Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33322d3334203d3e20323636343133.roa
File:                     323830343a333736633a3a2f33322d3334203d3e20323636343133.roa (raw, json)
Hash identifier:          zSh/QmU0idELmEJCrJ13xn+TbyvkQ+92bG6RZpUzRl8=
Subject key identifier:   15:31:D2:8C:26:E6:4D:EC:CA:DA:93:87:47:36:45:CC:75:9D:CB:D3
Certificate issuer:       /CN=B3BF073AB1A2985154054B140C7DB1BF95516900
Certificate serial:       0D65B0FCC74DBBE201F2967AB901211EDDB2BCBC
Authority key identifier: B3:BF:07:3A:B1:A2:98:51:54:05:4B:14:0C:7D:B1:BF:95:51:69:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3BF073AB1A2985154054B140C7DB1BF95516900.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33322d3334203d3e20323636343133.roa
Signing time:             Tue 04 Jan 2022 02:04:30 +0000
ROA not before:           Tue 04 Jan 2022 01:59:30 +0000
ROA not after:            Tue 03 Jan 2023 02:04:30 +0000
asID:                     266413
IP address blocks:        2804:376c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:65:b0:fc:c7:4d:bb:e2:01:f2:96:7a:b9:01:21:1e:dd:b2:bc:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BF073AB1A2985154054B140C7DB1BF95516900
        Validity
            Not Before: Jan  4 01:59:30 2022 GMT
            Not After : Jan  3 02:04:30 2023 GMT
        Subject: CN=1531D28C26E64DECCADA9387473645CC759DCBD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0b:5e:f2:5b:f4:82:b0:cc:54:36:44:c8:22:
                    12:b0:79:8a:dd:bf:3b:dd:35:aa:ca:9d:19:de:80:
                    2a:22:2f:2e:b3:2a:ec:49:c2:96:47:73:b4:e5:39:
                    fd:13:34:8a:3c:3d:2c:33:4c:f2:a9:bf:d0:03:b8:
                    10:ff:db:37:53:ec:bd:ae:83:c3:d9:07:d8:0e:12:
                    ca:08:da:20:2d:f4:90:19:51:f4:de:01:40:ba:cb:
                    fd:25:be:a7:c8:3e:b2:66:fe:d1:4a:a3:e0:f6:de:
                    28:1e:dc:32:b8:6e:a3:84:de:ce:72:10:35:3b:2d:
                    be:16:0c:b9:46:5a:40:b6:8a:eb:2f:0e:fa:01:f9:
                    05:7e:bc:d9:84:db:04:d4:82:f1:81:1f:c7:c1:da:
                    5c:19:a5:65:36:fb:00:e7:83:a3:37:60:e0:0e:1c:
                    80:04:81:a1:9d:58:61:5d:14:a7:45:46:5d:67:bf:
                    70:fe:da:34:bb:4b:66:b3:67:88:e6:ea:3d:66:ad:
                    62:0a:8c:96:7d:53:42:f9:8f:4f:08:74:b5:2a:a9:
                    db:1d:c0:31:e9:10:6d:ea:35:61:a4:3f:f8:24:5c:
                    c0:dd:10:4d:79:df:aa:46:e3:d9:2c:94:cf:d4:fe:
                    0a:5b:ad:b4:a8:ac:7d:99:72:37:82:a1:b8:b3:2a:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:31:D2:8C:26:E6:4D:EC:CA:DA:93:87:47:36:45:CC:75:9D:CB:D3
            X509v3 Authority Key Identifier:
                keyid:B3:BF:07:3A:B1:A2:98:51:54:05:4B:14:0C:7D:B1:BF:95:51:69:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/B3BF073AB1A2985154054B140C7DB1BF95516900.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3BF073AB1A2985154054B140C7DB1BF95516900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33322d3334203d3e20323636343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:376c::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:23:65:3b:53:75:7c:ef:2e:f2:ca:71:4d:ef:c5:55:42:06:
         23:f3:c3:72:09:b5:f4:05:e9:d3:33:f7:a8:a1:12:fb:5f:7c:
         8a:69:ee:a5:29:e8:0a:ed:94:54:bf:15:2e:d3:ab:3c:30:5e:
         24:c2:3b:47:21:62:47:2a:53:e9:cd:5d:75:d5:b7:61:11:22:
         f0:d9:25:e5:07:0d:9e:8b:b8:1c:a3:40:e4:00:83:9c:f1:f3:
         8a:e1:c0:fe:fe:21:c2:08:bc:cb:b5:9a:0e:e8:1f:94:58:4d:
         a8:d3:b3:2a:51:fa:66:65:15:7d:fa:fe:93:4d:d9:23:db:c1:
         a2:47:b1:76:bf:19:be:74:f7:42:cb:cf:c7:ea:28:53:51:8b:
         e2:cc:cd:d6:9e:b8:42:d7:e5:2d:06:c8:36:00:de:8d:c1:c3:
         f1:48:ca:bf:e1:5e:9a:e3:1b:2e:f4:68:1d:d7:66:bf:64:88:
         c7:a5:a3:38:c3:92:4b:e9:d6:93:49:09:ed:54:f4:48:e6:e6:
         03:a7:25:f6:0b:cc:f1:ba:d5:7b:02:cc:48:1c:b8:27:a0:fd:
         45:19:76:f8:c1:69:ef:34:6d:54:cf:c4:c3:47:4a:8d:69:4a:
         03:5f:15:35:e4:11:06:aa:cb:52:8a:de:10:97:3a:bd:a4:90:
         18:e4:99:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org