Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/323830343a313539343a3a2f33322d3334203d3e20323633333936.roa
File:                     323830343a313539343a3a2f33322d3334203d3e20323633333936.roa (raw, json)
Hash identifier:          mHmgfSoSw8Otuczde7Fl0E06kOTtiOhg9NV7TH3Te0E=
Subject key identifier:   30:CD:A7:B7:52:53:A5:7C:76:F4:03:E6:29:08:CF:DA:E1:C7:2C:E7
Certificate issuer:       /CN=3C6764B590CADB46BD3F31FCB03F8A3C3CE6B189
Certificate serial:       16E834B0C8116B0EEC1B91E80D9FE81CAB249818
Authority key identifier: 3C:67:64:B5:90:CA:DB:46:BD:3F:31:FC:B0:3F:8A:3C:3C:E6:B1:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C6764B590CADB46BD3F31FCB03F8A3C3CE6B189.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/323830343a313539343a3a2f33322d3334203d3e20323633333936.roa
Signing time:             Wed 08 Jun 2022 14:00:00 +0000
ROA not before:           Wed 08 Jun 2022 13:55:00 +0000
ROA not after:            Wed 07 Jun 2023 14:00:00 +0000
asID:                     263396
IP address blocks:        2804:1594::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e8:34:b0:c8:11:6b:0e:ec:1b:91:e8:0d:9f:e8:1c:ab:24:98:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C6764B590CADB46BD3F31FCB03F8A3C3CE6B189
        Validity
            Not Before: Jun  8 13:55:00 2022 GMT
            Not After : Jun  7 14:00:00 2023 GMT
        Subject: CN=3082010A0282010100A35D52002D03887245D4D90D535014017C6BCB65937A7B37E75B1E6E49086FC4AC46D7A56B729470FE3AD5A8658585AA0F12DD0EDD32EFE6AAE09382F1EF5000E0118C7B04BC7A6DB40CDA2FFFBD44BE48D6DCA09A44DE451874B199DE066F56688813D42156E1A746A7275EE349E2A45A89521B45E550742A5E5CE4BB66ECF41801C63137E186DE1D3F8F8ED6AB689187EE20D54A342C225AE15C4A692A3F26C6CBFD7FF220EC6885ABBFD2C62086AFD4CC41BFD59E2FCE981CA1B116DCC0F5A3D134CEC721D4727617AD114782A6E673E44EB654AD4AF074737A62BFC0BB4BFC4F4D762CCDD58C5A3D50A45C9E33158570183FF7FE616D973C72A0C548B3E70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:52:00:2d:03:88:72:45:d4:d9:0d:53:50:
                    14:01:7c:6b:cb:65:93:7a:7b:37:e7:5b:1e:6e:49:
                    08:6f:c4:ac:46:d7:a5:6b:72:94:70:fe:3a:d5:a8:
                    65:85:85:aa:0f:12:dd:0e:dd:32:ef:e6:aa:e0:93:
                    82:f1:ef:50:00:e0:11:8c:7b:04:bc:7a:6d:b4:0c:
                    da:2f:ff:bd:44:be:48:d6:dc:a0:9a:44:de:45:18:
                    74:b1:99:de:06:6f:56:68:88:13:d4:21:56:e1:a7:
                    46:a7:27:5e:e3:49:e2:a4:5a:89:52:1b:45:e5:50:
                    74:2a:5e:5c:e4:bb:66:ec:f4:18:01:c6:31:37:e1:
                    86:de:1d:3f:8f:8e:d6:ab:68:91:87:ee:20:d5:4a:
                    34:2c:22:5a:e1:5c:4a:69:2a:3f:26:c6:cb:fd:7f:
                    f2:20:ec:68:85:ab:bf:d2:c6:20:86:af:d4:cc:41:
                    bf:d5:9e:2f:ce:98:1c:a1:b1:16:dc:c0:f5:a3:d1:
                    34:ce:c7:21:d4:72:76:17:ad:11:47:82:a6:e6:73:
                    e4:4e:b6:54:ad:4a:f0:74:73:7a:62:bf:c0:bb:4b:
                    fc:4f:4d:76:2c:cd:d5:8c:5a:3d:50:a4:5c:9e:33:
                    15:85:70:18:3f:f7:fe:61:6d:97:3c:72:a0:c5:48:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CD:A7:B7:52:53:A5:7C:76:F4:03:E6:29:08:CF:DA:E1:C7:2C:E7
            X509v3 Authority Key Identifier:
                keyid:3C:67:64:B5:90:CA:DB:46:BD:3F:31:FC:B0:3F:8A:3C:3C:E6:B1:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3C6764B590CADB46BD3F31FCB03F8A3C3CE6B189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C6764B590CADB46BD3F31FCB03F8A3C3CE6B189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/323830343a313539343a3a2f33322d3334203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1594::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:4f:96:1f:e9:4b:1d:f6:29:bc:ee:35:d0:55:70:fc:cf:65:
         a0:ed:85:7b:c6:bd:a5:27:b8:a5:13:ff:35:26:98:95:08:c5:
         a6:27:fc:ff:a3:82:d7:ab:04:32:e9:f3:ff:9b:7a:7d:7a:1d:
         fc:fe:1e:a2:3c:35:e8:52:3f:ff:6a:a1:dc:d4:dd:19:89:1b:
         ec:7b:13:17:63:80:87:74:d4:91:f3:05:f5:fb:fa:2e:55:9d:
         48:a3:9c:3d:8d:a1:78:ce:8b:93:4a:cb:cb:5a:a7:3a:0d:c4:
         39:3d:a7:ae:87:21:2d:6e:af:aa:86:49:d3:3f:39:9e:38:3e:
         4e:1d:56:df:80:18:5c:a4:69:5b:44:3e:2d:6f:78:be:65:15:
         db:72:01:fb:1f:3d:f1:70:2f:b3:79:a2:da:88:e7:35:a9:87:
         d1:89:c1:17:31:5e:d0:61:c2:88:70:fe:3c:90:c6:cf:69:48:
         55:15:11:de:62:71:f8:24:ec:27:1c:84:25:c3:30:ce:58:f2:
         34:ec:7d:f7:b5:01:e4:52:b5:42:ae:aa:7c:1e:2a:d9:b8:88:
         54:a6:9b:2a:22:bb:6f:1b:37:1f:51:48:db:a4:d8:1f:77:3b:
         20:61:47:82:54:36:2c:84:fc:e6:39:c5:d2:be:97:67:7b:90:
         09:65:b9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org