Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x3Fo3n7Z1GoiFcF2Z2nUmkyBDBiKKzGgGSouXgebhSN/0/323830343a353935303a3a2f33322d3332203d3e20323638313832.roa
File:                     323830343a353935303a3a2f33322d3332203d3e20323638313832.roa (raw, json)
Hash identifier:          S6j5IikcmMkbd8LXL9H6zXtHx0LczrCUIPLSoeM8pu0=
Subject key identifier:   92:74:64:B8:C5:93:05:F3:E2:42:93:2F:BC:6B:20:FA:A3:B8:80:F9
Certificate issuer:       /CN=E6AEEF2DE6CFAF4084226081AA1831400F328939
Certificate serial:       4FD67745642511EB4751F11B34F955E94F0B7675
Authority key identifier: E6:AE:EF:2D:E6:CF:AF:40:84:22:60:81:AA:18:31:40:0F:32:89:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6AEEF2DE6CFAF4084226081AA1831400F328939.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x3Fo3n7Z1GoiFcF2Z2nUmkyBDBiKKzGgGSouXgebhSN/0/323830343a353935303a3a2f33322d3332203d3e20323638313832.roa
Signing time:             Mon 11 Jul 2022 13:00:00 +0000
ROA not before:           Mon 11 Jul 2022 12:55:00 +0000
ROA not after:            Mon 10 Jul 2023 13:00:00 +0000
asID:                     268182
IP address blocks:        2804:5950::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d6:77:45:64:25:11:eb:47:51:f1:1b:34:f9:55:e9:4f:0b:76:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6AEEF2DE6CFAF4084226081AA1831400F328939
        Validity
            Not Before: Jul 11 12:55:00 2022 GMT
            Not After : Jul 10 13:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:4c:aa:bb:bf:09:5b:5c:34:5b:c2:56:a8:
                    3c:bf:41:94:34:30:2a:cc:c4:ed:d4:65:c6:e3:33:
                    4e:70:b5:52:e2:23:67:3a:82:94:8d:43:bc:10:2f:
                    bd:60:9a:fd:07:ac:bf:a7:21:9d:4c:1c:46:c2:a4:
                    de:47:94:4c:52:a6:03:80:04:df:71:e9:0d:79:77:
                    0b:82:46:09:46:22:4a:a8:03:77:b9:7d:58:47:6b:
                    79:5a:df:92:53:53:4e:8a:eb:d9:7b:2d:37:95:7c:
                    50:3b:6a:ee:f7:72:2d:08:72:16:dd:af:8f:05:2d:
                    ee:db:57:49:15:ec:6b:c2:62:11:2f:d3:cc:fb:27:
                    89:a3:5d:94:ed:8b:45:d7:b0:88:d9:73:b1:d9:46:
                    74:bf:b5:c8:0c:bd:6e:30:3a:02:f0:cf:d9:36:52:
                    89:00:00:b6:b0:9b:6a:5d:e1:20:52:08:d3:a5:71:
                    c2:6e:a8:0e:20:54:3c:53:38:4a:e8:98:24:c6:af:
                    68:5a:eb:5a:ca:04:f2:14:0f:1a:38:cc:78:00:1b:
                    b3:12:11:02:43:21:26:bc:db:85:dc:55:60:f9:81:
                    5d:2b:0c:05:3c:c6:6c:4e:9d:6d:63:ce:72:de:79:
                    1f:b7:30:d2:9f:33:df:44:4a:aa:fe:c2:36:e6:38:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:74:64:B8:C5:93:05:F3:E2:42:93:2F:BC:6B:20:FA:A3:B8:80:F9
            X509v3 Authority Key Identifier:
                keyid:E6:AE:EF:2D:E6:CF:AF:40:84:22:60:81:AA:18:31:40:0F:32:89:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x3Fo3n7Z1GoiFcF2Z2nUmkyBDBiKKzGgGSouXgebhSN/0/E6AEEF2DE6CFAF4084226081AA1831400F328939.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6AEEF2DE6CFAF4084226081AA1831400F328939.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x3Fo3n7Z1GoiFcF2Z2nUmkyBDBiKKzGgGSouXgebhSN/0/323830343a353935303a3a2f33322d3332203d3e20323638313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5950::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:47:7f:5f:28:50:29:74:45:23:10:1b:12:e9:9d:36:8f:9e:
         d0:28:55:02:50:1a:37:08:3e:30:8d:84:dc:85:d4:ca:48:fa:
         68:53:e0:2f:80:c9:ed:ef:a2:5b:80:ee:63:25:09:a2:38:4d:
         8a:51:59:d3:d2:00:f2:be:88:bb:d7:3c:d2:87:c1:00:f5:17:
         ab:79:5d:c1:7a:11:ae:9b:98:de:56:77:aa:06:32:a0:05:6a:
         65:07:47:bb:82:8d:44:98:fe:9e:80:b3:43:bf:b9:01:66:8f:
         97:6c:44:cd:a6:8d:fb:4f:1f:be:46:06:01:ad:c3:44:3f:5f:
         91:a0:77:8c:b0:b9:82:0c:f2:1a:46:aa:d4:87:90:2f:3c:cc:
         5d:74:3f:63:1b:85:eb:55:4a:f3:38:6f:51:61:f7:e9:55:82:
         0f:f5:7a:0b:be:df:54:30:3b:1b:a3:8e:f5:c2:78:22:c8:ee:
         88:3e:04:72:7f:7d:06:b2:3c:5f:72:36:18:a1:74:95:f0:a1:
         2b:04:57:2f:7d:d0:cb:5f:4c:3d:9a:03:e8:47:a6:ff:1d:ad:
         d9:01:35:ee:e4:a3:a6:92:56:3c:73:fe:22:53:31:02:36:89:
         69:dc:94:ec:fa:2e:b3:e9:a7:8c:27:d9:4b:2e:cb:b2:cd:7f:
         7a:f7:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org