Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a323030303a3a2f33352d3335203d3e20323636343932.roa
File:                     323830343a333861383a323030303a3a2f33352d3335203d3e20323636343932.roa (raw, json)
Hash identifier:          kPQ8v9CQ66Yh/UwSyLY3PHEKvXkA4czMYzT9EQ5OwBE=
Subject key identifier:   1B:AE:40:10:42:A3:A2:B0:14:80:FD:08:45:47:74:71:E9:4C:18:37
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       7DFC766CD25D33E48C70F51234AB12A570678762
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a323030303a3a2f33352d3335203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 17:00:33 +0000
ROA not before:           Tue 02 May 2023 16:55:33 +0000
ROA not after:            Tue 30 Apr 2024 17:00:33 +0000
asID:                     266492
IP address blocks:        2804:38a8:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fc:76:6c:d2:5d:33:e4:8c:70:f5:12:34:ab:12:a5:70:67:87:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:55:33 2023 GMT
            Not After : Apr 30 17:00:33 2024 GMT
        Subject: CN=1BAE401042A3A2B01480FD0845477471E94C1837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:7c:bb:38:6b:64:d9:f6:21:68:ca:1b:7c:
                    06:2e:7e:81:1e:6b:e6:46:95:9a:3a:6b:0c:97:7c:
                    73:82:cf:1b:a0:60:4f:11:31:2a:f1:91:31:be:17:
                    c8:fc:da:87:f8:3a:81:de:92:01:83:66:7f:38:68:
                    b8:1e:1d:85:8f:98:b4:c3:86:02:04:27:ad:c0:69:
                    87:1f:43:17:37:7a:7e:50:91:7d:e9:e8:c1:d8:c1:
                    d1:71:94:6b:67:f8:34:7d:2a:af:f9:4e:29:73:5f:
                    ad:75:3d:55:d8:a0:52:92:22:57:2a:c7:f1:1b:b8:
                    34:1a:65:2d:6e:77:15:b2:87:b5:cc:21:91:11:b2:
                    b7:e0:b5:6b:72:2b:24:25:14:92:47:c5:e1:7a:45:
                    51:28:0e:75:fb:6d:5b:38:74:0d:60:a4:6d:c5:8d:
                    a3:e8:66:b0:a1:76:38:22:c6:dc:1d:2b:83:a4:3f:
                    ad:3a:5b:6d:77:84:2a:72:a4:f6:eb:28:e5:2c:e6:
                    4e:30:05:d0:89:cf:71:71:94:1b:de:a3:cd:36:f4:
                    d7:93:84:de:13:35:31:21:ab:70:9a:33:ac:7c:00:
                    82:14:2d:9b:0a:3f:82:07:a8:78:eb:fe:f9:d2:69:
                    aa:5a:67:9c:89:35:55:0e:e8:25:f9:a5:23:d2:36:
                    ff:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AE:40:10:42:A3:A2:B0:14:80:FD:08:45:47:74:71:E9:4C:18:37
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a323030303a3a2f33352d3335203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8a:0d:e2:88:f0:21:12:7c:9e:16:88:13:23:d7:a8:ae:47:7f:
         51:6b:81:ba:ff:c0:c7:a0:c7:80:3e:f9:2a:d3:cb:c6:3a:2f:
         e4:99:68:60:0d:91:c9:ad:f6:28:7b:79:80:8c:48:88:d7:ad:
         3d:39:0b:33:13:4d:7f:16:08:bc:79:8f:a0:99:32:e9:cd:3d:
         58:2c:f0:db:fe:b2:0f:39:d6:6e:23:cf:0e:12:39:19:da:25:
         ba:a3:f2:5f:72:40:19:24:12:e0:fb:62:5b:9a:ed:e3:5a:f1:
         e6:69:33:5f:98:0d:d2:86:0a:13:fb:21:c0:bf:96:3f:2e:df:
         82:e2:0c:b4:3b:34:86:32:89:7b:83:8d:2f:e0:e0:09:6d:14:
         0b:26:1a:36:f8:95:42:9c:db:75:a5:de:c2:e1:fb:95:33:1f:
         27:48:9c:89:d4:33:b5:a9:33:ec:67:38:79:c6:c3:5c:2e:9d:
         76:dd:55:4e:24:ab:0e:2d:40:87:4d:d1:44:e4:57:83:30:d0:
         16:8f:34:ae:c1:2f:a5:55:18:4f:6c:99:a2:34:0b:a2:4f:83:
         fa:af:c0:06:36:a3:b3:f6:c0:80:b1:12:4d:33:b8:2a:6f:ae:
         80:2f:15:c1:4e:db:4a:51:1f:03:29:bf:82:4f:49:7d:3e:ea:
         bd:34:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org