Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/323830343a383432343a3a2f33322d3438203d3e20323732323432.roa
File:                     323830343a383432343a3a2f33322d3438203d3e20323732323432.roa (raw, json)
Hash identifier:          nvpEs3ugOuJ1+1oxU4oeKXJ7OxtlaFJdTTfD7HlslsI=
Subject key identifier:   55:60:A0:77:23:E2:1C:D5:ED:CB:1C:E1:F7:8D:C3:79:55:17:58:53
Certificate issuer:       /CN=306AB5C523F6D9A349671EE617507214E07AFD0C
Certificate serial:       0B5B7E84D8DFD03B5DDADAFBA410921E83948227
Authority key identifier: 30:6A:B5:C5:23:F6:D9:A3:49:67:1E:E6:17:50:72:14:E0:7A:FD:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/306AB5C523F6D9A349671EE617507214E07AFD0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/323830343a383432343a3a2f33322d3438203d3e20323732323432.roa
Signing time:             Wed 01 Dec 2021 04:09:03 +0000
ROA not before:           Wed 01 Dec 2021 04:04:03 +0000
ROA not after:            Wed 30 Nov 2022 04:09:03 +0000
asID:                     272242
IP address blocks:        2804:8424::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5b:7e:84:d8:df:d0:3b:5d:da:da:fb:a4:10:92:1e:83:94:82:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306AB5C523F6D9A349671EE617507214E07AFD0C
        Validity
            Not Before: Dec  1 04:04:03 2021 GMT
            Not After : Nov 30 04:09:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:c6:e9:57:2d:8c:4a:f5:ed:bd:7f:95:b9:
                    02:c7:7a:fb:94:79:5c:fb:25:86:be:03:85:b3:f2:
                    ae:ce:44:fa:8e:f6:2e:27:10:89:d7:7f:89:1f:77:
                    70:75:2d:cc:d8:81:79:a3:8e:97:71:e4:c7:72:cc:
                    bc:1a:88:f6:f1:a0:d8:63:62:ff:da:58:80:ba:86:
                    1f:59:af:d8:5e:44:b2:0a:77:d3:b7:ce:42:f4:43:
                    0c:bc:75:4d:ec:2c:6b:0d:f8:ca:44:a8:d8:0a:dd:
                    dc:e0:61:dd:23:dd:a7:06:b3:5d:c9:b9:3b:4e:4a:
                    c6:c6:2e:30:1d:1d:7a:f4:bc:37:4b:e7:51:2e:f5:
                    30:88:c4:47:23:8b:8d:6d:05:58:58:af:0a:1b:3c:
                    8a:87:e8:6e:67:9b:3f:7f:28:c5:d8:19:bd:c3:81:
                    45:fe:81:1b:e4:fb:07:68:e3:32:19:6f:94:ac:a3:
                    46:20:ef:bc:e0:9c:49:e7:e4:d2:f3:b8:a6:6b:cc:
                    ce:1a:3c:52:c2:df:69:64:d2:44:ad:1c:34:cf:2f:
                    0b:39:f4:b7:9e:62:c5:e3:29:e6:ee:de:db:4f:d7:
                    48:96:94:27:df:19:20:bd:ce:f1:be:71:b3:a5:46:
                    e0:90:8d:e7:0f:6e:91:d7:76:e7:87:b2:77:23:f7:
                    55:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:60:A0:77:23:E2:1C:D5:ED:CB:1C:E1:F7:8D:C3:79:55:17:58:53
            X509v3 Authority Key Identifier:
                keyid:30:6A:B5:C5:23:F6:D9:A3:49:67:1E:E6:17:50:72:14:E0:7A:FD:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/306AB5C523F6D9A349671EE617507214E07AFD0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/306AB5C523F6D9A349671EE617507214E07AFD0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/323830343a383432343a3a2f33322d3438203d3e20323732323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8424::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:05:b7:eb:90:3d:80:72:dc:d8:cd:06:d5:86:81:3d:20:d0:
         ea:9e:58:9c:9e:d1:f6:16:8f:e8:bb:da:53:2c:b6:ff:96:58:
         07:17:a5:26:13:e4:f4:4f:94:bf:cc:63:22:a5:29:58:4b:c3:
         26:81:41:93:82:44:82:c7:86:ff:86:b1:6a:6f:84:4f:2c:4b:
         3a:4b:15:bf:d5:00:94:c5:92:ee:41:a4:e1:0d:52:60:af:84:
         4b:7a:b1:f7:8b:10:36:1a:24:1c:43:3e:dd:92:a3:4f:76:94:
         96:04:d8:a2:ca:02:dd:df:52:a0:42:36:6b:9a:ee:65:61:c4:
         b2:d3:c0:9f:24:19:4d:52:41:93:52:18:01:ac:05:4f:2c:7c:
         bd:6b:d7:9f:ae:c7:7f:6b:b4:72:6e:a2:08:61:55:7d:17:ce:
         40:32:c7:68:d3:b9:b9:e7:df:4e:3d:85:b3:1d:89:fd:47:86:
         d3:da:89:6a:96:5e:5b:41:f8:e8:31:d3:d3:96:91:8d:48:dd:
         9b:d0:71:cf:84:89:33:e9:92:92:4a:2b:2f:6a:4a:5c:6e:ab:
         b5:37:61:ce:8f:80:52:ef:34:b3:13:3b:e8:f3:f3:19:cd:a1:
         4f:41:02:fb:66:bd:fb:c0:5f:a8:65:1f:28:0a:72:86:54:75:
         f9:96:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org