Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/2/323830343a333930383a3a2f33322d3430203d3e20323636353139.roa
File:                     323830343a333930383a3a2f33322d3430203d3e20323636353139.roa (raw, json)
Hash identifier:          0v2s7xleiKu9F4NuUkQJj1nXyK1h+6cBv24viy7oiEc=
Subject key identifier:   7C:67:0D:D6:E7:00:91:4C:60:E4:43:43:54:3B:7E:9B:7C:7E:71:AE
Certificate issuer:       /CN=3B1DCB1E2F97CA111572D90416CD86C22F0C9283
Certificate serial:       6A4449FA2480642E050508444370FE533F0E1839
Authority key identifier: 3B:1D:CB:1E:2F:97:CA:11:15:72:D9:04:16:CD:86:C2:2F:0C:92:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B1DCB1E2F97CA111572D90416CD86C22F0C9283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/2/323830343a333930383a3a2f33322d3430203d3e20323636353139.roa
Signing time:             Wed 24 Apr 2024 22:01:47 +0000
ROA not before:           Wed 24 Apr 2024 21:56:47 +0000
ROA not after:            Wed 23 Apr 2025 22:01:47 +0000
asID:                     266519
IP address blocks:        2804:3908::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:44:49:fa:24:80:64:2e:05:05:08:44:43:70:fe:53:3f:0e:18:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B1DCB1E2F97CA111572D90416CD86C22F0C9283
        Validity
            Not Before: Apr 24 21:56:47 2024 GMT
            Not After : Apr 23 22:01:47 2025 GMT
        Subject: CN=7C670DD6E700914C60E44343543B7E9B7C7E71AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a3:dc:fa:78:c7:ed:22:39:f7:ac:db:48:ea:
                    ec:a1:be:fd:22:b3:e6:0d:4d:3b:e8:d0:96:c0:03:
                    49:d6:0e:41:b9:38:7b:d0:ce:99:8a:78:c3:bc:21:
                    f1:fc:2f:4a:d0:2d:e9:4c:1d:92:92:b3:ca:ec:df:
                    14:30:8e:42:e6:da:33:37:d2:58:d5:be:62:3e:3e:
                    de:86:4e:2e:ad:8c:61:9f:44:a3:60:eb:b4:a4:7c:
                    a4:a8:ec:45:bc:14:ae:20:ef:c2:3f:aa:e9:b1:52:
                    17:01:d4:42:f2:e3:23:1e:11:95:02:1f:f6:da:74:
                    8d:2d:86:dd:d1:07:c5:e8:c0:32:60:a8:3e:d2:c9:
                    03:78:97:83:92:36:7a:8a:ad:c4:f9:c9:df:ab:f1:
                    16:e9:54:c2:6d:26:05:ad:f3:bd:6c:ee:ef:78:c2:
                    d8:da:66:7d:b1:15:df:7a:6c:e9:e2:c3:c8:36:01:
                    30:e3:7c:25:52:fb:64:c5:19:af:0b:e0:ec:3e:f3:
                    1e:8a:82:86:d4:ff:34:3c:48:d3:eb:e0:9f:26:0f:
                    e5:e0:0b:3a:b6:5d:cc:a4:c7:3c:73:01:37:ca:8b:
                    8c:df:2b:2f:ae:38:a1:6b:41:d8:1b:e5:3f:af:ba:
                    11:33:93:4e:fb:59:11:a5:59:99:aa:b3:d4:76:bb:
                    18:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:67:0D:D6:E7:00:91:4C:60:E4:43:43:54:3B:7E:9B:7C:7E:71:AE
            X509v3 Authority Key Identifier:
                keyid:3B:1D:CB:1E:2F:97:CA:11:15:72:D9:04:16:CD:86:C2:2F:0C:92:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/2/3B1DCB1E2F97CA111572D90416CD86C22F0C9283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B1DCB1E2F97CA111572D90416CD86C22F0C9283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/2/323830343a333930383a3a2f33322d3430203d3e20323636353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3908::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:a9:06:b9:b0:bd:18:11:f4:fd:6b:09:07:05:07:a6:7f:5e:
         41:0d:af:73:2d:62:0a:62:48:81:83:44:15:35:6b:0c:d2:3c:
         6a:86:92:e9:a8:8c:04:3a:3c:ef:37:36:e0:a2:06:3e:f6:fd:
         9a:f3:fe:57:8c:07:70:1c:90:fe:74:2d:34:0c:2b:7d:49:b0:
         22:64:40:57:bf:dd:7a:3b:19:ee:e3:fc:37:17:92:bf:10:18:
         0f:f3:7b:a1:ba:6c:f5:cd:05:ad:c2:99:e4:3e:6e:3c:da:c3:
         c0:83:54:af:42:0d:d2:85:5b:0a:84:c8:49:89:b3:0b:72:65:
         71:d2:92:2f:09:d0:16:9e:bd:54:e5:e5:f1:fc:69:8f:f4:27:
         75:83:e6:55:08:85:91:e6:59:cc:d1:b9:de:bb:de:37:2d:fb:
         38:51:7e:d5:40:7a:fc:6a:e0:28:b3:fc:eb:45:4f:7a:24:28:
         3a:36:66:7e:a0:0c:45:ac:ce:8f:df:d6:25:7d:67:94:1f:ad:
         3b:d3:63:a9:7d:ff:27:ae:cd:34:de:d0:83:d5:ea:c5:c1:1e:
         51:65:b9:7d:df:9f:10:70:74:0a:d2:be:0b:7b:27:03:30:02:
         53:7b:ee:5c:6d:35:ef:53:f2:40:8d:38:38:06:9e:fd:8c:d1:
         30:48:ae:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org