Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/323830343a336566303a613130313a3a2f34382d3438203d3e20323636363330.roa
File:                     323830343a336566303a613130313a3a2f34382d3438203d3e20323636363330.roa (raw, json)
Hash identifier:          M9plf8l8Vv7ufUAG1gLNJMgYqj2B2WKNubwtQze1u0Y=
Subject key identifier:   EA:82:72:7E:88:2D:9F:F1:31:BF:84:28:38:B6:3E:3D:1A:FA:EF:CF
Certificate issuer:       /CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
Certificate serial:       3806EBC9010CA5920A7675E64CF14935963F2A91
Authority key identifier: 8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/323830343a336566303a613130313a3a2f34382d3438203d3e20323636363330.roa
Signing time:             Thu 27 Jul 2023 23:04:30 +0000
ROA not before:           Thu 27 Jul 2023 22:59:30 +0000
ROA not after:            Thu 25 Jul 2024 23:04:30 +0000
asID:                     266630
IP address blocks:        2804:3ef0:a101::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:06:eb:c9:01:0c:a5:92:0a:76:75:e6:4c:f1:49:35:96:3f:2a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
        Validity
            Not Before: Jul 27 22:59:30 2023 GMT
            Not After : Jul 25 23:04:30 2024 GMT
        Subject: CN=EA82727E882D9FF131BF842838B63E3D1AFAEFCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e6:7e:84:be:e9:b5:71:51:c9:71:1c:1d:c2:
                    f9:5e:0f:1b:1d:dc:ac:9c:f1:29:e4:87:32:3e:22:
                    6d:5a:51:f7:38:82:98:7a:ae:d4:92:d8:ee:9d:f0:
                    2a:e0:24:f7:1a:a6:8f:ce:cc:1f:2b:fa:9e:89:84:
                    b4:6c:c8:61:a2:13:c9:3f:74:d5:e4:3b:1d:25:40:
                    42:fc:93:85:3a:e1:21:c7:af:89:43:dd:03:77:1d:
                    be:84:c4:db:06:49:91:d4:01:6c:6a:1d:88:ad:f1:
                    f7:8f:72:d9:74:4a:62:e7:0e:89:d3:23:aa:ce:5b:
                    2a:12:e6:55:1c:14:77:24:e7:d5:cf:9e:d6:c6:33:
                    99:76:4b:a2:33:1c:4c:ba:26:af:eb:c3:23:cd:d7:
                    a2:dc:75:e0:34:de:9e:7a:08:1e:9b:f5:46:00:0e:
                    8a:c7:44:95:10:73:8a:6d:3c:9b:52:f6:8d:4f:84:
                    f9:bc:df:bc:d0:9e:81:72:e9:b1:2d:35:f4:de:3c:
                    f4:d7:59:ad:3c:af:87:70:e4:69:ea:73:01:49:e1:
                    26:5b:5d:b0:2a:d9:0a:6d:1f:47:a6:13:93:12:3d:
                    f6:7d:bb:e9:92:9e:79:34:ea:c4:ea:c3:cc:30:b2:
                    eb:bf:2a:a2:01:79:c5:b1:ef:5f:81:ab:4c:89:7b:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:82:72:7E:88:2D:9F:F1:31:BF:84:28:38:B6:3E:3D:1A:FA:EF:CF
            X509v3 Authority Key Identifier:
                keyid:8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/323830343a336566303a613130313a3a2f34382d3438203d3e20323636363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ef0:a101::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:52:84:29:44:93:92:c8:cb:55:00:55:ff:1e:da:97:d8:ab:
         38:e4:18:f9:85:92:70:4c:52:a9:53:e9:6f:3e:5c:20:9a:8b:
         51:79:25:d7:cf:51:d5:4e:26:51:89:2d:1e:7c:4a:3b:2c:3c:
         2f:88:f3:fe:6c:df:a8:1c:80:77:b4:6f:b9:88:1c:8b:62:d7:
         84:21:fe:90:a4:e2:0d:f5:b7:4f:53:5f:5f:cb:86:6b:6f:a4:
         29:c7:53:ce:45:89:c2:d0:79:31:f0:b7:2d:8c:c9:78:b0:c0:
         59:80:fe:2d:c5:10:ed:0e:22:74:65:eb:bc:92:af:30:25:bb:
         18:4c:a3:bb:35:44:ad:be:da:90:c3:09:00:80:da:10:5c:cf:
         f2:a9:3b:67:05:17:cc:dd:61:02:95:ac:23:be:97:06:76:0a:
         a5:9e:42:5f:c4:22:bf:9d:dd:9a:ae:44:08:59:6d:af:64:1b:
         20:6f:25:29:94:66:3c:81:64:9d:8f:b3:aa:5f:94:3f:df:0f:
         c7:c8:23:4a:b4:1b:ed:47:d5:14:ca:20:8c:07:cf:7f:6f:5d:
         2c:b4:30:ea:e3:d7:8f:52:7d:00:b8:60:9b:db:b6:c9:93:bc:
         d1:a8:10:74:0a:bd:61:fa:0d:4f:b3:1d:87:e3:06:90:dc:1d:
         07:40:92:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org