Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/323830343a333637303a3a2f33322d3332203d3e20323636333438.roa
File:                     323830343a333637303a3a2f33322d3332203d3e20323636333438.roa (raw, json)
Hash identifier:          nS/drdY3Y1U+JvFpvc15kgWC81HUpzRxWN++ouhy0DY=
Subject key identifier:   84:2E:8D:88:39:76:16:01:D3:B0:CA:AE:EA:D4:43:ED:F8:EF:4A:C3
Certificate issuer:       /CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
Certificate serial:       61A4B64486E693F96C5E4B6C26B9BA6635826DA4
Authority key identifier: E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/323830343a333637303a3a2f33322d3332203d3e20323636333438.roa
Signing time:             Fri 11 Feb 2022 16:39:34 +0000
ROA not before:           Fri 11 Feb 2022 16:34:34 +0000
ROA not after:            Fri 10 Feb 2023 16:39:34 +0000
asID:                     266348
IP address blocks:        2804:3670::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a4:b6:44:86:e6:93:f9:6c:5e:4b:6c:26:b9:ba:66:35:82:6d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
        Validity
            Not Before: Feb 11 16:34:34 2022 GMT
            Not After : Feb 10 16:39:34 2023 GMT
        Subject: CN=842E8D8839761601D3B0CAAEEAD443EDF8EF4AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:57:e2:4c:f4:ce:c1:fe:76:c1:20:6c:b7:
                    68:d3:91:95:6e:75:8c:57:85:10:ee:b3:5f:ab:aa:
                    47:92:e1:63:ff:a1:52:24:ae:d5:17:57:89:58:e4:
                    3b:a6:5b:b1:da:37:ca:ab:8f:fa:80:72:64:ae:9d:
                    c4:d7:c1:1e:48:84:d4:ee:eb:9c:25:ba:c0:2f:b2:
                    51:21:a8:df:cc:a0:ef:04:78:2a:8b:bb:1a:3d:3e:
                    5b:07:70:0f:af:5d:7a:6b:be:ab:97:ea:ed:ab:35:
                    98:93:dc:22:1d:f8:72:4a:ee:4b:25:66:81:37:0f:
                    b2:11:17:1d:85:5f:03:94:27:96:74:b5:85:ae:9b:
                    b6:4d:70:69:c7:c8:6c:27:e9:94:87:b1:e6:f3:e1:
                    62:47:b9:2f:4f:3e:59:c6:57:f7:f3:c0:20:0c:8e:
                    57:b0:d8:71:11:13:b2:1e:d6:94:82:a0:47:9b:af:
                    71:c5:e0:6e:95:9a:5b:3b:c7:59:92:4d:81:32:24:
                    50:23:b0:98:87:3a:5c:32:85:3e:69:44:a5:ba:34:
                    a5:de:cc:f4:3a:98:33:0f:60:37:0b:ed:43:61:d4:
                    5c:3c:80:06:c8:3c:aa:00:b6:b6:a2:12:5b:72:47:
                    42:72:8b:a9:2f:24:01:4a:b6:f6:b1:44:2b:fe:5b:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2E:8D:88:39:76:16:01:D3:B0:CA:AE:EA:D4:43:ED:F8:EF:4A:C3
            X509v3 Authority Key Identifier:
                keyid:E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/323830343a333637303a3a2f33322d3332203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3670::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:8b:d3:bd:5d:19:d8:9a:25:01:cf:b1:ae:9d:fb:22:0c:bc:
         34:86:71:6d:50:76:52:10:67:ba:13:d2:18:d6:04:88:d3:a7:
         33:21:8e:42:9f:63:02:80:b1:e1:05:70:ef:4b:3e:39:51:e9:
         53:ae:7a:a9:d9:57:a9:be:09:47:8c:84:a6:c9:74:fb:82:b0:
         10:cc:50:73:be:d0:42:50:ae:b6:16:c9:6e:c4:4d:13:5d:6b:
         ae:91:f0:38:58:33:bd:27:55:38:c3:ca:31:13:eb:cd:18:5d:
         23:02:e6:be:a4:d5:b8:2c:41:cc:7c:77:6d:82:72:ac:64:0f:
         2c:73:2c:97:db:69:c7:5d:2b:5f:cf:5b:66:cc:af:25:5f:8d:
         9a:15:b7:67:34:d6:ad:a6:f6:57:2d:f3:85:fc:10:2f:2b:26:
         46:ca:cc:14:5f:9d:c1:c3:27:ea:da:97:11:b0:30:37:bf:0e:
         cd:be:25:ff:eb:9b:06:3d:52:e0:39:92:c5:18:a6:46:d7:6c:
         37:ba:f2:55:05:73:c8:ac:46:8f:3b:d1:49:8f:17:c5:06:f3:
         53:73:e4:fc:8f:12:c2:12:6c:2c:7b:94:da:6e:58:95:0f:63:
         f1:d2:78:0d:f9:bd:54:59:aa:42:78:50:00:68:6f:a0:50:b6:
         60:4f:9c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org