Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a613030303a3a2f33352d3335203d3e20323636343932.roa
File:                     323830343a333861383a613030303a3a2f33352d3335203d3e20323636343932.roa (raw, json)
Hash identifier:          mfBjvokjOBd0YZaVoL0LBfG9EUldjg8MlFwV4hk3UJY=
Subject key identifier:   A5:29:B2:D2:27:FF:3A:49:4F:AD:90:86:F3:AE:B0:7C:14:EA:D5:D3
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       1B85B0F0A289A997A3F86803A4F9654D5E459A27
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a613030303a3a2f33352d3335203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 16:59:28 +0000
ROA not before:           Tue 02 May 2023 16:54:28 +0000
ROA not after:            Tue 30 Apr 2024 16:59:28 +0000
asID:                     266492
IP address blocks:        2804:38a8:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:85:b0:f0:a2:89:a9:97:a3:f8:68:03:a4:f9:65:4d:5e:45:9a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:54:28 2023 GMT
            Not After : Apr 30 16:59:28 2024 GMT
        Subject: CN=A529B2D227FF3A494FAD9086F3AEB07C14EAD5D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:06:20:df:67:d5:de:98:18:69:40:7a:4d:
                    fc:9c:fd:1c:d3:c9:26:bf:db:25:be:8a:c8:2c:54:
                    7b:b1:cc:25:13:b1:83:04:f5:a5:bb:5d:ab:24:40:
                    cb:0a:96:06:5b:b0:59:5c:dd:80:43:dc:be:8f:b7:
                    31:1a:b6:51:65:c1:6b:df:cd:62:b5:4c:da:24:0b:
                    72:fb:2f:31:b2:86:6b:44:48:14:4f:74:b7:24:f4:
                    8e:89:43:b3:b9:47:a2:87:2d:24:5a:bb:79:3c:04:
                    13:b8:f2:a2:27:6d:ee:ac:d2:0d:a1:1b:66:e2:41:
                    3a:9b:61:78:59:7d:24:d6:64:a7:24:30:4b:a0:47:
                    4c:f7:69:54:74:89:a7:23:f4:8d:a7:c8:7b:40:13:
                    58:04:8b:16:ad:0f:dd:65:65:37:17:d1:fa:86:d9:
                    22:81:63:f3:86:c3:0a:b7:bb:a5:fb:42:89:c9:e7:
                    f8:d4:e9:e8:a8:d5:0b:a7:17:61:f4:6d:b4:96:f0:
                    0a:bd:31:19:ba:8c:a2:b5:91:7e:ca:9b:83:b7:c7:
                    f1:01:77:25:2f:0d:d7:82:1e:ac:47:72:b9:d9:9d:
                    ed:66:7f:59:28:b7:3f:83:69:ab:fc:34:0e:fa:56:
                    33:19:67:9e:f2:df:26:75:fd:e7:1a:da:c1:fc:da:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:29:B2:D2:27:FF:3A:49:4F:AD:90:86:F3:AE:B0:7C:14:EA:D5:D3
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a613030303a3a2f33352d3335203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         98:17:aa:c4:2d:d3:f0:b2:6b:3d:fb:e5:08:e2:cd:2c:3c:c6:
         cb:5d:19:37:ed:c1:c7:8c:ca:dd:e7:70:a0:19:4d:c0:bc:bd:
         4a:f5:3e:fc:7f:9a:53:2d:54:62:d2:85:9f:32:83:96:78:1e:
         66:17:00:37:ff:34:a7:4a:6c:b1:a2:74:7f:ab:f7:f7:ab:e2:
         fb:8f:64:8b:52:3a:ab:d4:0a:65:4e:55:ff:34:9d:d6:bc:86:
         c9:89:6d:61:6c:42:17:ae:49:05:88:dd:15:72:b5:d3:c9:55:
         9c:fa:d7:ea:00:8e:e0:09:93:a7:66:28:e7:f4:a7:2c:85:e2:
         62:4e:04:77:39:38:6c:10:f3:32:83:01:e6:79:91:3b:8f:60:
         16:0e:06:25:65:ba:35:7d:72:b0:5f:e4:88:98:68:fe:b6:50:
         b5:18:be:70:bd:3c:db:60:0b:d6:dd:ff:95:ec:c6:b0:3b:99:
         57:9e:83:68:02:f7:4f:38:e4:d4:83:2f:81:fd:70:86:f3:98:
         9e:18:ca:02:44:67:43:9e:1d:a5:96:a8:9f:fb:4b:e2:a9:f5:
         0b:3b:15:d0:5b:00:f2:fa:a3:39:fd:41:44:4d:93:51:67:1a:
         38:52:9f:3e:4f:27:ad:5c:e3:a4:18:e2:de:c5:36:53:32:19:
         97:e4:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org