Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/323830343a336566303a653130323a3a2f34382d3438203d3e20323636363330.roa
File:                     323830343a336566303a653130323a3a2f34382d3438203d3e20323636363330.roa (raw, json)
Hash identifier:          dKfQEOWslLU/MFeB1UVA3Gf3f6QvPcR1/5hS3GQdapQ=
Subject key identifier:   14:8B:33:16:0C:D3:8B:B5:F7:00:3B:4D:C9:33:11:49:5B:F3:8D:0C
Certificate issuer:       /CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
Certificate serial:       51AE11034AA9D77EAE3F025AC3BD15F08B615A90
Authority key identifier: 8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/323830343a336566303a653130323a3a2f34382d3438203d3e20323636363330.roa
Signing time:             Thu 27 Jul 2023 23:05:01 +0000
ROA not before:           Thu 27 Jul 2023 23:00:01 +0000
ROA not after:            Thu 25 Jul 2024 23:05:01 +0000
asID:                     266630
IP address blocks:        2804:3ef0:e102::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ae:11:03:4a:a9:d7:7e:ae:3f:02:5a:c3:bd:15:f0:8b:61:5a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
        Validity
            Not Before: Jul 27 23:00:01 2023 GMT
            Not After : Jul 25 23:05:01 2024 GMT
        Subject: CN=148B33160CD38BB5F7003B4DC93311495BF38D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e3:21:31:1c:ef:00:08:6a:ce:4a:e3:b1:f1:
                    59:d2:f0:21:13:94:de:98:03:18:05:08:e6:1d:54:
                    0c:02:e4:bd:16:31:bc:ab:6f:c5:61:61:31:98:da:
                    b5:a0:a7:af:cc:06:67:1c:cf:d8:c6:dc:3f:2a:14:
                    98:85:54:97:62:1c:1d:9a:e6:7a:0c:bd:44:6c:1b:
                    f0:39:89:9a:af:96:70:ca:b2:24:63:76:02:50:7e:
                    cc:71:c9:3e:95:5e:d9:10:05:b5:50:e6:3d:8b:0f:
                    72:08:d9:c0:8d:da:b5:32:1c:bc:c1:87:c9:91:5f:
                    7a:59:0e:d8:f9:0d:d2:7b:e7:39:71:4d:fa:85:a2:
                    83:7b:29:a5:ce:6c:b5:d7:8e:da:af:5b:be:ac:dc:
                    0b:87:4e:1f:34:c6:31:18:7d:f5:3c:5e:98:cc:0e:
                    74:32:9b:33:fa:ce:24:a9:cc:b1:d4:83:ee:8c:90:
                    95:98:ba:f9:62:c2:73:5d:9f:83:a1:50:9e:86:37:
                    e0:18:91:eb:29:79:c2:2b:c1:da:2f:1a:31:87:26:
                    94:d9:f0:33:f7:ff:d8:5f:b5:9b:dd:6e:8c:7d:c7:
                    d2:08:4d:de:e5:03:16:e5:7f:de:ca:5b:0b:fc:48:
                    62:d4:3d:f0:9b:ca:bb:04:bc:74:e8:cb:ed:ba:c3:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8B:33:16:0C:D3:8B:B5:F7:00:3B:4D:C9:33:11:49:5B:F3:8D:0C
            X509v3 Authority Key Identifier:
                keyid:8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/323830343a336566303a653130323a3a2f34382d3438203d3e20323636363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ef0:e102::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:7a:23:f4:c5:92:8c:ed:de:a8:53:fa:1b:1c:05:35:35:4b:
         51:b3:c4:ea:f6:ac:a2:f6:11:e4:c3:7c:27:77:09:64:0e:64:
         cb:a3:84:63:5d:01:44:a9:84:b0:e1:b0:d9:ef:ef:64:54:a1:
         3c:9a:21:7f:46:8c:8e:8d:e7:f7:e0:1e:2f:af:71:7f:12:38:
         d8:97:57:57:53:17:f3:8a:1e:d4:cf:27:68:77:8b:d3:01:c0:
         da:c3:26:4a:76:43:b0:c9:7c:f6:64:fa:51:48:85:68:7d:5c:
         17:55:ea:06:29:51:57:17:e5:48:af:ab:bd:36:e2:3c:f0:09:
         ee:34:0b:9f:b3:2d:3b:05:0c:55:d9:20:d0:bd:d8:f1:a1:0c:
         be:13:3a:b6:f6:19:17:20:48:88:38:e9:c1:f7:3a:ef:66:f9:
         fc:d6:62:2b:99:cb:49:a2:76:22:4c:c4:1d:5e:35:50:cc:bd:
         f6:8f:dd:04:82:a9:66:b8:57:41:b1:08:a4:22:7c:bd:bc:fd:
         d1:f9:92:d5:48:7d:aa:59:c9:e9:26:b7:3f:64:8b:d1:3d:16:
         7d:49:f1:61:13:60:fa:69:4f:c0:21:c6:3f:c9:a1:73:05:cd:
         d8:6b:d9:4a:94:ff:8f:ac:55:80:4e:d9:86:5a:94:17:fe:1e:
         e6:c7:8a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org