Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/1/323830343a336262633a3a2f33322d313238203d3e20323636313638.roa
File:                     323830343a336262633a3a2f33322d313238203d3e20323636313638.roa (raw, json)
Hash identifier:          teIwMMFt5og0CehtmIjqf//tAR8ylXwnaF7FtpP/P6s=
Subject key identifier:   EF:A6:45:90:62:F3:2A:01:67:B6:C1:D2:DE:8D:FD:52:B9:7B:BE:24
Certificate issuer:       /CN=4F865EC6CC86C14ED41B0043889208511C897E9E
Certificate serial:       5716B54F85C7A602F66B8A89E4B54B7127797B4A
Authority key identifier: 4F:86:5E:C6:CC:86:C1:4E:D4:1B:00:43:88:92:08:51:1C:89:7E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F865EC6CC86C14ED41B0043889208511C897E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/1/323830343a336262633a3a2f33322d313238203d3e20323636313638.roa
Signing time:             Thu 04 Apr 2024 14:42:08 +0000
ROA not before:           Thu 04 Apr 2024 14:37:08 +0000
ROA not after:            Thu 03 Apr 2025 14:42:08 +0000
asID:                     266168
IP address blocks:        2804:3bbc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:16:b5:4f:85:c7:a6:02:f6:6b:8a:89:e4:b5:4b:71:27:79:7b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F865EC6CC86C14ED41B0043889208511C897E9E
        Validity
            Not Before: Apr  4 14:37:08 2024 GMT
            Not After : Apr  3 14:42:08 2025 GMT
        Subject: CN=EFA6459062F32A0167B6C1D2DE8DFD52B97BBE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:67:c8:e4:58:e4:7f:6e:95:de:07:06:97:
                    b2:14:84:a1:73:3f:fc:c7:fe:5f:e2:28:d5:16:0f:
                    8f:88:0d:0b:61:9c:d7:6f:0a:c2:44:0b:b4:0e:66:
                    6c:a9:8f:75:ee:f7:f4:a8:91:31:02:dd:e2:be:ae:
                    1b:4f:5f:5a:ea:c8:a1:7e:f6:76:72:0f:4f:f9:71:
                    b6:3e:c9:37:13:7a:fc:b7:91:0f:27:ff:52:b3:8a:
                    7c:31:c8:d7:4d:be:5f:24:2d:ee:30:e7:b0:a8:74:
                    40:0f:a2:b0:d3:7e:55:4c:04:b8:eb:09:e7:0d:80:
                    e5:fd:b3:de:d7:59:b8:0d:69:7f:cd:ff:72:3d:63:
                    04:c6:fe:06:b4:1b:fc:31:d3:fc:72:f6:d6:32:5f:
                    db:58:c9:50:21:49:24:25:df:50:ed:c9:18:6f:17:
                    33:36:71:3a:cb:14:32:8a:ae:25:63:f2:88:c8:5c:
                    cd:af:98:b6:67:d9:8d:ca:fa:ea:d9:b8:7f:6b:60:
                    25:e0:20:ae:ea:68:bd:70:14:c7:ee:ae:51:79:32:
                    b3:99:8e:ca:0a:b3:c4:f6:be:44:1e:13:ee:54:f2:
                    51:ad:dc:90:1a:fe:14:f1:03:e6:88:e8:f4:6c:26:
                    48:94:21:fd:8c:a7:b5:98:9f:70:92:23:4c:b6:62:
                    a2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A6:45:90:62:F3:2A:01:67:B6:C1:D2:DE:8D:FD:52:B9:7B:BE:24
            X509v3 Authority Key Identifier:
                keyid:4F:86:5E:C6:CC:86:C1:4E:D4:1B:00:43:88:92:08:51:1C:89:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/1/4F865EC6CC86C14ED41B0043889208511C897E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F865EC6CC86C14ED41B0043889208511C897E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/1/323830343a336262633a3a2f33322d313238203d3e20323636313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:4b:fa:1b:f1:52:17:79:a3:ba:3e:f1:c5:14:6a:0c:cc:8d:
         be:05:91:7c:8f:c5:a2:cd:5c:22:e9:23:97:91:5b:96:1c:c2:
         6e:29:46:1a:68:81:5b:8d:ac:b4:4a:fd:8a:42:92:b0:da:91:
         44:31:d1:c9:f9:70:22:99:fb:2f:db:a0:43:3d:d5:fc:95:25:
         08:e7:03:cd:e7:e0:ec:7a:63:3d:8f:9d:eb:fa:7f:23:fe:11:
         27:16:c5:1c:d7:15:34:88:40:44:4b:28:9a:ce:48:0f:e5:4d:
         8e:56:66:52:30:01:4b:cd:5f:38:0c:fa:be:69:56:c8:01:d4:
         76:b0:16:66:35:cf:8b:8c:73:4c:70:65:67:71:79:53:4a:d6:
         da:bb:7f:7a:aa:27:9d:42:af:d0:9e:ef:30:c4:9b:68:c7:7d:
         23:a8:e1:f5:eb:07:6a:37:db:1a:0e:14:4f:0b:ae:c2:7d:db:
         9b:8a:52:37:6b:e2:65:fd:0e:1f:63:db:4f:08:7d:d2:63:18:
         1d:65:8d:1f:46:fc:cd:dd:0f:c7:45:9e:24:a2:f4:5b:16:11:
         de:60:f3:cf:33:96:33:79:fa:4e:f3:37:a2:75:5c:e9:42:35:
         88:2b:c2:4f:74:41:57:8b:a5:0a:29:44:3a:52:8a:5c:41:0d:
         d2:63:f1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:48:46 2024 by rpki-client on console-fra.rpki-client.org