Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a3a2f33352d3335203d3e20323636343932.roa
File:                     323830343a333861383a3a2f33352d3335203d3e20323636343932.roa (raw, json)
Hash identifier:          dEkQm2weNO5fAtcQEoGJJCYT84Rb2CwKpKE2mYg0CZc=
Subject key identifier:   4C:07:4D:87:A9:8B:6E:E6:F8:75:C6:E0:34:5F:70:EF:9D:B7:72:29
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       2CD3D2A7B21A93A76AEE5A220DCCF3159380FE78
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a3a2f33352d3335203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 16:59:03 +0000
ROA not before:           Tue 02 May 2023 16:54:03 +0000
ROA not after:            Tue 30 Apr 2024 16:59:03 +0000
asID:                     266492
IP address blocks:        2804:38a8::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d3:d2:a7:b2:1a:93:a7:6a:ee:5a:22:0d:cc:f3:15:93:80:fe:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:54:03 2023 GMT
            Not After : Apr 30 16:59:03 2024 GMT
        Subject: CN=4C074D87A98B6EE6F875C6E0345F70EF9DB77229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3d:dc:ed:89:47:d1:94:4d:92:46:30:1a:60:
                    ba:bd:f5:bf:0b:dc:8f:1e:7e:70:00:6f:fa:9c:00:
                    1e:17:6e:a9:76:9a:08:11:fa:6e:1c:fb:1e:2d:0e:
                    28:ea:6b:ce:38:5c:6c:92:2b:f6:a2:e3:f2:51:ea:
                    06:e4:30:14:59:61:02:1c:f5:e1:94:5b:a3:7f:d9:
                    bc:23:57:3c:99:41:4f:14:70:bc:d1:df:34:9f:e6:
                    36:50:80:c3:93:db:ad:71:3d:43:bc:bb:3a:9c:66:
                    df:0b:39:99:9b:ce:96:dd:88:f1:38:a7:48:fa:c7:
                    ec:a8:5c:ce:e6:0f:b6:d5:15:9c:6a:59:1f:58:c6:
                    0b:c7:e6:b8:4a:77:99:53:18:5f:85:38:fe:a4:3d:
                    66:60:1c:d4:8a:73:f8:bc:20:4d:a6:30:3e:11:68:
                    bd:6e:db:c0:93:b8:40:ca:da:76:38:01:51:2f:d1:
                    12:10:2d:68:99:de:95:50:ff:f1:20:fd:f9:61:38:
                    a0:60:6a:2c:6d:29:17:3a:81:8f:2e:e9:f2:03:be:
                    fc:a0:71:44:c5:c0:e3:17:0f:f0:44:df:c9:70:98:
                    74:f3:1b:c0:a3:46:13:49:6f:4a:ed:ef:91:70:2c:
                    d2:e9:e2:a5:51:af:e0:bc:95:d3:b3:e1:6b:9b:af:
                    89:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:07:4D:87:A9:8B:6E:E6:F8:75:C6:E0:34:5F:70:EF:9D:B7:72:29
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a3a2f33352d3335203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8::/35

    Signature Algorithm: sha256WithRSAEncryption
         b9:f9:a1:14:2a:61:6f:59:17:95:f8:56:56:26:63:5c:f1:3c:
         c6:a0:07:92:ca:86:07:75:8b:6a:5c:05:3b:e3:fc:f3:ea:d1:
         f7:1b:57:b2:23:65:23:73:8d:ff:19:ed:f4:2a:d7:30:b3:11:
         8f:14:be:fd:94:90:76:60:be:7f:f4:fb:5f:6c:d4:1c:eb:3d:
         ae:f0:42:e3:5f:10:49:fb:f1:e7:d2:ec:fb:49:fe:31:79:75:
         93:39:26:c3:cb:6c:fe:87:df:40:48:cc:e8:4c:47:14:8c:ff:
         4f:2b:76:2a:df:06:d8:92:20:d5:31:8a:d0:e0:fc:96:2f:9c:
         fd:44:26:2f:c8:3c:ca:75:12:7f:d0:62:19:1e:1e:f6:0e:c8:
         24:4d:4a:a1:db:d1:45:6d:fd:14:0c:8b:22:b6:a3:5b:b3:11:
         2f:aa:6b:50:56:22:4b:7b:dd:38:7d:0a:5a:78:5e:6f:58:80:
         ef:08:0b:3d:14:09:b3:99:21:e3:5e:45:06:6e:ae:7f:46:c8:
         c1:c5:33:b8:2b:30:fe:91:47:56:c5:67:76:ba:a7:83:e1:63:
         22:0a:21:92:24:60:f4:34:91:2f:01:25:e4:d6:af:76:8a:32:
         6e:28:22:b4:46:da:ff:e8:55:32:b9:2d:37:74:d9:19:07:21:
         de:c6:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org