28:5a:4e:59:ca:fb:
         7a:70:60:68:f2:1d:29:81:ab:7b:99:c7:8b:9e:bb:ad:75:75:
         89:1e:88:11:2f:9b:35:0a:91:b4:e2:7a:a3:b5:18:7a:3c:23:
         d5:dc:c1:3a:04:96:9c:a7:ee:b8:93:75:c1:69:9d:74:22:eb:
         d1:c4:49:21:1a:85:0c:57:3d:20:44:29:68:bd:76:82:19:f5:
         8e:48:83:87:1e:8d:8c:98:6d:00:b8:07:35:81:b4:50:fe:9d:
         e3:91:b9:20:21:16:40:32:bd:df:3e:e9:64:2c:7b:07:20:6f:
         73:6d:43:d6:ef:15:18:f1:f2:92:ac:5b:19:a9:4d:93:8d:da:
         1b:7d:49:5f:a0:f1:d8:82:dd:52:f2:63:e1:21:44:e7:02:78:
         b8:26:e0:12:33:b9:4a:db:0a:b2:fe:99:c7:87:de:f2:e7:fb:
         48:b4:49:29:2b:fe:b6:49:ab:3d:d1:ff:c2:b5:fd:21:ac:9e:
         a5:2d:b7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org