Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/323830343a336235343a3a2f33332d3333203d3e20323636313432.roa
File:                     323830343a336235343a3a2f33332d3333203d3e20323636313432.roa (raw, json)
Hash identifier:          O/OZvWCsCggu8Rya/94P9nmFgtezCMDUDyM51TkFJP4=
Subject key identifier:   B8:15:E3:93:D8:AE:8C:5D:07:B3:E7:8B:6F:00:79:63:D7:24:0D:65
Certificate issuer:       /CN=AAEBA2B9A371A3B78A412C2614280CF3CED30EB3
Certificate serial:       54D977EB6612CFB01AF0E4ACC24DEA25EEDE7F8E
Authority key identifier: AA:EB:A2:B9:A3:71:A3:B7:8A:41:2C:26:14:28:0C:F3:CE:D3:0E:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAEBA2B9A371A3B78A412C2614280CF3CED30EB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/323830343a336235343a3a2f33332d3333203d3e20323636313432.roa
Signing time:             Fri 22 Dec 2023 19:14:53 +0000
ROA not before:           Fri 22 Dec 2023 19:09:53 +0000
ROA not after:            Fri 20 Dec 2024 19:14:53 +0000
asID:                     266142
IP address blocks:        2804:3b54::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d9:77:eb:66:12:cf:b0:1a:f0:e4:ac:c2:4d:ea:25:ee:de:7f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAEBA2B9A371A3B78A412C2614280CF3CED30EB3
        Validity
            Not Before: Dec 22 19:09:53 2023 GMT
            Not After : Dec 20 19:14:53 2024 GMT
        Subject: CN=B815E393D8AE8C5D07B3E78B6F007963D7240D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:13:ca:59:05:58:be:a3:ef:0e:5c:23:30:34:
                    c4:cb:f1:c7:9b:dd:06:ca:8d:91:a8:4e:88:c7:02:
                    a8:49:96:5e:30:ae:be:8c:c8:25:ae:e3:30:99:03:
                    c7:0c:60:76:c7:a5:39:47:d1:b4:90:54:72:17:cb:
                    0b:11:84:50:f4:8e:ea:59:bd:49:41:84:26:40:d5:
                    a1:4b:a7:6b:50:3d:00:02:44:71:ba:2b:dc:ac:f2:
                    aa:8a:ca:08:9a:25:de:93:bd:ae:52:f3:8a:6e:bd:
                    6d:60:5a:80:9a:98:9a:fb:d3:8d:4d:07:01:56:b2:
                    7a:59:1e:a5:2a:4a:41:1e:1c:ab:66:1a:55:a2:d1:
                    0b:d3:54:fc:c9:6f:9b:6a:e3:ba:bc:e1:e6:c5:b9:
                    4d:a1:e4:6d:2a:56:c4:b2:d8:5f:a8:f2:85:85:f0:
                    46:be:b9:c3:9e:69:ec:d9:77:f1:87:af:35:10:9e:
                    cf:44:5e:94:67:7a:16:c7:f2:9e:8e:ec:6b:45:62:
                    3b:6a:09:34:d8:93:05:5a:ec:f8:f6:ad:e9:30:0a:
                    53:9b:ed:d4:e9:99:4c:f6:4e:3f:30:31:2c:0d:b0:
                    86:78:8e:29:24:7f:b1:69:5c:47:65:4e:76:6e:19:
                    9a:56:6f:10:8e:bc:66:76:14:54:71:b4:9c:17:e2:
                    50:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:15:E3:93:D8:AE:8C:5D:07:B3:E7:8B:6F:00:79:63:D7:24:0D:65
            X509v3 Authority Key Identifier:
                keyid:AA:EB:A2:B9:A3:71:A3:B7:8A:41:2C:26:14:28:0C:F3:CE:D3:0E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/AAEBA2B9A371A3B78A412C2614280CF3CED30EB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAEBA2B9A371A3B78A412C2614280CF3CED30EB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/323830343a336235343a3a2f33332d3333203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b54::/33

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:4d:ec:f8:6d:28:15:6d:26:7d:d6:a2:5d:4c:89:12:c5:
         a1:2a:de:63:6c:1a:c4:20:bb:3f:73:bf:d5:68:3f:58:4c:ed:
         3d:3c:eb:84:8d:3b:d6:3f:93:37:ec:e4:28:ae:ca:0a:30:5d:
         cd:43:b2:80:04:ba:62:4c:13:69:77:6a:64:76:3d:18:af:e1:
         66:03:7c:24:1e:03:7c:1e:d3:e9:95:7b:0c:22:b0:d9:b5:8a:
         b8:17:29:06:ac:59:b0:f0:8b:0d:fd:48:a6:11:48:85:a1:cb:
         ac:4f:70:fb:8c:a5:d9:5c:90:f5:f9:c6:3e:ab:dc:d6:f4:63:
         03:75:43:99:72:d4:71:cd:ea:bb:94:ea:3b:35:3e:4b:dd:4f:
         f4:48:72:b5:04:90:88:3b:aa:fb:2e:71:5c:13:a1:fc:80:5c:
         05:be:00:f7:fa:d7:d3:0d:af:c4:96:2e:3a:49:c0:73:8e:cd:
         d5:54:4e:bf:9b:00:ad:01:1f:5d:7b:e9:09:5f:f1:09:af:ab:
         7c:6a:a1:a3:b4:3b:31:57:b9:f4:db:85:4e:72:4c:28:d3:96:
         92:90:83:ae:44:15:f9:f8:2b:13:1b:1b:47:b0:b8:8a:36:8d:
         a2:0d:4b:df:9c:c0:8a:5a:38:8d:27:81:01:fc:53:ec:5f:cb:
         0b:18:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org