Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a383030303a3a2f33352d3335203d3e20323636343932.roa
File:                     323830343a333861383a383030303a3a2f33352d3335203d3e20323636343932.roa (raw, json)
Hash identifier:          NXShLDqiu3EZWaTdHHTAVAh1CNTXY91Q1JJqMcm7MI0=
Subject key identifier:   B5:6E:5F:E1:D3:3B:87:3A:55:11:84:6D:55:50:38:D7:D3:6E:A1:0F
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       7C207B42930D90DD6ED8A71D3767302D5D653883
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a383030303a3a2f33352d3335203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 16:59:57 +0000
ROA not before:           Tue 02 May 2023 16:54:57 +0000
ROA not after:            Tue 30 Apr 2024 16:59:57 +0000
asID:                     266492
IP address blocks:        2804:38a8:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:20:7b:42:93:0d:90:dd:6e:d8:a7:1d:37:67:30:2d:5d:65:38:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:54:57 2023 GMT
            Not After : Apr 30 16:59:57 2024 GMT
        Subject: CN=B56E5FE1D33B873A5511846D555038D7D36EA10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:8f:7f:88:c5:9f:b9:1f:dc:50:5a:f5:b3:
                    0a:90:35:71:68:21:ab:a7:31:f9:54:4d:1a:68:8d:
                    93:10:a1:87:2d:87:38:40:87:81:c3:ac:8a:40:42:
                    99:52:48:f0:9e:eb:ab:b2:51:64:3b:c3:98:32:1e:
                    8d:ca:26:85:a4:22:eb:de:22:b8:11:56:3a:5d:00:
                    80:c3:3c:54:30:89:e1:7d:b7:21:3d:ec:8f:12:fc:
                    b3:61:3e:ab:44:89:77:8e:44:05:bf:f7:61:e1:42:
                    8c:5d:3d:61:81:60:1c:97:73:09:38:73:e6:9d:c4:
                    18:36:2a:ba:80:7d:c1:ed:0c:03:7c:09:62:8a:df:
                    cd:02:4a:cd:4e:e6:7d:63:2b:aa:d1:09:5e:4c:89:
                    98:05:83:b0:45:92:5c:1e:82:79:b8:d0:b4:5b:f3:
                    12:56:ba:c8:9f:b3:80:2c:69:46:b1:ba:42:8a:39:
                    28:07:d5:51:4b:e5:e0:0d:06:6b:9d:7e:bf:fe:6b:
                    54:77:e3:c1:ff:98:db:25:d2:1b:18:3c:da:4e:76:
                    a9:f1:7b:2a:a2:51:66:52:83:0d:7f:42:65:ba:0a:
                    b6:e3:e9:38:a5:db:dd:b7:52:71:83:49:02:25:a6:
                    89:d4:bf:e2:eb:f9:04:61:dd:01:b2:58:74:03:ab:
                    86:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6E:5F:E1:D3:3B:87:3A:55:11:84:6D:55:50:38:D7:D3:6E:A1:0F
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a383030303a3a2f33352d3335203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         6e:b2:cd:eb:b5:45:8e:ce:11:78:63:1a:55:46:38:a0:e2:c9:
         3c:e2:fd:e7:06:fc:c0:50:f5:9d:05:fd:19:38:e0:a5:ac:4a:
         35:c6:81:30:22:74:ce:bc:a9:9b:3a:8b:a6:7c:c8:4e:4a:7c:
         f4:d2:d4:aa:fc:2c:ac:2f:3b:5b:1b:a1:a5:b0:d2:24:77:b8:
         77:90:0c:32:20:a8:a0:9c:df:8a:9f:f4:1a:d9:97:4e:1c:56:
         f5:b9:b5:0f:5e:56:4e:52:10:29:22:e3:7d:bd:1c:d9:08:79:
         a0:8a:f4:c6:c6:a4:c6:48:db:a6:bd:d9:28:e9:a2:bb:9b:9a:
         08:15:1b:13:19:b8:f5:7a:97:f1:a7:3b:8f:36:f6:32:0c:69:
         09:4c:90:10:f1:6e:85:dd:df:9b:20:8c:31:14:7b:65:2d:8e:
         c3:84:c9:6b:f8:7e:91:ea:cd:7b:bf:96:f1:86:20:db:82:dd:
         d3:92:4e:14:19:87:6c:37:bb:a6:cf:1e:ae:10:08:ec:ff:8e:
         ac:d2:29:d0:79:0d:0b:29:08:8a:9c:33:72:9f:43:ea:44:d7:
         40:6f:11:7e:43:1a:cf:3f:31:54:c0:76:99:de:c3:44:2f:e1:
         8b:9d:e0:9c:36:77:26:e1:f0:bf:dc:9c:c3:5b:cf:a0:c2:fc:
         be:04:b8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org