Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a3a2f33342d3334203d3e203532363335.roa
File:                     323830343a6438303a3a2f33342d3334203d3e203532363335.roa (raw, json)
Hash identifier:          MjNZ5XCj33IFxUzyPSCt+oKp+SlqRd4WPGh/nODpY8g=
Subject key identifier:   B2:8F:D5:D9:97:D5:93:35:7B:39:89:3E:44:81:B5:06:7D:50:DE:03
Certificate issuer:       /CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Certificate serial:       76E447125D4C634E3FC6A78EE917BE915B49A612
Authority key identifier: 63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a3a2f33342d3334203d3e203532363335.roa
Signing time:             Sat 24 Sep 2022 18:48:46 +0000
ROA not before:           Sat 24 Sep 2022 18:43:46 +0000
ROA not after:            Sat 23 Sep 2023 18:48:46 +0000
asID:                     52635
IP address blocks:        2804:d80::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e4:47:12:5d:4c:63:4e:3f:c6:a7:8e:e9:17:be:91:5b:49:a6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
        Validity
            Not Before: Sep 24 18:43:46 2022 GMT
            Not After : Sep 23 18:48:46 2023 GMT
        Subject: CN=B28FD5D997D593357B39893E4481B5067D50DE03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:91:26:5e:d5:a4:bd:fe:7d:56:07:f8:9c:
                    0d:dc:48:b7:6c:f0:aa:cf:b1:13:ae:e4:0f:6e:e3:
                    ee:a8:df:7d:84:2b:0d:fb:69:d1:5d:3c:a3:28:6c:
                    ca:7c:ec:c6:95:10:58:91:59:2d:d7:67:52:55:1e:
                    20:ea:0c:a5:4e:ce:98:05:86:0a:2b:95:84:dc:0e:
                    4f:e1:da:75:99:65:31:cf:02:74:fc:ad:80:0a:a6:
                    5b:b6:13:33:e4:de:b3:40:b1:0e:ec:d9:92:fd:7d:
                    5f:ac:c9:c1:58:b3:c4:e9:cb:2a:e7:ab:71:fd:00:
                    ca:92:a7:5e:3f:2a:c3:bd:51:97:f6:7b:12:89:a7:
                    07:d3:30:28:f5:c6:a8:be:01:08:d6:fc:bc:e4:c3:
                    c9:14:a6:4f:4a:6e:22:7d:ca:5c:bc:c4:84:c9:54:
                    fe:59:15:7e:cd:6b:af:66:88:b3:01:7d:d9:80:26:
                    9c:f3:79:3c:de:33:87:a5:d5:a8:04:99:07:9b:cd:
                    b9:23:cc:b3:b1:b2:3d:a5:92:5a:e0:5e:35:7f:a2:
                    63:f5:a0:2f:b8:28:f6:16:e3:d7:77:66:b4:42:76:
                    18:5e:41:74:94:a8:1b:2f:ec:76:6a:d2:a4:1e:5c:
                    b5:d5:37:31:9b:1d:62:82:8f:55:3e:e1:f2:51:95:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8F:D5:D9:97:D5:93:35:7B:39:89:3E:44:81:B5:06:7D:50:DE:03
            X509v3 Authority Key Identifier:
                keyid:63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a3a2f33342d3334203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d80::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:ff:ea:b7:13:53:2a:10:d9:ab:3c:61:11:f9:61:71:99:
         89:a2:1a:db:11:20:fc:39:f1:a1:70:4d:ee:96:33:f3:31:9c:
         16:51:1b:00:5c:b8:f1:88:41:b7:29:7b:34:e7:2a:16:f8:51:
         ce:98:50:53:0d:9f:5b:c7:f0:bd:9b:3c:c1:77:4a:d8:d9:c7:
         fb:21:5f:4b:ca:b2:36:96:64:f9:ac:74:b7:a6:f1:80:32:bf:
         fc:02:f1:81:eb:b6:9a:f1:78:79:c0:60:52:5c:c8:c9:19:34:
         d1:fd:b8:ab:a9:eb:da:ed:2a:fc:bb:9f:2e:64:18:92:9b:d7:
         d7:17:38:4a:c0:eb:f1:26:c9:a2:98:a2:9b:69:3a:e7:92:4b:
         10:e5:cd:7c:1f:b8:27:af:6a:7d:9b:fa:ce:8f:74:31:a8:b3:
         12:9f:ad:9a:e7:62:73:5e:8f:12:3b:85:8d:cb:45:4b:ad:87:
         f0:d7:fd:fe:d2:c9:60:af:3d:1b:5d:88:2b:f3:5c:71:57:45:
         68:e2:e4:af:94:bd:27:91:89:89:a2:c9:8b:65:6e:76:7a:b1:
         d1:93:6b:23:eb:1a:b9:1f:49:ad:60:ab:6a:1a:67:18:97:12:
         d3:f9:d6:fa:25:e8:59:1e:6d:f9:6f:20:12:31:e1:a9:0b:7a:
         b0:90:75:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org