Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a313030303a3a2f33362d3336203d3e20323636343932.roa
File:                     323830343a333861383a313030303a3a2f33362d3336203d3e20323636343932.roa (raw, json)
Hash identifier:          ekbyqxcAjO9/uh67RmBUsiSIeEynK7MB4PQM4qhKB2M=
Subject key identifier:   40:D2:DD:B9:09:0C:B8:10:B7:7F:A0:A5:56:04:08:B7:6D:C5:89:BC
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       737659DB8F7EF1D5A1DC4FB81F397248DDAB65AF
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a313030303a3a2f33362d3336203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 17:00:29 +0000
ROA not before:           Tue 02 May 2023 16:55:29 +0000
ROA not after:            Tue 30 Apr 2024 17:00:29 +0000
asID:                     266492
IP address blocks:        2804:38a8:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:76:59:db:8f:7e:f1:d5:a1:dc:4f:b8:1f:39:72:48:dd:ab:65:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:55:29 2023 GMT
            Not After : Apr 30 17:00:29 2024 GMT
        Subject: CN=40D2DDB9090CB810B77FA0A5560408B76DC589BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:10:4d:3f:a3:a7:82:ff:57:92:2b:39:25:
                    6f:ea:3a:77:c6:23:53:8d:73:d6:4b:4b:b0:a6:a9:
                    40:a1:88:88:f8:f6:fa:bb:8e:12:72:f8:9d:0f:e9:
                    c5:1b:5a:50:86:29:ad:91:41:38:6f:61:20:d1:7d:
                    a1:00:94:f7:92:86:99:96:fc:79:ba:18:92:5f:90:
                    d4:18:e2:f4:9f:69:f4:ac:9b:06:8f:fb:c1:4e:aa:
                    de:55:83:31:58:2b:00:9e:4e:29:6c:77:72:99:43:
                    64:55:73:e8:60:92:06:13:75:20:03:e8:03:db:63:
                    7e:76:aa:a5:d9:8b:85:57:5a:f6:f6:3d:a0:c2:7e:
                    cb:3b:66:6f:3f:7f:25:4a:97:cd:4a:63:a7:e9:07:
                    16:a7:ff:16:05:19:ef:aa:20:33:1a:3d:da:00:c0:
                    5d:33:a8:83:d3:09:ee:a9:dc:2a:70:fe:99:bf:0f:
                    3d:83:49:1d:27:e5:93:58:a9:fc:18:12:7d:0d:d2:
                    ed:e6:43:91:43:23:1e:a8:b7:fe:9b:fa:61:9b:e9:
                    16:3a:ec:6d:80:a7:0a:f7:94:d5:b2:f9:97:b2:cd:
                    11:77:c5:27:9c:33:b4:03:a5:b6:f9:ca:e2:d2:03:
                    80:85:cd:9d:4d:09:51:09:63:3d:64:34:57:5d:16:
                    21:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D2:DD:B9:09:0C:B8:10:B7:7F:A0:A5:56:04:08:B7:6D:C5:89:BC
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a313030303a3a2f33362d3336203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         59:ae:af:12:2e:39:b1:4b:ec:22:f4:42:e9:4d:a8:c9:0b:09:
         4b:fe:5f:34:90:03:c2:19:ea:69:62:42:87:2f:49:a7:43:35:
         98:f3:fb:1d:85:c3:db:f8:ae:82:21:b2:fb:b8:ed:83:b1:31:
         25:7c:6e:7e:56:89:cc:41:f6:0b:93:c4:c6:31:99:56:4e:97:
         47:d9:7d:72:cb:c0:73:6f:e4:3d:89:70:39:c1:dc:50:df:13:
         30:a8:46:da:69:32:be:75:e2:5c:10:6b:f7:d7:ca:be:9a:19:
         c1:a5:83:77:f3:9f:95:94:b0:61:dd:7c:cc:87:8c:89:bd:28:
         04:b0:db:a9:e7:d8:92:cd:8d:10:db:7c:38:99:d5:57:19:d4:
         94:61:e5:82:15:85:e3:fb:c3:3f:77:3a:83:e3:33:19:0f:85:
         d1:67:48:86:a6:95:04:e8:0b:e8:4d:1f:be:83:69:7e:3f:e2:
         de:f1:ae:20:ad:d7:2c:ae:81:0d:8d:91:92:50:c5:f9:ee:b2:
         94:9d:59:ae:e4:0d:82:ba:99:d0:dd:1e:a9:50:f9:b9:31:94:
         ff:b8:31:e2:35:13:6c:e3:47:90:a6:fa:78:03:0c:43:ce:fa:
         c9:6d:e4:86:ac:d1:22:71:fb:12:1b:26:e5:01:3f:8e:d4:87:
         68:4e:1f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org