Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a3a2f33332d3333203d3e20323636343932.roa
File:                     323830343a333861383a3a2f33332d3333203d3e20323636343932.roa (raw, json)
Hash identifier:          G8kB7WPO6yen0KK1958MEDm6AmeLgpNn8nmlT6xbduY=
Subject key identifier:   B3:2D:DD:62:A3:98:F4:3A:CE:96:7F:4F:60:B6:74:99:01:9C:50:BD
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       4ADD2AE2571CACE09192054E7DA821FA1A711167
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a3a2f33332d3333203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 16:58:56 +0000
ROA not before:           Tue 02 May 2023 16:53:56 +0000
ROA not after:            Tue 30 Apr 2024 16:58:56 +0000
asID:                     266492
IP address blocks:        2804:38a8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:dd:2a:e2:57:1c:ac:e0:91:92:05:4e:7d:a8:21:fa:1a:71:11:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:53:56 2023 GMT
            Not After : Apr 30 16:58:56 2024 GMT
        Subject: CN=B32DDD62A398F43ACE967F4F60B67499019C50BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5b:d2:73:9f:6f:63:e1:b1:c8:41:db:21:a1:
                    04:78:6c:ce:ae:09:9c:b2:37:31:1a:2e:20:53:a8:
                    ab:0e:2e:f5:b1:3e:f8:e0:a7:fa:c2:b9:f6:59:89:
                    dc:89:89:3f:4f:bb:ac:df:c2:9d:95:0c:8e:88:23:
                    ad:54:d0:f6:db:69:53:c1:5d:1f:55:9f:96:5e:8d:
                    be:b6:2c:41:1e:c5:55:9b:1c:20:02:c0:1e:94:da:
                    58:f8:b4:4d:b5:0b:dd:e6:f5:f9:8c:14:2e:4f:c2:
                    68:16:da:f1:77:ac:49:91:3d:39:d6:45:9a:ae:9f:
                    3d:3a:6b:0a:cc:05:e9:b7:4c:d5:65:9e:12:a1:f2:
                    1e:17:af:0d:1f:96:0e:ca:24:86:d7:40:c2:a9:d4:
                    ab:f4:e2:e7:65:5b:69:7d:e3:40:42:0b:b3:d3:6c:
                    d6:fe:8f:7a:90:43:db:81:56:8f:71:79:9f:c5:1d:
                    08:d3:0d:96:ca:da:ad:26:d0:62:f5:b8:ad:a6:86:
                    a1:e3:04:11:8d:f8:e7:23:ab:2b:a3:e5:e8:16:d7:
                    52:31:5c:b8:73:b6:1f:7d:4c:72:0e:c4:42:21:75:
                    bb:98:48:e3:42:4e:a9:6e:c0:d4:a5:2c:5e:6e:3d:
                    c0:60:9d:3b:ec:95:77:f6:70:2d:ae:34:1e:b8:63:
                    ed:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2D:DD:62:A3:98:F4:3A:CE:96:7F:4F:60:B6:74:99:01:9C:50:BD
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a3a2f33332d3333203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8::/33

    Signature Algorithm: sha256WithRSAEncryption
         34:1c:63:29:8a:8c:3b:dc:d1:5e:5c:41:e2:3c:d3:9e:64:c7:
         bc:5b:fe:bd:52:bb:54:3d:ea:36:00:56:a2:54:3f:21:60:ba:
         2e:97:a7:66:8f:23:41:84:ad:e7:4e:6f:02:27:4a:75:64:e0:
         f6:fb:03:94:54:e8:00:8c:90:40:e2:e7:bf:fa:f6:37:e1:f9:
         65:a6:de:46:ad:fe:c5:eb:84:58:b7:95:c7:46:d5:0c:f3:8c:
         b6:93:6b:26:4f:c4:b6:36:de:cb:3b:51:6b:32:5f:33:98:78:
         5f:97:1b:e8:ab:4d:03:fc:37:fb:e0:0d:a8:81:36:af:e1:ff:
         34:39:0c:c8:ce:c5:eb:26:8f:37:56:e7:8a:1f:2a:b4:e0:31:
         a1:b0:cd:b8:04:2a:8f:98:a1:15:08:73:1e:ef:33:f4:bb:30:
         47:dd:16:25:e4:36:14:53:86:2f:5a:e1:5d:9f:e2:db:cf:4b:
         37:0e:13:e9:be:28:94:f8:c7:93:01:cb:a5:84:45:05:ab:02:
         1b:e2:f8:34:60:f5:d4:8a:0d:58:c2:65:ff:1d:e8:d4:5d:23:
         b3:73:5a:2f:9e:7b:ca:05:2b:54:5a:45:3d:3f:2f:c6:02:7d:
         8e:ba:4f:6a:e5:63:71:d5:0f:58:ef:d6:6e:08:d2:36:cc:da:
         75:ed:20:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org