Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a343030303a3a2f33362d3336203d3e20323636343932.roa
File:                     323830343a333861383a343030303a3a2f33362d3336203d3e20323636343932.roa (raw, json)
Hash identifier:          J23OFt0VNp3yxdiWv9wGDxY3ZBlnQU6b0Txg2Ij5/L4=
Subject key identifier:   17:47:7F:B1:B0:8E:E5:ED:FC:C5:31:CA:B9:F6:9B:70:90:5F:2B:B2
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       1877020D50EF7F0B8C49E2288771A34877CAEAEF
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a343030303a3a2f33362d3336203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 17:00:51 +0000
ROA not before:           Tue 02 May 2023 16:55:51 +0000
ROA not after:            Tue 30 Apr 2024 17:00:51 +0000
asID:                     266492
IP address blocks:        2804:38a8:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:77:02:0d:50:ef:7f:0b:8c:49:e2:28:87:71:a3:48:77:ca:ea:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:55:51 2023 GMT
            Not After : Apr 30 17:00:51 2024 GMT
        Subject: CN=17477FB1B08EE5EDFCC531CAB9F69B70905F2BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:9d:30:ba:94:e5:a0:c0:e9:cb:e5:27:9c:
                    46:75:38:52:68:68:10:ee:ce:f0:95:33:78:ad:70:
                    31:9c:ef:0e:e9:82:84:4d:09:ea:b0:ed:3e:0a:49:
                    d6:24:39:fc:b0:12:d2:55:3b:1d:a2:b5:df:d9:f9:
                    f7:74:f7:52:4a:f5:1c:b4:5d:ab:80:a4:e3:85:7b:
                    17:26:b8:aa:8e:61:a7:94:3b:14:b2:dd:b4:c4:13:
                    93:cd:1c:f5:18:af:6d:a1:2c:59:ae:d5:a0:6c:af:
                    37:97:04:fb:7f:01:d3:86:82:18:e5:18:d0:c2:80:
                    19:ce:6a:04:c7:fc:a3:48:0a:89:de:34:a2:44:d4:
                    d8:0c:d2:06:e9:7b:c1:0b:24:3a:36:1d:d2:71:3a:
                    f1:9a:32:5f:1d:32:ce:33:26:04:53:bb:03:8d:0c:
                    76:f6:66:16:f5:de:45:c0:26:99:6f:1b:4c:83:48:
                    af:b2:84:d7:13:ea:ae:ff:61:22:65:4b:3c:00:db:
                    8f:1a:a8:96:c9:64:5d:0e:3e:fc:54:1b:67:c4:8f:
                    1a:d9:e5:f5:a0:f1:7d:2b:f1:ab:8c:06:d7:a5:2c:
                    7d:90:4e:bf:5d:85:3c:86:fc:20:8a:22:73:f5:d5:
                    e0:7c:20:f6:4b:81:fb:67:5f:e9:7f:21:0d:9f:84:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:47:7F:B1:B0:8E:E5:ED:FC:C5:31:CA:B9:F6:9B:70:90:5F:2B:B2
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a343030303a3a2f33362d3336203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b7:de:f1:5f:61:9f:d2:51:28:21:a1:f4:93:d7:f1:b5:09:3b:
         a1:78:99:cb:83:40:8a:e5:53:67:21:e1:5e:2b:64:9a:67:4c:
         fd:e8:c2:ed:43:9d:aa:7b:98:ed:64:da:7c:fe:0b:e0:5c:41:
         c3:0a:60:a8:63:28:80:e0:75:e6:6f:19:55:cb:13:e8:ab:8a:
         f3:d0:87:f5:01:13:e2:ab:71:cb:a7:67:f9:3e:b2:ba:dc:dd:
         68:6a:cd:cc:f4:18:b2:9c:f2:aa:a4:cf:f4:4c:78:9f:63:a4:
         4f:95:6e:9e:30:74:51:d0:0a:07:ef:02:55:ae:e2:1c:ca:1f:
         4c:3d:31:0a:e8:6a:7b:c9:53:cd:39:65:e7:da:fe:d0:25:66:
         63:2b:1e:e9:cb:dc:c8:9a:29:05:08:d1:75:e1:47:01:a8:4a:
         78:4c:3c:3a:24:73:38:3e:eb:5c:a5:ee:7f:12:6a:1f:4f:a0:
         b2:1d:3f:97:36:ce:28:64:11:e9:3f:2b:45:74:06:12:09:55:
         3d:a9:cd:17:54:33:de:6a:9b:2f:b0:46:b5:21:da:40:01:8b:
         f8:61:ec:ec:91:9b:b6:15:46:8e:cb:4d:d6:61:ba:27:d9:78:
         42:52:d7:6b:51:32:15:f3:4f:5c:36:c2:b4:d6:51:43:81:52:
         f2:37:39:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org