Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/323830343a333036383a3a2f33322d3336203d3e20323634393439.roa
File:                     323830343a333036383a3a2f33322d3336203d3e20323634393439.roa (raw, json)
Hash identifier:          f71JRY49XwJ04cG++1Ua5VgTHwjleeY1gIPxCskRwbg=
Subject key identifier:   26:07:BE:42:E9:68:E3:FF:9E:A0:ED:F1:28:30:BF:84:F3:EF:04:07
Certificate issuer:       /CN=C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C
Certificate serial:       03357DC7D084A75B1BC974384A19BA2AD3175234
Authority key identifier: C3:F4:7A:79:26:CF:51:0B:81:6F:1C:82:F5:EB:FD:F7:39:DE:FC:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/323830343a333036383a3a2f33322d3336203d3e20323634393439.roa
Signing time:             Sat 16 Mar 2024 13:32:32 +0000
ROA not before:           Sat 16 Mar 2024 13:27:32 +0000
ROA not after:            Sat 15 Mar 2025 13:32:32 +0000
asID:                     264949
IP address blocks:        2804:3068::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:35:7d:c7:d0:84:a7:5b:1b:c9:74:38:4a:19:ba:2a:d3:17:52:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C
        Validity
            Not Before: Mar 16 13:27:32 2024 GMT
            Not After : Mar 15 13:32:32 2025 GMT
        Subject: CN=2607BE42E968E3FF9EA0EDF12830BF84F3EF0407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b1:56:ef:02:55:e0:9c:59:73:84:fd:77:7b:
                    43:cc:45:b4:67:91:42:7e:87:e4:72:b3:01:ad:b2:
                    c8:3e:5e:f5:bd:0c:fe:aa:9c:99:6a:4a:91:32:a4:
                    b2:12:af:9f:a1:4c:f1:8a:23:a7:5c:55:85:29:76:
                    dc:5d:ff:cb:b3:f9:78:b0:29:67:6e:cc:b2:e4:ef:
                    42:75:39:8e:7a:39:4d:21:d4:0f:7c:68:4f:87:76:
                    f0:e3:83:7c:0a:15:a4:01:9b:4e:a9:88:b2:e6:3e:
                    0e:cd:91:11:c5:c1:4b:e7:e8:38:b7:f1:29:8a:3e:
                    ad:3f:0a:40:c4:5a:7d:1d:1f:77:46:37:3d:1e:f9:
                    3c:5c:07:c8:7e:c2:81:d2:10:11:d1:3c:f3:28:04:
                    82:1b:f6:25:0b:96:cd:9f:32:d3:4f:73:b4:d6:bd:
                    e4:7f:db:05:5f:ab:09:39:db:b4:4e:38:d8:94:05:
                    f5:d0:cf:c3:c2:95:52:77:50:f9:8e:de:1a:c7:46:
                    36:3f:94:fe:04:f4:f6:ff:60:9a:82:93:50:4d:76:
                    0e:ab:0e:a6:95:9f:eb:05:9f:a4:dd:e9:21:a0:d0:
                    2b:8f:35:4e:8d:b4:aa:dd:32:0a:44:c8:f6:7e:0c:
                    7b:1a:3e:cc:ca:b5:67:01:30:1f:84:12:d7:7d:fc:
                    7a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:07:BE:42:E9:68:E3:FF:9E:A0:ED:F1:28:30:BF:84:F3:EF:04:07
            X509v3 Authority Key Identifier:
                keyid:C3:F4:7A:79:26:CF:51:0B:81:6F:1C:82:F5:EB:FD:F7:39:DE:FC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/323830343a333036383a3a2f33322d3336203d3e20323634393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3068::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:c4:27:97:a9:dc:ab:3b:f7:87:bc:ae:02:47:15:fa:15:be:
         5b:67:a6:5e:37:41:7c:2e:4b:24:3c:f4:9c:17:f8:c7:b7:5b:
         14:f6:cc:2a:b2:d2:1b:d8:1d:f3:ad:76:c1:7b:96:ed:4f:c0:
         b3:69:c2:44:cf:a8:ce:f8:dd:89:c0:ad:37:0f:34:05:c8:19:
         57:f4:9c:17:28:a7:c4:f4:50:ed:ae:50:57:01:8f:c3:e5:c8:
         cf:49:e4:7c:b1:e9:6b:cb:26:7b:ff:11:c5:a3:60:01:56:41:
         65:66:f2:14:3d:d0:03:7b:05:78:41:8a:01:de:57:33:90:30:
         e7:3c:3d:31:e8:8c:bc:7a:b7:88:92:e5:85:f4:26:81:7b:3b:
         0f:26:39:9a:fb:5a:89:37:a8:f2:1e:b9:00:49:fd:ee:16:7d:
         1e:67:27:4f:50:86:bd:af:51:ee:15:8e:9d:01:86:95:aa:4d:
         9e:50:ff:49:2c:7d:76:17:b9:c4:f6:d3:48:eb:03:c9:68:9c:
         83:7e:39:80:4e:8d:8e:23:3a:49:ed:a0:7d:db:7c:40:6d:38:
         47:af:51:62:3f:a7:ea:1c:cc:72:f0:c7:1c:f8:47:a6:ec:b1:
         c8:9b:f3:b3:e4:08:e8:ea:69:87:e9:80:1c:93:6c:d0:bd:96:
         23:23:e3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org