Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/323830343a333239383a3a2f33322d3438203d3e20323635303837.roa
File:                     323830343a333239383a3a2f33322d3438203d3e20323635303837.roa (raw, json)
Hash identifier:          E4b1KAgV0/pvFnDtrKyXGqkC/ja3v43YYtMWKDZtsNc=
Subject key identifier:   35:25:82:06:FD:1C:44:00:44:4E:08:72:29:8A:27:B8:4A:61:59:9A
Certificate issuer:       /CN=712D2BA5D8A0184D0AA89F6141DF2D55FB1BAFA4
Certificate serial:       3DA3B262C702BF27309495D4C629EDB8EE0B5157
Authority key identifier: 71:2D:2B:A5:D8:A0:18:4D:0A:A8:9F:61:41:DF:2D:55:FB:1B:AF:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/712D2BA5D8A0184D0AA89F6141DF2D55FB1BAFA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/323830343a333239383a3a2f33322d3438203d3e20323635303837.roa
Signing time:             Tue 22 Aug 2023 15:25:40 +0000
ROA not before:           Tue 22 Aug 2023 15:20:40 +0000
ROA not after:            Tue 20 Aug 2024 15:25:40 +0000
asID:                     265087
IP address blocks:        2804:3298::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a3:b2:62:c7:02:bf:27:30:94:95:d4:c6:29:ed:b8:ee:0b:51:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712D2BA5D8A0184D0AA89F6141DF2D55FB1BAFA4
        Validity
            Not Before: Aug 22 15:20:40 2023 GMT
            Not After : Aug 20 15:25:40 2024 GMT
        Subject: CN=35258206FD1C4400444E0872298A27B84A61599A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:5e:cb:f0:6b:00:b5:7b:7e:eb:ea:cb:00:
                    9f:58:c9:cb:9e:bc:95:1a:5b:3e:47:a1:24:78:8f:
                    09:33:57:e1:29:ad:d1:85:87:2e:11:0e:07:13:95:
                    e9:3e:98:53:41:1f:6c:8f:ef:0a:bf:bb:eb:82:1e:
                    16:04:cb:2a:57:6a:98:2c:e8:93:42:bb:a4:86:2a:
                    3f:1a:85:b0:08:75:9b:0b:88:3a:a2:84:08:e1:97:
                    45:20:5f:7a:29:3f:9c:37:cd:64:23:0a:9e:37:42:
                    8c:bc:3d:02:b0:8a:05:82:70:da:7c:f9:2a:07:c1:
                    5b:f2:4a:2d:9c:b7:81:b3:e3:d2:6b:4a:a1:13:0a:
                    27:0c:3b:ea:67:db:76:ef:08:29:a7:af:a0:4d:18:
                    d8:d7:ee:28:d3:76:3f:3d:50:ad:ad:14:bd:c8:91:
                    ab:93:ea:f9:b5:52:27:83:20:bc:b1:f2:f9:72:f7:
                    d2:6a:4b:a5:12:51:bf:ad:c4:19:59:aa:09:1b:03:
                    64:ff:8a:08:3a:a8:7e:71:79:e1:c4:93:51:ec:c2:
                    98:1a:bb:52:e1:3a:47:62:cf:df:d9:23:09:07:2b:
                    d7:91:09:c5:66:70:d1:b5:33:64:a6:54:f0:58:8c:
                    b5:be:6f:52:b4:d6:89:b1:87:36:05:27:86:b4:40:
                    7f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:25:82:06:FD:1C:44:00:44:4E:08:72:29:8A:27:B8:4A:61:59:9A
            X509v3 Authority Key Identifier:
                keyid:71:2D:2B:A5:D8:A0:18:4D:0A:A8:9F:61:41:DF:2D:55:FB:1B:AF:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/712D2BA5D8A0184D0AA89F6141DF2D55FB1BAFA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/712D2BA5D8A0184D0AA89F6141DF2D55FB1BAFA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/323830343a333239383a3a2f33322d3438203d3e20323635303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3298::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:43:da:bf:36:42:22:77:91:52:4e:7d:15:58:3c:27:80:84:
         32:6a:12:65:18:d8:d9:82:7e:3a:46:78:32:99:13:42:9e:b2:
         e9:fc:d3:73:cb:34:c4:2e:14:26:94:73:0e:bb:6a:fd:df:b7:
         a0:38:8a:4d:d1:a3:90:31:80:4d:75:40:c7:0c:2c:ea:20:d5:
         2a:04:08:48:92:4b:15:15:8c:d5:13:bb:35:20:6e:c0:1f:12:
         94:c8:8c:ba:50:04:96:72:4e:64:e6:a3:bf:b8:c0:65:bb:bc:
         fb:f2:fc:39:8a:35:3d:97:23:39:d8:8c:1d:31:4d:42:ba:97:
         2b:86:5f:23:75:ec:d4:6c:9c:11:3e:cf:73:17:0f:56:cc:60:
         77:97:2f:0a:c0:fa:d7:e9:f1:2c:0d:89:ca:3b:8a:0f:83:34:
         2e:d8:0f:ff:9d:da:1e:99:5c:d0:7d:68:0d:0f:fa:9f:46:13:
         fb:fc:2e:5e:f6:fa:c1:28:4d:b0:5e:17:16:a4:ea:b6:ce:b6:
         4a:f9:96:d4:69:ac:1f:c7:44:99:0f:b3:83:59:0a:f9:b7:61:
         ed:02:0b:a9:b9:4f:09:27:ec:62:51:91:b8:73:14:27:48:78:
         60:7a:ab:28:84:a9:67:75:db:03:60:c1:43:c7:d2:9e:91:22:
         29:20:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org