Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/323830343a323161633a383030303a3a2f33332d3333203d3e20323634353636.roa
File:                     323830343a323161633a383030303a3a2f33332d3333203d3e20323634353636.roa (raw, json)
Hash identifier:          IlFdfOpsFwF6DrljAx9HTC4BA8OmPr3cNnvK9uBnhOc=
Subject key identifier:   9D:00:26:E1:7B:19:C7:85:44:A4:C9:A4:7F:7E:C0:08:49:1D:50:38
Certificate issuer:       /CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
Certificate serial:       02AC63676BEA00BDEF0DE7F8F805C9A6F3304A26
Authority key identifier: E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/323830343a323161633a383030303a3a2f33332d3333203d3e20323634353636.roa
Signing time:             Wed 23 Feb 2022 19:10:57 +0000
ROA not before:           Wed 23 Feb 2022 19:05:57 +0000
ROA not after:            Wed 22 Feb 2023 19:10:57 +0000
asID:                     264566
IP address blocks:        2804:21ac:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ac:63:67:6b:ea:00:bd:ef:0d:e7:f8:f8:05:c9:a6:f3:30:4a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
        Validity
            Not Before: Feb 23 19:05:57 2022 GMT
            Not After : Feb 22 19:10:57 2023 GMT
        Subject: CN=9D0026E17B19C78544A4C9A47F7EC008491D5038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:e9:5c:b7:b9:79:2b:b7:c5:ff:fb:e4:95:
                    da:e0:fc:f8:62:42:5f:f9:40:32:be:67:5a:2a:77:
                    cc:12:33:30:4c:c1:21:c8:fa:18:9d:77:86:b0:b8:
                    56:fd:71:4f:99:66:f2:64:19:d8:93:a3:f4:31:ff:
                    26:a0:88:2e:ef:6f:a5:b0:13:36:bc:7d:a7:78:89:
                    1b:1f:7c:48:30:9a:df:e3:f2:7a:2b:a6:c7:aa:60:
                    f2:d2:7b:22:5b:91:94:af:a3:ce:e0:0f:34:90:0f:
                    9f:98:8c:c7:3d:e5:71:e8:b3:0a:61:7e:5c:49:da:
                    22:25:3a:94:9a:32:72:36:db:02:b5:ad:43:40:87:
                    78:60:dc:c6:45:b9:c2:3a:fc:6e:b9:55:5f:b0:e6:
                    6d:75:c4:b5:af:14:ee:1d:2e:68:2e:ed:fd:5b:34:
                    10:f6:3c:ab:2a:8c:d7:77:c0:77:70:51:62:19:9a:
                    5f:87:85:62:0d:56:f4:e2:c7:b5:e4:d4:5a:50:1f:
                    af:9a:5e:f6:59:5e:16:d1:bb:b8:bd:c6:cf:85:4d:
                    47:d8:6d:e8:9c:93:d7:93:d7:c7:ee:64:80:92:80:
                    c4:26:7a:a8:a2:3f:58:f4:a1:43:2c:d0:aa:18:80:
                    3d:16:2e:e1:86:f6:31:5c:67:72:62:f2:11:bd:80:
                    82:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:00:26:E1:7B:19:C7:85:44:A4:C9:A4:7F:7E:C0:08:49:1D:50:38
            X509v3 Authority Key Identifier:
                keyid:E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/323830343a323161633a383030303a3a2f33332d3333203d3e20323634353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21ac:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:71:9f:ac:5e:48:2c:ab:c9:ea:ab:df:74:a0:64:0c:07:ba:
         48:73:88:85:7a:c8:e4:d0:b1:e2:53:0e:2e:31:eb:38:3e:9d:
         9a:f3:d4:73:5c:51:e2:45:a9:7c:c8:ae:78:c0:8d:a1:26:fa:
         7a:08:fd:ab:ef:26:d8:18:53:bb:77:9f:36:ce:5d:52:f4:30:
         d3:c6:fe:25:0e:3a:d1:d3:44:81:fd:41:e0:ba:0b:98:91:8c:
         6a:6f:3e:b1:9c:14:47:a0:34:02:a1:85:d2:17:b5:e6:17:4b:
         82:2d:6f:b2:2b:ea:4d:b3:84:12:ab:c5:52:bc:d5:51:0d:a6:
         94:56:27:23:5e:c7:a9:96:37:de:15:7d:10:1b:37:26:c3:5a:
         50:b3:62:f9:d3:fe:c5:64:e8:c0:e3:ca:07:f4:0d:d3:ed:7a:
         bd:44:57:71:8a:05:83:72:74:a5:7f:b9:07:0c:02:6e:d9:3d:
         89:f9:16:ad:f9:da:d1:60:54:d4:20:99:4b:ab:01:0d:a8:9d:
         73:69:5c:0a:46:8f:07:d2:01:47:c7:7f:9f:b2:97:33:7f:b7:
         9f:ef:cb:b8:9c:70:9e:63:3d:21:8c:8c:28:2e:ef:01:9a:f1:
         b1:3d:10:ab:70:00:c6:a2:f2:20:03:69:2f:12:a4:30:59:1d:
         79:dc:68:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org