Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/323830343a326166303a3a2f33322d3438203d3e20323635313236.roa
File:                     323830343a326166303a3a2f33322d3438203d3e20323635313236.roa (raw, json)
Hash identifier:          eF5kjOpoU9nDoLazkS2FkCB8prZYXibWJ4qK5/Xri84=
Subject key identifier:   13:44:00:C2:D6:01:A4:AC:82:2B:86:30:19:56:B1:C6:30:A9:D8:75
Certificate issuer:       /CN=35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4
Certificate serial:       20CF056EA682A0ABEC37213F631BE19692956CD0
Authority key identifier: 35:FF:2D:89:B6:8D:E7:13:78:B2:A0:3A:04:E6:4F:9E:8E:7E:CA:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/323830343a326166303a3a2f33322d3438203d3e20323635313236.roa
Signing time:             Fri 21 Apr 2023 14:31:28 +0000
ROA not before:           Fri 21 Apr 2023 14:26:28 +0000
ROA not after:            Fri 19 Apr 2024 14:31:28 +0000
asID:                     265126
IP address blocks:        2804:2af0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cf:05:6e:a6:82:a0:ab:ec:37:21:3f:63:1b:e1:96:92:95:6c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4
        Validity
            Not Before: Apr 21 14:26:28 2023 GMT
            Not After : Apr 19 14:31:28 2024 GMT
        Subject: CN=134400C2D601A4AC822B86301956B1C630A9D875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c2:15:50:69:1d:60:61:ea:62:0c:64:ce:39:
                    85:3f:63:01:e5:67:fb:80:6e:80:8a:1f:80:9d:b2:
                    72:eb:99:b8:7c:7d:e0:3b:6c:4f:a5:a4:68:75:74:
                    d3:ab:54:01:0f:ea:5f:2a:89:85:30:46:11:4f:7d:
                    64:ca:aa:ea:7f:eb:d1:7e:1f:c3:33:29:c1:6d:26:
                    7d:f8:92:db:eb:de:83:8c:82:90:34:d2:ef:8b:31:
                    aa:91:ca:23:80:73:34:11:d6:06:23:2e:20:a7:3e:
                    9b:a3:5a:88:fc:30:4c:da:06:1a:d3:ba:b9:fa:09:
                    59:d3:33:ca:ce:13:89:9c:ba:3b:52:e1:56:62:31:
                    54:f6:03:31:1c:75:9d:d7:2c:9f:89:75:bc:d7:fc:
                    e2:b1:c0:5f:2e:fb:9a:cd:5d:9b:bb:d4:cc:10:f0:
                    6b:dc:e6:b3:ee:16:b2:ef:30:54:e9:3d:0f:8d:a7:
                    39:22:ea:9f:97:4b:bb:dc:ef:c3:75:18:0d:1f:0a:
                    44:dd:37:f3:d4:b6:d6:16:0b:91:cd:8a:1d:e7:52:
                    e7:c8:7d:59:90:23:f1:39:1e:8d:97:b6:ef:41:70:
                    a3:5e:4b:66:25:2f:3d:c5:6a:9a:5e:86:a6:96:0f:
                    37:d3:2f:b6:bc:80:15:3c:cd:07:9c:43:ca:80:58:
                    63:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:44:00:C2:D6:01:A4:AC:82:2B:86:30:19:56:B1:C6:30:A9:D8:75
            X509v3 Authority Key Identifier:
                keyid:35:FF:2D:89:B6:8D:E7:13:78:B2:A0:3A:04:E6:4F:9E:8E:7E:CA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/323830343a326166303a3a2f33322d3438203d3e20323635313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2af0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:a4:15:d4:e1:77:d2:90:57:a5:e2:9a:fd:70:c0:f2:de:22:
         7c:be:ee:57:ec:a1:db:db:8a:c6:06:9e:c9:aa:de:cc:bf:c5:
         c6:a2:ab:59:5d:cd:5b:ea:d8:1f:d1:0b:0f:53:11:bb:51:b5:
         1d:86:3d:9c:9d:58:ca:10:02:f2:9a:3e:3f:f7:2d:f5:fe:25:
         45:57:38:f7:12:a8:05:29:a2:e9:ec:f2:ce:0c:14:62:fe:8e:
         16:4a:7b:8d:43:bb:c9:0b:75:d7:65:9f:51:c2:66:69:d0:2d:
         15:c3:ec:b8:c0:d7:2b:ea:c4:3c:d3:6f:4e:df:1a:89:9f:f3:
         46:4d:08:ce:18:a0:30:8a:fb:ae:f1:46:34:c3:c7:f8:ed:d3:
         10:3d:2e:b9:c8:4c:f5:f9:9f:61:fa:29:d7:14:4d:35:0a:5f:
         27:2b:85:4f:58:b8:63:22:a0:cf:a2:81:92:40:57:b9:75:8e:
         39:b5:51:6e:8b:f9:63:d1:2c:d1:b2:9f:9c:0b:23:c5:e9:02:
         b8:ba:76:b9:fc:c0:70:bd:2a:5f:59:03:eb:54:bc:38:7a:7b:
         a0:f4:9f:30:a3:ff:de:47:09:70:56:b5:e6:b7:40:dc:78:55:
         2b:37:a9:95:d8:37:0d:e2:83:be:ef:99:37:c4:2c:21:7b:03:
         3e:49:ca:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org