Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33332d3333203d3e20323638333230.roa
File:                     323830343a346635343a383030303a3a2f33332d3333203d3e20323638333230.roa (raw, json)
Hash identifier:          2/qP5s/JuONzHNmCEiDbG4hZOUGCJjxYHFPQZ0rex3A=
Subject key identifier:   A3:0B:94:0E:4A:9F:3A:43:0D:C9:2E:7D:14:35:50:9E:92:B9:48:25
Certificate issuer:       /CN=D0436FEA91781D055687421CAEF481A6EC223F53
Certificate serial:       14F77451DB7C38A0F14594D542612CC3C46F5FB8
Authority key identifier: D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33332d3333203d3e20323638333230.roa
Signing time:             Thu 03 Aug 2023 17:01:57 +0000
ROA not before:           Thu 03 Aug 2023 16:56:57 +0000
ROA not after:            Thu 01 Aug 2024 17:01:57 +0000
asID:                     268320
IP address blocks:        2804:4f54:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f7:74:51:db:7c:38:a0:f1:45:94:d5:42:61:2c:c3:c4:6f:5f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0436FEA91781D055687421CAEF481A6EC223F53
        Validity
            Not Before: Aug  3 16:56:57 2023 GMT
            Not After : Aug  1 17:01:57 2024 GMT
        Subject: CN=A30B940E4A9F3A430DC92E7D1435509E92B94825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:9e:2a:b4:c8:6a:0c:24:b8:bd:22:ea:b2:
                    49:c6:4b:87:d0:5b:69:22:f9:a4:93:56:ac:fb:5c:
                    0c:ba:f4:f0:c4:e8:0f:a7:21:d6:59:eb:e2:bd:8f:
                    b9:5d:ae:1c:8b:23:dc:7a:56:b9:93:46:12:cd:ea:
                    8c:74:b1:8b:9b:7d:0b:cf:5e:82:60:95:b8:52:9a:
                    9b:f8:80:db:46:70:e8:97:b8:d8:94:ed:45:eb:f7:
                    8e:95:66:71:db:94:33:c1:42:6c:99:b7:13:7a:4c:
                    e4:87:d4:49:1c:77:19:19:75:2e:6c:fc:74:33:68:
                    42:d9:38:9d:23:ee:52:67:e4:6c:34:f6:07:c3:24:
                    04:e4:5e:44:17:1f:a5:29:f4:d8:70:ff:d8:6f:9e:
                    86:1e:7c:d1:71:85:17:9a:a1:67:cc:77:0d:b0:15:
                    82:e4:54:0e:7c:8e:b7:dd:d8:11:df:95:5b:3e:92:
                    38:de:07:e0:02:82:3e:c7:03:ba:70:03:1b:ea:2b:
                    92:aa:8c:36:07:c0:45:bc:d7:23:f5:1e:73:74:13:
                    0a:21:08:dc:b3:85:39:a3:4e:21:1e:4b:ae:46:8c:
                    92:b3:ca:09:58:aa:05:ce:81:5d:ad:eb:fe:64:ff:
                    a2:62:7e:a6:21:09:d9:3e:f1:7f:ea:88:1b:9e:15:
                    1b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0B:94:0E:4A:9F:3A:43:0D:C9:2E:7D:14:35:50:9E:92:B9:48:25
            X509v3 Authority Key Identifier:
                keyid:D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/D0436FEA91781D055687421CAEF481A6EC223F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33332d3333203d3e20323638333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f54:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:37:cc:e4:5f:42:f7:a4:bf:68:30:ed:a4:d4:49:95:00:
         b8:a6:17:93:67:4b:92:1b:57:90:6d:33:9a:64:47:72:23:a4:
         4d:bc:1a:27:e1:37:fd:28:20:46:88:1c:bc:eb:da:49:75:f3:
         93:6c:cc:07:70:58:cc:be:dd:b5:d4:2f:33:ed:1f:45:b3:74:
         35:4e:db:4f:ba:ad:f3:68:61:51:a1:15:0a:04:7b:94:e3:82:
         f3:42:4b:fe:e8:f8:49:91:95:4b:52:f1:38:2a:af:90:4d:a4:
         d8:10:75:40:24:03:74:80:95:99:8c:a7:49:f6:7a:ec:e2:1e:
         16:3a:4e:fe:44:c8:89:89:74:c1:33:37:e2:48:5d:35:c4:64:
         ca:61:fe:23:e8:f8:d4:68:ae:66:46:7c:0e:4b:36:9c:f8:39:
         8e:77:75:18:94:ea:90:02:3b:4f:cb:75:fe:e4:7c:0c:0a:4c:
         62:7e:72:32:0c:55:3a:c9:f7:ea:0d:b9:c4:fd:82:2c:94:6c:
         f4:2d:3a:b8:44:d8:27:c5:e2:0d:90:1b:47:4b:4f:bb:72:bb:
         e3:e1:5e:d0:fe:f4:28:9f:89:ac:1b:f9:7e:e5:fb:1b:71:49:
         46:4b:7b:90:c3:d8:a1:22:7e:50:64:7a:61:32:f1:2d:3e:9f:
         30:d3:3f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org