Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a613030303a3a2f33362d3336203d3e20323636343932.roa
File:                     323830343a333861383a613030303a3a2f33362d3336203d3e20323636343932.roa (raw, json)
Hash identifier:          hsQw9nEpShfiAMHZ0sDu4WxKb0owqHRvh7NCVVixpPU=
Subject key identifier:   9C:F5:4A:8A:96:67:6F:01:B1:6A:C2:B1:9D:EE:FA:1A:D1:3E:29:1C
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       1F6445AA8E85E67702356D76C31C4061E0B937F1
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a613030303a3a2f33362d3336203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 17:01:03 +0000
ROA not before:           Tue 02 May 2023 16:56:03 +0000
ROA not after:            Tue 30 Apr 2024 17:01:03 +0000
asID:                     266492
IP address blocks:        2804:38a8:a000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:64:45:aa:8e:85:e6:77:02:35:6d:76:c3:1c:40:61:e0:b9:37:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:56:03 2023 GMT
            Not After : Apr 30 17:01:03 2024 GMT
        Subject: CN=9CF54A8A96676F01B16AC2B19DEEFA1AD13E291C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:3b:d0:67:7a:1b:a5:2f:a0:43:0c:f2:e8:
                    d5:98:5d:f6:18:51:fd:00:d8:8b:77:9f:a3:da:c5:
                    6a:77:29:72:5a:cc:e1:67:df:a9:7f:ba:96:ed:de:
                    6e:6b:18:8e:c3:50:14:94:24:2e:58:e5:66:39:f4:
                    e2:e8:9a:8d:a1:60:c6:dc:cd:37:a7:75:9a:df:7c:
                    18:34:3f:26:68:33:e2:80:2a:cf:28:d9:6d:a1:88:
                    12:a3:01:48:fd:d4:40:13:16:6f:c7:d1:f5:0e:c5:
                    cd:3d:7c:9f:67:7d:97:47:c9:46:d4:42:1a:2f:d8:
                    82:09:d3:87:ff:00:63:b2:f6:c8:2f:fc:7a:cc:d8:
                    8c:b5:c5:1d:79:6f:2a:0a:c7:e9:9f:4d:a3:bb:19:
                    d5:90:1c:42:fb:a8:50:9e:d3:db:2a:45:5a:09:e9:
                    10:5b:80:e9:aa:20:f1:f8:78:76:59:07:f0:54:e6:
                    58:7d:28:10:b8:2d:27:32:09:73:3f:62:c0:ae:a1:
                    b3:17:cc:ef:ee:2d:0f:9d:14:85:e9:cd:e3:7c:73:
                    79:ff:ca:ad:14:ff:71:f8:3b:a5:c1:c5:19:be:06:
                    f5:92:01:a1:91:df:a9:37:f4:83:18:44:3b:f1:c6:
                    2e:dc:c4:1d:d5:22:27:41:90:bd:d1:7e:85:8f:f3:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F5:4A:8A:96:67:6F:01:B1:6A:C2:B1:9D:EE:FA:1A:D1:3E:29:1C
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a613030303a3a2f33362d3336203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         40:24:47:0a:72:e5:39:e8:54:ae:d5:6e:68:3f:c3:b0:bd:a2:
         29:8c:72:f0:38:e9:2a:2c:37:d4:f1:55:37:dc:37:59:56:cc:
         bb:7c:13:91:37:07:b2:aa:9f:b2:b4:80:ec:e8:0b:9e:ba:28:
         34:78:a5:f1:c6:3a:90:b9:3c:63:54:5e:59:be:37:b8:7e:16:
         b7:67:be:46:c3:62:50:aa:58:7d:af:8a:d9:bf:f4:14:c5:cb:
         19:df:d7:58:85:79:dd:e4:08:3b:98:8c:53:f7:7c:97:0f:31:
         af:d3:ce:56:81:e7:79:c8:76:c9:72:42:97:20:cb:16:04:db:
         cb:d1:26:fc:2f:bb:17:e7:b3:41:59:db:35:77:c8:59:d1:ef:
         5f:b0:de:a5:ec:0a:68:93:4f:37:b1:db:12:be:2f:5f:95:f3:
         ed:ea:4f:0f:0f:24:f8:5c:52:63:e6:d9:5c:6a:4b:28:b9:60:
         14:ac:f2:8b:4b:a2:e8:25:02:11:62:a2:f7:c1:3a:57:fd:9f:
         23:50:4d:85:f1:52:56:04:0f:11:66:5d:29:51:54:6a:a4:8d:
         50:d1:23:1f:f8:d9:33:44:22:a5:79:84:34:56:82:81:51:6d:
         74:a7:05:d3:fe:10:0a:a9:29:06:7f:f6:da:57:05:50:e4:c7:
         34:fa:b2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org