Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FCjdLGVFJnpgohqJPmtGHR7BEnZH79i49QpT1eyMm1m/0/323830343a343937633a3a2f33322d3332203d3e20323632383936.roa
File:                     323830343a343937633a3a2f33322d3332203d3e20323632383936.roa (raw, json)
Hash identifier:          LMbuWh9s9gE567M7svbu9gftJVjOgmQiBTPiB+hNyoA=
Subject key identifier:   1E:C6:49:36:87:FA:A6:FB:0E:F3:50:90:51:A7:AB:E9:60:12:C5:2C
Certificate issuer:       /CN=3BEDCB23576141B02E312775C3A8D076A135A7C5
Certificate serial:       5647F968339F7D238DEB7E06E06FAD667F652C76
Authority key identifier: 3B:ED:CB:23:57:61:41:B0:2E:31:27:75:C3:A8:D0:76:A1:35:A7:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BEDCB23576141B02E312775C3A8D076A135A7C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FCjdLGVFJnpgohqJPmtGHR7BEnZH79i49QpT1eyMm1m/0/323830343a343937633a3a2f33322d3332203d3e20323632383936.roa
Signing time:             Sat 10 Jun 2023 12:54:08 +0000
ROA not before:           Sat 10 Jun 2023 12:49:08 +0000
ROA not after:            Sat 08 Jun 2024 12:54:08 +0000
asID:                     262896
IP address blocks:        2804:497c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:47:f9:68:33:9f:7d:23:8d:eb:7e:06:e0:6f:ad:66:7f:65:2c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BEDCB23576141B02E312775C3A8D076A135A7C5
        Validity
            Not Before: Jun 10 12:49:08 2023 GMT
            Not After : Jun  8 12:54:08 2024 GMT
        Subject: CN=1EC6493687FAA6FB0EF3509051A7ABE96012C52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:22:09:55:f0:60:17:6a:bd:10:31:2b:54:
                    40:f6:08:1c:40:21:46:6e:81:a6:3d:de:1e:c8:82:
                    7d:32:7a:03:e4:e2:e0:09:20:60:5e:53:f0:4c:de:
                    05:64:5b:4c:9a:68:46:ac:b2:ff:ae:35:83:db:d9:
                    e0:1c:f6:01:b5:5d:04:80:00:b9:8e:63:f2:f4:ad:
                    5b:9e:2a:f9:fc:ba:fa:b1:cd:ee:9c:9f:0f:5b:f3:
                    16:e8:6f:8d:78:33:e2:49:54:21:73:b7:11:bb:36:
                    b6:93:be:93:d5:09:e1:32:b3:8f:4f:38:e5:85:cb:
                    06:18:13:66:ec:4c:ed:3b:a1:e7:23:f0:02:0b:64:
                    85:f9:39:1a:f2:40:73:e7:cc:5d:66:02:cb:41:27:
                    38:55:6f:32:8a:4d:37:a8:6d:9f:79:b4:eb:1a:70:
                    68:68:f4:f6:4c:81:d5:2f:bc:9c:92:b1:8e:3d:cc:
                    08:ab:d6:ad:48:b8:7a:45:17:cb:7c:d8:88:50:40:
                    98:bf:73:41:8f:33:f5:40:44:ed:8c:91:cf:37:60:
                    a4:07:d9:27:7b:30:3b:d8:60:e9:68:b7:f4:7a:49:
                    cf:3c:d8:1a:19:ab:b9:ad:24:a9:84:d6:04:f8:36:
                    e3:74:43:24:58:61:5e:77:54:a5:56:1e:6a:f7:e1:
                    b6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C6:49:36:87:FA:A6:FB:0E:F3:50:90:51:A7:AB:E9:60:12:C5:2C
            X509v3 Authority Key Identifier:
                keyid:3B:ED:CB:23:57:61:41:B0:2E:31:27:75:C3:A8:D0:76:A1:35:A7:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FCjdLGVFJnpgohqJPmtGHR7BEnZH79i49QpT1eyMm1m/0/3BEDCB23576141B02E312775C3A8D076A135A7C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BEDCB23576141B02E312775C3A8D076A135A7C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FCjdLGVFJnpgohqJPmtGHR7BEnZH79i49QpT1eyMm1m/0/323830343a343937633a3a2f33322d3332203d3e20323632383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:497c::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:e9:b0:f1:c9:58:3a:a1:0c:97:f1:39:5a:21:64:c3:8f:49:
         15:29:76:a7:e1:e4:fe:89:2c:be:e3:9e:01:91:55:cb:56:ed:
         30:b6:25:b5:79:51:c4:7e:af:c6:2f:43:40:fa:53:4f:fb:0c:
         4d:4d:88:81:fa:40:73:f2:ba:30:a8:80:f2:58:73:8d:40:f8:
         fe:f2:ad:30:16:8e:af:17:86:b4:b0:90:83:79:2e:19:7f:3f:
         69:aa:85:a4:13:15:f3:84:99:85:6e:ba:94:a6:5e:eb:fc:05:
         a0:30:88:ab:cd:d4:ff:69:aa:a9:ca:e0:ce:2e:8a:6a:78:1b:
         73:a5:08:d7:8e:96:bb:c0:ff:ba:fe:a7:2a:27:6f:3f:13:93:
         7f:51:0d:a8:66:a8:08:e0:27:3e:78:92:81:fc:fe:0f:3a:69:
         a4:7b:47:d6:1f:9b:81:22:2a:ee:e7:a4:94:a7:88:22:c1:7b:
         af:f3:6f:ed:d1:01:c6:f2:0e:8c:51:29:5b:03:bf:fe:fb:bb:
         72:a8:e8:d3:21:00:05:1b:de:d7:84:c5:2c:8f:41:e3:13:82:
         10:7a:d7:c0:26:ef:b0:36:ff:d7:1e:32:4f:4c:88:07:41:9c:
         0b:d9:7d:63:70:dc:9b:c0:38:0f:7c:46:6b:14:fc:f5:0b:a2:
         a6:ef:53:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org