Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a323030303a3a2f33362d3336203d3e20323636343932.roa
File:                     323830343a333861383a323030303a3a2f33362d3336203d3e20323636343932.roa (raw, json)
Hash identifier:          jZwVaaQMuRCXqJ8mVC4S2mJrq47qJdsu7XBH5rHlqfg=
Subject key identifier:   3A:BE:82:AB:47:0E:FF:B0:CF:92:94:7E:7D:67:29:93:F8:76:A5:4A
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       70027CCA874048984A3C8649F1DC44F64543D51A
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a323030303a3a2f33362d3336203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 17:00:36 +0000
ROA not before:           Tue 02 May 2023 16:55:36 +0000
ROA not after:            Tue 30 Apr 2024 17:00:36 +0000
asID:                     266492
IP address blocks:        2804:38a8:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:02:7c:ca:87:40:48:98:4a:3c:86:49:f1:dc:44:f6:45:43:d5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:55:36 2023 GMT
            Not After : Apr 30 17:00:36 2024 GMT
        Subject: CN=3ABE82AB470EFFB0CF92947E7D672993F876A54A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:00:4a:94:cb:7f:49:fa:6b:27:45:d7:62:
                    3a:7e:80:0c:dd:0b:74:f8:8a:31:b8:73:b8:ed:73:
                    b7:8f:87:b6:f2:00:20:44:0c:92:07:4c:0e:d9:9a:
                    6f:5c:1e:9d:dc:82:c5:22:e2:72:a0:a7:d1:af:b2:
                    c6:45:a2:26:5c:59:bb:c2:88:14:b1:f7:57:83:99:
                    6b:e1:b4:bc:54:17:67:fd:69:2b:a8:94:3d:3b:ac:
                    8d:bf:bb:f8:c7:5a:8a:c3:a5:e9:61:cb:4d:f4:6e:
                    d3:12:53:3b:85:f7:be:df:39:27:cf:6b:e6:52:73:
                    7f:43:5d:b1:6b:79:03:73:1f:a5:b9:b2:ef:c1:de:
                    66:12:f1:2f:f9:66:5c:f2:57:d2:e4:bc:c3:14:f8:
                    44:59:95:95:13:68:b5:e6:8c:41:24:7a:ac:b8:1a:
                    6b:20:2b:03:20:47:97:22:e2:5d:88:17:d4:6b:35:
                    04:b5:42:b1:53:3c:1d:ff:74:d3:e6:73:62:35:6b:
                    9c:09:91:4d:bc:7a:5b:d5:89:12:1e:a4:4f:ed:4c:
                    32:8c:06:e4:32:4e:ff:8a:9c:33:65:82:59:2e:9f:
                    83:2e:57:6f:4a:4f:f2:e8:11:5c:5b:17:bc:8e:63:
                    fb:6c:21:fc:59:9f:7d:43:3e:ed:a3:6f:82:60:d0:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BE:82:AB:47:0E:FF:B0:CF:92:94:7E:7D:67:29:93:F8:76:A5:4A
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a323030303a3a2f33362d3336203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:2a:6e:9c:0c:b3:25:0e:81:a9:b3:83:a7:4b:e2:a4:a5:8f:
         c8:9b:b3:d4:7c:98:02:24:45:44:43:73:ac:d6:38:44:a2:d3:
         2a:f8:a7:47:d3:b4:1c:10:89:a4:8d:c2:83:4e:0c:22:e1:08:
         16:b9:ac:88:68:2e:42:9e:9c:69:a6:9a:68:79:00:76:0d:ae:
         41:4f:04:98:8f:e3:28:3c:57:52:95:a1:de:a3:a4:3a:21:d3:
         95:5d:33:10:dc:33:66:08:a2:9b:8b:c4:ad:72:a4:5d:ad:e0:
         7b:d9:4e:8b:b3:0f:2c:17:09:86:72:0b:de:56:34:3c:53:ff:
         ba:97:2d:4b:dc:9e:a5:e4:8e:b8:65:e7:fb:f2:02:d2:f8:43:
         b1:85:41:c3:64:d4:d9:c8:c5:ca:3f:45:ea:cd:3c:fd:ca:51:
         1b:49:9b:78:79:f6:0f:4b:7d:6a:41:7b:90:c2:6b:2a:27:a6:
         d3:7b:f7:0e:34:f4:98:22:12:fc:ff:b8:1b:47:c2:ad:e2:80:
         4c:e0:18:90:d7:00:55:00:3a:94:6e:ee:8e:0f:39:f0:75:9c:
         6d:1e:a0:b2:ef:a3:bf:aa:bb:7f:05:5f:3e:26:2a:36:98:8f:
         8c:43:30:e7:8e:40:df:83:45:64:54:f7:50:d8:a8:89:85:40:
         77:c3:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org