Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/323830343a326338343a3a2f33322d3336203d3e20323635323234.roa
File:                     323830343a326338343a3a2f33322d3336203d3e20323635323234.roa (raw, json)
Hash identifier:          XOXWd5hjzEX6Clu0mxYYTEymqoswOY6oNobWx8XaoqI=
Subject key identifier:   89:29:44:36:BE:23:26:0A:B6:39:13:FA:9C:77:E7:63:A6:A7:5B:D4
Certificate issuer:       /CN=3D7DD86D98E5F298BC5AC280B49AB4B00A000666
Certificate serial:       02B8902B4933D49B10D78E758FA9DA04BF4FD5D0
Authority key identifier: 3D:7D:D8:6D:98:E5:F2:98:BC:5A:C2:80:B4:9A:B4:B0:0A:00:06:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D7DD86D98E5F298BC5AC280B49AB4B00A000666.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/323830343a326338343a3a2f33322d3336203d3e20323635323234.roa
Signing time:             Wed 03 Apr 2024 13:01:42 +0000
ROA not before:           Wed 03 Apr 2024 12:56:42 +0000
ROA not after:            Wed 02 Apr 2025 13:01:42 +0000
asID:                     265224
IP address blocks:        2804:2c84::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b8:90:2b:49:33:d4:9b:10:d7:8e:75:8f:a9:da:04:bf:4f:d5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D7DD86D98E5F298BC5AC280B49AB4B00A000666
        Validity
            Not Before: Apr  3 12:56:42 2024 GMT
            Not After : Apr  2 13:01:42 2025 GMT
        Subject: CN=89294436BE23260AB63913FA9C77E763A6A75BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8e:be:d5:bf:34:bc:bb:da:ef:78:b2:31:da:
                    f3:69:eb:92:49:19:af:9a:de:10:81:24:cc:57:d1:
                    41:fd:95:91:f5:97:42:9c:c5:83:f3:bf:25:12:e7:
                    83:86:7b:a7:96:1a:0b:36:91:d2:cd:ef:3d:c4:6b:
                    4c:39:f0:a6:c2:dd:1d:bf:e2:15:7f:bf:8c:fe:62:
                    b9:7c:57:36:84:b4:aa:77:16:af:d5:af:a7:66:7b:
                    9c:13:ff:49:0f:61:1a:d5:63:00:5f:42:8e:bd:b2:
                    a2:e5:3b:d9:18:c0:bb:64:1f:18:8e:89:99:9c:0c:
                    f8:bf:52:20:d5:dd:ea:c2:a2:3e:9c:b9:b7:10:0c:
                    cc:6e:62:2d:62:08:4f:f5:24:50:0f:d1:4e:90:6c:
                    be:9e:71:10:95:32:c3:5c:07:4d:d3:5d:2d:27:f9:
                    de:8f:ae:f3:a4:a4:e2:ca:52:ff:46:5d:3f:1d:fd:
                    19:74:4e:94:0c:b2:3a:68:6b:39:1c:db:37:a6:c6:
                    b7:59:9f:d0:4f:46:13:f7:28:d8:c9:23:2d:cb:a9:
                    d5:57:fc:73:5e:a3:6e:0d:d4:52:f8:18:f9:b2:10:
                    33:34:da:97:ad:26:f0:d4:64:f9:4b:3f:4c:da:e4:
                    b8:a8:6b:95:80:a8:da:da:c5:25:97:96:b2:81:26:
                    bb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:29:44:36:BE:23:26:0A:B6:39:13:FA:9C:77:E7:63:A6:A7:5B:D4
            X509v3 Authority Key Identifier:
                keyid:3D:7D:D8:6D:98:E5:F2:98:BC:5A:C2:80:B4:9A:B4:B0:0A:00:06:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3D7DD86D98E5F298BC5AC280B49AB4B00A000666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D7DD86D98E5F298BC5AC280B49AB4B00A000666.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/323830343a326338343a3a2f33322d3336203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c84::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:7c:b7:20:92:73:ab:72:f4:6e:67:26:49:81:ba:b5:4e:
         a3:63:69:dd:ee:84:43:66:87:93:84:a5:2c:5f:77:f2:2c:70:
         43:de:a9:42:ef:99:a6:85:cb:81:96:79:29:fc:d6:3b:f4:21:
         1b:8a:95:f0:e1:54:ea:08:aa:32:08:27:3a:e0:94:28:d7:35:
         15:ca:d6:ca:48:45:24:11:d5:82:ec:03:bb:fe:02:95:32:7c:
         54:54:40:54:21:11:9a:3e:c8:41:f8:87:1f:e2:14:09:38:9a:
         7c:71:44:ca:4b:6b:d4:39:03:ff:40:e4:3b:d7:47:aa:6f:db:
         82:ea:f7:9a:ed:24:27:4b:83:6c:22:35:c6:e8:6c:4e:1e:6e:
         da:b8:f7:3c:c4:48:22:7d:c6:51:66:b7:51:a4:2a:f8:54:98:
         3d:48:1b:d3:ca:6b:98:39:83:a3:dc:c1:16:d4:89:17:c2:53:
         e6:d5:4e:0e:9d:25:d3:1d:15:64:c4:d2:f9:84:30:29:a9:d7:
         9c:f4:61:f3:0c:1b:ea:7e:5e:4c:99:5a:51:88:5a:97:4f:ee:
         c0:c1:d3:36:4b:d7:69:8b:cc:97:8f:fa:53:fe:a4:13:1e:11:
         7a:fa:5a:fb:ea:87:d9:f2:d5:a9:dd:e5:3c:02:a5:b5:c3:95:
         c1:ee:55:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org