Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a3a2f33322d3336203d3e203532363632.roa
File:                     323830343a333362303a3a2f33322d3336203d3e203532363632.roa (raw, json)
Hash identifier:          VxAwwy+Qvk2Ogg878XciylIDLdqs9OnzdCVFhBeipcE=
Subject key identifier:   A4:23:E7:7D:E0:7B:E5:48:C9:3F:DB:2E:FF:D5:E7:3A:6E:3F:1A:B5
Certificate issuer:       /CN=3CFE0F85237AADDE9CF4CD7C4D2D10D7CA387FE6
Certificate serial:       05BF5AFFDA1650D1617508D9DDA27099BC28462F
Authority key identifier: 3C:FE:0F:85:23:7A:AD:DE:9C:F4:CD:7C:4D:2D:10:D7:CA:38:7F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFE0F85237AADDE9CF4CD7C4D2D10D7CA387FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a3a2f33322d3336203d3e203532363632.roa
Signing time:             Tue 09 Aug 2022 18:51:16 +0000
ROA not before:           Tue 09 Aug 2022 18:46:16 +0000
ROA not after:            Tue 08 Aug 2023 18:51:16 +0000
asID:                     52662
IP address blocks:        2804:33b0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bf:5a:ff:da:16:50:d1:61:75:08:d9:dd:a2:70:99:bc:28:46:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFE0F85237AADDE9CF4CD7C4D2D10D7CA387FE6
        Validity
            Not Before: Aug  9 18:46:16 2022 GMT
            Not After : Aug  8 18:51:16 2023 GMT
        Subject: CN=A423E77DE07BE548C93FDB2EFFD5E73A6E3F1AB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:45:e4:1e:6b:53:71:b9:ac:3c:4f:72:9d:
                    a7:f5:93:30:7f:ad:d0:6e:08:b5:b0:6f:6b:1f:9a:
                    15:93:99:82:c5:dc:29:c0:fe:2a:7a:35:c0:a6:d4:
                    8a:58:fa:56:34:ac:21:da:0c:53:83:a4:94:a1:d4:
                    4c:ee:71:ba:fa:2f:9d:80:20:d6:c0:2d:b4:44:ed:
                    8e:76:3d:3e:94:27:04:23:4e:52:08:91:a7:4d:6a:
                    b3:80:00:4c:5a:ec:48:81:72:4e:fa:46:93:ce:7c:
                    88:10:fc:18:dc:03:82:c7:40:2e:fb:48:83:ef:c3:
                    b1:7b:61:cb:e6:8d:48:55:0f:01:a0:36:ab:13:25:
                    c2:e9:ac:4e:ea:ce:5d:f9:da:f0:d5:fa:17:7e:e6:
                    f6:aa:d2:e6:b2:2b:5d:3d:72:1a:5f:51:61:e5:ba:
                    c1:05:7e:e1:94:e0:53:81:34:ac:26:73:49:35:34:
                    64:dc:e4:ec:c0:a1:09:7a:5e:d7:2a:ce:cf:2e:49:
                    c6:8b:95:55:ad:84:4c:11:cd:9d:80:98:d9:5e:cf:
                    87:93:03:46:8c:04:c7:af:2c:73:12:b7:f0:c7:9f:
                    2b:a0:8e:4d:28:79:e4:af:ce:23:fc:52:5d:06:04:
                    f1:47:db:68:84:e0:5f:6c:19:0f:a5:1c:e4:74:3f:
                    ac:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:23:E7:7D:E0:7B:E5:48:C9:3F:DB:2E:FF:D5:E7:3A:6E:3F:1A:B5
            X509v3 Authority Key Identifier:
                keyid:3C:FE:0F:85:23:7A:AD:DE:9C:F4:CD:7C:4D:2D:10:D7:CA:38:7F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3CFE0F85237AADDE9CF4CD7C4D2D10D7CA387FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFE0F85237AADDE9CF4CD7C4D2D10D7CA387FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a3a2f33322d3336203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:7a:23:2e:6f:c5:2a:eb:7c:2a:fa:d5:6e:8c:8d:5c:be:
         f4:64:f6:12:06:d9:4c:52:cd:4d:25:09:84:84:f4:e7:ee:ec:
         83:31:39:5d:47:17:31:d5:4c:6d:8b:cb:ca:88:9d:b8:4f:b6:
         89:67:ce:88:45:b7:95:69:11:86:da:99:45:5d:28:8a:be:8f:
         16:f8:55:38:69:13:3e:bf:c4:31:c1:c3:10:d2:f5:f1:4a:05:
         40:b7:c4:72:8f:3a:67:de:74:1e:21:8d:38:a7:38:1d:f9:1c:
         07:e8:5d:44:78:6f:65:45:58:a3:52:89:16:a4:e7:18:e3:66:
         3d:24:18:76:cb:04:a9:48:47:49:c4:88:76:12:3a:fb:8b:11:
         0e:8f:14:26:0d:b5:56:a9:81:ee:25:41:07:bc:59:e6:9b:49:
         28:ce:f5:5c:b9:29:c9:77:60:34:35:93:b7:fd:50:ac:2e:f2:
         78:29:6d:6c:a2:37:2e:dc:c6:7a:df:1d:31:31:48:cf:ba:cc:
         9b:8d:97:51:21:ff:68:d3:ee:dc:b8:a3:90:e0:77:d3:2a:df:
         81:b3:55:9e:6f:b1:7e:37:50:f9:bb:a7:3a:3d:91:3f:83:81:
         90:26:9d:1e:27:9f:ba:a6:6d:e3:2d:35:82:62:e7:38:35:13:
         3b:b4:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-ams.rpki-client.org