Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a383030303a3a2f33332d3333203d3e20323636353435.roa
File:                     323830343a336461383a383030303a3a2f33332d3333203d3e20323636353435.roa (raw, json)
Hash identifier:          kAbaxmkOcpwZbbO+Fli0iHEN80PczTSsUMhJZyOtDYE=
Subject key identifier:   CB:F7:23:78:51:DE:42:9B:CF:AE:E4:87:FA:A3:89:BE:EE:57:96:FC
Certificate issuer:       /CN=61265445CC0AF18FCB619E3470E1DD8B9CCE1635
Certificate serial:       2E532D6BAD8A96A892F5413E9A77CDC56740F864
Authority key identifier: 61:26:54:45:CC:0A:F1:8F:CB:61:9E:34:70:E1:DD:8B:9C:CE:16:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61265445CC0AF18FCB619E3470E1DD8B9CCE1635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a383030303a3a2f33332d3333203d3e20323636353435.roa
Signing time:             Wed 29 Mar 2023 23:29:10 +0000
ROA not before:           Wed 29 Mar 2023 23:24:10 +0000
ROA not after:            Wed 27 Mar 2024 23:29:10 +0000
asID:                     266545
IP address blocks:        2804:3da8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:53:2d:6b:ad:8a:96:a8:92:f5:41:3e:9a:77:cd:c5:67:40:f8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61265445CC0AF18FCB619E3470E1DD8B9CCE1635
        Validity
            Not Before: Mar 29 23:24:10 2023 GMT
            Not After : Mar 27 23:29:10 2024 GMT
        Subject: CN=CBF7237851DE429BCFAEE487FAA389BEEE5796FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:39:63:7b:fb:2e:ce:03:ca:c9:d9:a4:d8:
                    f3:e5:3f:f3:fe:08:1e:96:5f:de:7a:35:6e:13:3a:
                    92:b7:79:c0:46:d3:36:00:81:2c:1c:0c:67:76:c8:
                    fe:a7:46:4a:73:11:ae:92:b4:da:cc:24:18:98:8a:
                    13:b6:44:4a:d7:81:57:ca:26:86:40:eb:32:10:36:
                    fc:86:ea:fe:b9:ce:e3:57:20:aa:14:96:6e:2e:54:
                    da:c4:2b:c6:aa:c5:ed:f3:9f:55:39:e2:d9:41:15:
                    96:80:f4:e7:f0:4b:f7:55:9a:24:a9:87:d8:2a:2f:
                    bb:35:1b:05:e6:bb:fc:85:f9:a7:dc:d2:59:f8:81:
                    4c:c7:fb:44:9e:d2:6b:00:a2:4a:10:f4:76:79:10:
                    c6:60:ed:62:3e:62:07:cb:90:e6:99:54:65:9e:53:
                    d8:a9:76:81:af:b8:fc:43:9c:e6:29:4d:b7:cf:95:
                    61:b4:9e:9f:c1:96:ff:c3:d3:ba:17:a2:46:1a:4f:
                    d6:e5:8d:a4:ab:9d:01:a7:df:d0:a2:1e:aa:5d:73:
                    ee:4d:88:93:63:35:86:f8:70:9c:4c:d8:a3:47:4a:
                    5d:6c:c3:c7:d5:9a:95:c5:2d:2d:4b:85:5a:c2:a6:
                    30:33:00:d3:56:7b:5d:2e:f0:92:ce:6b:b3:b6:bd:
                    4e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F7:23:78:51:DE:42:9B:CF:AE:E4:87:FA:A3:89:BE:EE:57:96:FC
            X509v3 Authority Key Identifier:
                keyid:61:26:54:45:CC:0A:F1:8F:CB:61:9E:34:70:E1:DD:8B:9C:CE:16:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/61265445CC0AF18FCB619E3470E1DD8B9CCE1635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61265445CC0AF18FCB619E3470E1DD8B9CCE1635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a383030303a3a2f33332d3333203d3e20323636353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3da8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         66:c7:12:aa:d6:3d:76:15:2f:a8:56:fb:aa:1f:fc:6d:02:ce:
         13:fd:2d:b8:15:2c:95:3c:38:bc:88:e0:0c:ac:ac:08:0d:39:
         8b:33:6a:ee:6b:37:42:a5:cf:04:6b:c6:a5:c7:c5:de:5a:de:
         6e:d6:af:45:c2:ff:09:b7:95:62:20:7f:00:01:6c:b1:77:95:
         72:5a:53:cd:5f:9d:5e:8f:eb:53:71:90:ac:f0:5e:85:f4:65:
         f1:84:98:67:72:af:49:38:85:53:28:7d:18:66:c8:4c:b4:20:
         fe:f5:74:df:c5:c2:03:e6:f7:4b:88:6d:7b:ee:8a:08:df:3d:
         78:6a:ae:a5:7a:22:81:1e:a4:fd:bb:b1:9a:68:f7:02:e6:d4:
         c5:70:7b:b2:5a:fd:d3:f7:e3:7b:05:6a:cb:38:23:8b:27:17:
         38:87:96:ec:48:80:6e:9c:c9:ba:03:dc:e3:ed:b3:c4:1c:d5:
         39:42:6d:c7:a4:cc:22:44:33:ee:b2:8b:11:ae:1b:c2:d4:93:
         3e:3f:0b:8b:6e:35:16:18:58:a6:f6:4b:ac:b6:87:b6:2e:80:
         16:35:c5:44:d0:ba:f7:17:9e:31:11:ad:6b:b4:d9:3d:40:5e:
         87:da:7a:a4:4d:17:a1:91:60:e2:70:62:89:d6:5f:91:8b:03:
         81:cf:ab:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org