Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a383030303a3a2f33342d3334203d3e20323636363233.roa
File:                     323830343a336564343a383030303a3a2f33342d3334203d3e20323636363233.roa (raw, json)
Hash identifier:          PrurNyPsx/FeT3zZdfYB9Z/fQ+IN+k/Np6qhJgF7D9c=
Subject key identifier:   18:0F:E3:2E:B2:25:09:BE:44:14:4C:D7:BD:72:C1:53:EA:9E:2D:BD
Certificate issuer:       /CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
Certificate serial:       40CDDB2900120831FF445898D317DA0119A7A040
Authority key identifier: 3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a383030303a3a2f33342d3334203d3e20323636363233.roa
Signing time:             Thu 14 Mar 2024 02:29:23 +0000
ROA not before:           Thu 14 Mar 2024 02:24:23 +0000
ROA not after:            Thu 13 Mar 2025 02:29:23 +0000
asID:                     266623
IP address blocks:        2804:3ed4:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cd:db:29:00:12:08:31:ff:44:58:98:d3:17:da:01:19:a7:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
        Validity
            Not Before: Mar 14 02:24:23 2024 GMT
            Not After : Mar 13 02:29:23 2025 GMT
        Subject: CN=180FE32EB22509BE44144CD7BD72C153EA9E2DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bb:89:96:ab:b3:35:8a:90:e1:65:f5:00:2d:
                    41:e9:69:8c:5e:b5:f3:d8:dc:c5:44:f7:4f:9e:90:
                    a3:b9:4c:10:85:84:60:93:13:96:50:e2:2f:fd:85:
                    83:5a:29:4d:94:f8:2a:b2:56:0a:57:2e:76:c9:8a:
                    d3:32:c8:db:5b:7b:d4:2b:fb:55:d0:41:e7:aa:79:
                    93:a9:f6:d8:32:1b:45:0d:c5:de:d6:71:82:8f:00:
                    11:ad:c8:bc:78:2f:bf:4c:37:1a:d9:9e:b6:57:c5:
                    5d:d2:af:7a:d0:c6:f7:11:88:72:1f:23:c7:28:2e:
                    be:89:c7:71:50:09:91:3a:5f:87:00:51:e3:0c:59:
                    4e:06:86:87:09:51:92:61:f2:53:fd:25:0e:f5:19:
                    3f:56:73:5a:5d:01:4a:72:af:71:e3:b2:dd:99:68:
                    da:9b:1b:29:c8:81:2a:f3:5e:d7:19:83:0b:cc:5a:
                    97:76:4d:b0:47:92:24:3f:20:d3:44:d0:87:09:5d:
                    57:78:cb:33:5b:50:6e:b0:21:30:32:8e:a6:63:a3:
                    31:1d:40:f9:b5:06:c2:b1:90:c7:6a:59:48:fc:a9:
                    17:8b:58:1e:b6:e8:10:85:e9:43:0d:2b:f8:f1:08:
                    ac:12:1f:f1:1f:7e:af:d9:86:bc:c6:07:87:4b:18:
                    ce:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0F:E3:2E:B2:25:09:BE:44:14:4C:D7:BD:72:C1:53:EA:9E:2D:BD
            X509v3 Authority Key Identifier:
                keyid:3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a383030303a3a2f33342d3334203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8f:c4:9d:dd:cc:b2:b3:5d:ba:b1:cd:c1:6f:74:d1:a2:a6:5c:
         c8:9f:9f:b2:15:0b:d1:a6:07:32:44:76:38:98:05:46:f2:c3:
         91:77:6e:d7:97:2f:77:f1:26:03:fb:59:df:62:11:24:f2:66:
         57:5e:21:99:17:db:e0:c3:e4:aa:e7:45:8c:97:b3:3f:89:6d:
         4a:fc:16:40:7a:dc:02:0f:66:fb:62:65:81:9e:48:9a:27:ff:
         12:32:e0:9f:73:bc:4d:aa:1d:74:eb:84:e9:2d:61:18:7d:5d:
         c0:13:df:20:d4:d5:4a:d9:3a:f2:e3:2c:54:28:e5:8e:37:9d:
         5a:51:d0:f5:09:0f:98:97:89:b8:9f:b8:c0:6f:f3:d2:31:05:
         d2:96:4b:29:0b:01:0e:5d:4e:e2:82:27:8d:29:dc:2b:6a:97:
         06:6e:78:fe:ff:cb:87:c7:71:ce:14:7f:8a:1e:7f:8d:20:09:
         2e:fe:76:86:8f:ea:24:3a:13:ff:3d:5a:31:35:63:aa:09:24:
         22:34:11:e5:9d:92:3f:a4:c8:c7:ed:e8:bb:86:b9:47:fe:84:
         1a:cc:3a:28:7a:06:5d:af:3f:04:2e:9a:f8:54:ed:af:dd:bf:
         dd:c8:55:b3:24:ba:df:59:b9:f6:f6:60:80:89:cd:1b:2b:f8:
         37:7c:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org