Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/323830343a333361383a3a2f33322d3438203d3e20323635343130.roa
File:                     323830343a333361383a3a2f33322d3438203d3e20323635343130.roa (raw, json)
Hash identifier:          pSSSZb8Ogu9BZFb+jSYbUvbe66SbTM/g7iE+WHkSj6o=
Subject key identifier:   EE:21:91:63:3E:57:98:79:C2:3B:65:A4:60:8F:87:36:0F:61:9E:4E
Certificate issuer:       /CN=64902D35F66E7AF02159D76F49B1F57C555C7B1A
Certificate serial:       3F5394E0248E46FA939DFA2EA38A11865F926A75
Authority key identifier: 64:90:2D:35:F6:6E:7A:F0:21:59:D7:6F:49:B1:F5:7C:55:5C:7B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64902D35F66E7AF02159D76F49B1F57C555C7B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/323830343a333361383a3a2f33322d3438203d3e20323635343130.roa
Signing time:             Sat 28 Jan 2023 19:00:00 +0000
ROA not before:           Sat 28 Jan 2023 18:55:00 +0000
ROA not after:            Sat 27 Jan 2024 19:00:00 +0000
asID:                     265410
IP address blocks:        2804:33a8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:53:94:e0:24:8e:46:fa:93:9d:fa:2e:a3:8a:11:86:5f:92:6a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64902D35F66E7AF02159D76F49B1F57C555C7B1A
        Validity
            Not Before: Jan 28 18:55:00 2023 GMT
            Not After : Jan 27 19:00:00 2024 GMT
        Subject: CN=EE2191633E579879C23B65A4608F87360F619E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:0c:2f:74:4a:2d:ac:9b:26:0d:1e:33:9a:
                    d2:e6:4d:de:d0:0a:b9:cc:68:d3:88:28:8d:e6:10:
                    c0:7a:2b:60:67:64:7b:3b:11:7f:1b:5f:01:b8:57:
                    71:ca:b0:81:48:f4:06:27:f0:ef:19:82:29:18:ef:
                    dc:0e:aa:b7:c3:0e:de:7a:ba:70:5c:81:2b:ef:ee:
                    51:ee:c0:a1:76:f9:11:00:e5:45:13:04:cc:cc:c0:
                    ee:44:17:d3:7e:fe:29:c3:8c:da:e1:ed:12:2b:71:
                    a9:ae:b1:98:e8:a0:e3:87:cb:94:e0:31:9f:dd:ad:
                    82:cb:3f:1f:ce:d8:ec:c2:ce:8d:ab:b2:5c:4c:70:
                    ef:7d:89:c8:f7:17:06:11:aa:d3:4e:4f:60:d3:be:
                    8e:3d:2b:15:1f:81:75:80:29:a9:04:7c:46:a4:d5:
                    f3:7d:f3:4d:6e:05:1e:db:e8:69:8f:90:f0:f3:8c:
                    d1:c5:16:42:84:b1:63:6a:eb:3c:8d:d1:88:bb:9d:
                    1f:93:da:cf:44:09:92:54:e9:da:80:ac:6e:09:2c:
                    4a:6e:88:d0:a4:25:e2:46:59:c2:6d:f6:5a:f2:ac:
                    f3:95:c2:6b:a2:37:ab:69:81:b1:e1:11:d8:40:8f:
                    1f:de:1f:65:9d:ee:38:e8:17:15:5c:55:a8:1b:f2:
                    b3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:21:91:63:3E:57:98:79:C2:3B:65:A4:60:8F:87:36:0F:61:9E:4E
            X509v3 Authority Key Identifier:
                keyid:64:90:2D:35:F6:6E:7A:F0:21:59:D7:6F:49:B1:F5:7C:55:5C:7B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/64902D35F66E7AF02159D76F49B1F57C555C7B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64902D35F66E7AF02159D76F49B1F57C555C7B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/323830343a333361383a3a2f33322d3438203d3e20323635343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:ab:78:fb:49:8f:b5:3b:76:90:a6:b9:c6:35:e2:47:9c:2b:
         a0:ef:99:96:4e:ae:8e:ca:92:01:3e:f1:97:4b:14:6c:12:3f:
         1b:24:a7:d1:7c:7e:5f:0f:0d:e1:a3:a4:c1:0a:a4:a9:d4:b2:
         85:1e:58:31:f0:9d:81:b7:0e:e0:60:f0:d8:e7:94:a0:5c:2e:
         53:d7:2d:01:dd:ec:f7:72:9d:02:e6:b2:a9:5a:06:b9:46:77:
         0a:62:06:98:61:aa:f7:a5:76:ed:92:77:bf:24:94:79:3e:bf:
         9e:78:6c:55:4f:e4:ef:05:1f:4a:18:90:54:c1:b5:07:71:ee:
         a6:df:3d:da:fd:9f:8d:33:b5:c0:a6:21:5b:c1:21:ed:ed:cf:
         e6:18:d7:1d:c8:09:3f:d6:bc:a1:cd:49:ff:49:0c:b3:f3:88:
         7d:02:98:41:e2:b5:22:b4:87:ac:6f:e9:3c:2b:52:21:b5:b7:
         46:fd:5c:e9:89:55:6e:91:2a:19:18:f2:48:2d:db:97:9f:3a:
         a6:0d:1c:4e:aa:77:fc:e7:9b:b8:27:e5:17:51:82:a4:18:b2:
         27:ea:f7:5e:7e:9d:f7:9f:00:4b:28:4c:a6:ec:17:41:2c:37:
         53:ef:c1:e1:8f:a6:42:ff:28:00:9f:fd:f3:0a:c0:7e:1a:eb:
         49:0e:d1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org