Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/323830343a333637303a3a2f33322d3438203d3e20323636333438.roa
File:                     323830343a333637303a3a2f33322d3438203d3e20323636333438.roa (raw, json)
Hash identifier:          p7Vv7rPqYfkvJKURcbYvcXuqfcBTfeNYvpZ1dIVvgYc=
Subject key identifier:   36:F6:F2:E3:94:F9:EE:37:F9:7F:B0:66:E9:83:C6:51:63:47:4A:7C
Certificate issuer:       /CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
Certificate serial:       6EA038D04741D78E8808655A96A027E38D37DC9C
Authority key identifier: E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/323830343a333637303a3a2f33322d3438203d3e20323636333438.roa
Signing time:             Mon 18 Dec 2023 20:00:00 +0000
ROA not before:           Mon 18 Dec 2023 19:55:00 +0000
ROA not after:            Mon 16 Dec 2024 20:00:00 +0000
asID:                     266348
IP address blocks:        2804:3670::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a0:38:d0:47:41:d7:8e:88:08:65:5a:96:a0:27:e3:8d:37:dc:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
        Validity
            Not Before: Dec 18 19:55:00 2023 GMT
            Not After : Dec 16 20:00:00 2024 GMT
        Subject: CN=36F6F2E394F9EE37F97FB066E983C65163474A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:78:f6:83:63:aa:0a:59:77:d1:f5:ca:de:
                    a4:86:76:67:a3:8f:c8:1e:85:e9:6f:27:bc:8c:6d:
                    c2:86:7f:a0:ea:9f:96:8c:e8:b7:99:16:75:0b:5c:
                    6c:1c:89:3d:a0:21:da:a1:bf:98:70:e2:c8:d3:bf:
                    cb:12:32:76:1d:44:5e:9a:1c:49:f2:4d:09:be:90:
                    96:ef:16:51:48:fd:8d:b6:ed:b0:89:09:5f:24:87:
                    bf:f5:b8:d0:72:da:03:d1:98:d7:9e:3e:c6:7a:e1:
                    c2:d0:36:d2:d1:57:6a:89:18:00:21:0a:c2:28:94:
                    3b:cd:b6:0e:40:ba:e5:fb:28:8b:8e:3e:58:ae:0a:
                    d9:ab:c4:c2:5d:00:fe:b5:0b:17:0a:8e:3e:e0:1c:
                    bb:de:42:ef:c8:44:a9:ee:c1:f6:b5:c4:29:6b:55:
                    2b:2d:9f:d2:9e:12:11:2b:dd:b0:b4:a1:eb:9a:22:
                    3c:0c:11:6f:36:07:f5:bc:0d:86:24:f7:44:98:5c:
                    0b:4e:13:98:2b:6c:b1:b3:73:fc:10:b5:58:14:ba:
                    56:74:4b:01:c6:39:7c:15:5e:d3:a6:b7:89:31:95:
                    18:64:d2:9d:df:02:5d:6d:26:dc:1a:77:79:f3:8e:
                    a1:3e:7d:a9:0c:5e:24:a8:42:2c:03:ff:ab:5d:cf:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F6:F2:E3:94:F9:EE:37:F9:7F:B0:66:E9:83:C6:51:63:47:4A:7C
            X509v3 Authority Key Identifier:
                keyid:E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/323830343a333637303a3a2f33322d3438203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3670::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:b8:34:a1:8d:58:11:22:21:8d:e0:e8:f2:28:61:0d:10:8f:
         05:df:59:cb:01:a3:3d:cf:33:be:82:a0:55:6b:a7:c1:01:f2:
         cb:25:7a:b0:f6:62:97:42:8f:06:21:d8:46:82:41:86:48:a4:
         8c:d6:de:21:9c:c9:a7:44:24:bf:42:5f:96:ae:9f:46:6e:e0:
         e3:03:bc:a3:70:41:91:c0:3f:6b:0c:24:4c:6f:9d:cb:8b:8a:
         e0:62:e4:f8:d9:ce:53:3b:f7:93:33:06:c9:e7:b8:f2:30:87:
         7c:85:da:18:36:8d:86:49:42:46:ab:7f:ca:08:9f:9c:15:f5:
         4d:81:5d:a7:19:39:54:96:61:59:7f:27:4b:bb:18:ec:a1:1b:
         63:c5:d6:b2:66:79:4e:ba:86:52:e7:e1:e8:89:91:55:4e:6d:
         51:eb:ec:b7:08:c1:70:94:b3:c2:fa:ef:3a:90:f7:f4:f6:e8:
         53:3a:60:eb:da:b2:72:87:32:f3:46:7e:68:8e:5c:1f:8c:fd:
         cc:a7:cc:f4:83:d7:c5:20:e6:14:dc:01:7b:2b:45:27:c4:c2:
         41:44:d9:9b:67:f1:17:4d:5e:99:76:1f:7b:03:97:ae:78:11:
         20:22:1a:de:83:2e:da:c2:f5:c0:e2:4a:b2:8a:c8:d5:42:69:
         ab:67:68:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org